This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier: LoK4hy2g0GjUuhVVKjUkhHY2CZ2rHf7PX3qOc9i8u5Y=
Subject key identifier: 8E:D1:1C:CC:C9:27:C9:F9:70:71:21:44:13:28:75:85:9E:7F:94:55
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 019B36B3DF91CF361D81155DA867CC15EB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number: 179A
Signing time: Fri 19 Dec 2025 13:01:56 +0000
Manifest this update: Fri 19 Dec 2025 13:01:56 +0000
Manifest next update: Sat 20 Dec 2025 13:01:56 +0000
Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: /mEOk50S8Yg54tLGN1N0PTUAbTFfV7c4H5dHmvqFELg=)
2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=)
3: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=)
4: rkMUgmhsqbXXRN9oFUiXQpZDv8U.roa (hash: qJePBEGYHTN0gemfII7b2mdoR3N62f9upxA2WFELbiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:b3:df:91:cf:36:1d:81:15:5d:a8:67:cc:15:eb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Dec 19 13:01:56 2025 GMT
Not After : Dec 20 13:01:56 2025 GMT
Subject: CN=8ed11cccc927c9f970712144132875859e7f9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:b9:f0:c3:24:53:5f:7f:1d:81:bd:38:ef:
29:82:e6:ab:03:eb:cb:78:c8:dd:16:47:e2:1a:99:
94:b0:f4:b3:a8:ba:27:71:4d:7f:d8:d3:fc:99:5b:
fc:05:3b:c5:1b:7f:77:84:15:a6:2c:67:36:4d:0e:
b0:47:e8:e9:87:b9:fd:52:01:a0:2f:4e:f9:c5:44:
42:7e:cf:34:b5:ca:66:d4:44:ae:3c:6b:a8:f8:12:
93:23:77:ad:16:6c:b6:b8:8e:ac:2d:08:8f:37:96:
d4:dd:6c:ef:f8:88:bb:68:1f:a7:d3:56:cd:67:a9:
40:fb:fe:1a:ec:c6:98:81:bb:bb:80:d8:22:b6:04:
a3:02:88:fc:3f:98:f5:9b:00:63:a1:97:ed:d6:3f:
54:91:dd:01:30:77:91:a9:78:d5:72:58:fe:a7:89:
cf:a3:7a:d2:39:1e:a7:e4:37:d0:10:56:d5:30:1f:
4a:1a:8b:9a:31:a1:04:37:7f:43:e6:71:97:9d:cf:
bb:ab:b4:bb:79:b0:88:de:55:8c:1d:cf:6f:46:dc:
1e:32:b1:7d:61:59:98:a9:ae:f1:5b:34:68:25:e1:
0b:76:97:03:19:1b:35:cb:68:3d:1f:e0:68:70:19:
db:03:f8:86:1a:e5:b8:b1:87:92:ba:86:40:87:a3:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:1C:CC:C9:27:C9:F9:70:71:21:44:13:28:75:85:9E:7F:94:55
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c7:c3:ea:64:cf:e5:cf:1a:d7:36:a8:c0:65:7f:ec:c9:e4:
cf:70:86:96:3c:23:1f:59:ee:9e:2e:22:73:9a:62:f8:f2:a0:
f4:22:9b:2a:de:e5:f7:c4:fc:9a:75:43:4e:03:a5:80:09:33:
34:cc:19:2e:62:0d:1d:b0:d6:ff:1a:a3:62:d6:08:ff:58:e8:
0f:11:d7:8f:91:ac:67:a1:f7:32:c0:23:5c:96:1c:e8:57:86:
ca:01:ae:9d:90:59:f6:92:09:ae:9d:80:47:88:c8:7e:da:31:
98:e5:fd:94:74:5f:b1:0b:85:38:e5:86:9a:82:bd:6c:0a:bc:
31:a1:3f:cd:ae:a9:07:f9:65:c0:37:1a:34:6c:bd:82:d5:64:
17:da:0e:9a:70:99:f5:74:fd:02:3d:27:e6:f7:76:00:99:3f:
9c:87:df:fb:95:5a:f3:80:ae:58:17:8a:54:63:6d:a2:ff:14:
f2:5a:39:90:75:9c:6c:21:45:b6:37:34:df:f5:dd:9e:91:f4:
ee:6d:6f:e4:8f:f9:b8:06:2a:b6:e6:3c:38:34:a9:0d:97:82:
ae:6a:50:a0:7c:dd:21:72:6e:60:89:f9:98:5a:78:35:04:f7:
b2:50:1c:14:03:9b:84:ed:ba:af:11:ef:d8:cf:d9:14:1f:f9:
1e:05:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:01:49 2025 by rpki-client