This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier: ZFsMiLVsmb8HB7tjNVnAU2BQFTewb/9HNo6mFeOpv1g=
Subject key identifier: 03:1A:38:B7:1E:4E:7E:AF:C4:49:DC:0F:94:74:F7:B5:27:DD:7A:4A
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 019B37FCF8EEC57833AA04C61F32216FE4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number: 13AB
Signing time: Fri 19 Dec 2025 19:01:24 +0000
Manifest this update: Fri 19 Dec 2025 19:01:24 +0000
Manifest next update: Sat 20 Dec 2025 19:01:24 +0000
Files and hashes: 1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: A71QuXHreH9boc7zp1p1tntEk8ClpzCsB0PC+QXR2kw=)
3: 9eH4i0p6oCfS5Co6koOAWFXm7Jw.roa (hash: tsyzy52lOJrhyfRNf4yeW+R41ItQLxSE8ed3yFpy/I0=)
4: F1oHARDbb0413dSyEGLjEDHpSFU.roa (hash: /vKh5/kgPMeg0YH31fC61X6lQFd8cqgLCdJuYa3DtJo=)
5: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
6: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:fc:f8:ee:c5:78:33:aa:04:c6:1f:32:21:6f:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Dec 19 19:01:24 2025 GMT
Not After : Dec 20 19:01:24 2025 GMT
Subject: CN=031a38b71e4e7eafc449dc0f9474f7b527dd7a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:67:56:2b:8a:63:34:f5:0e:18:10:40:07:
55:f0:9f:a4:89:5a:3c:f5:d4:75:8a:6f:75:e4:4e:
27:80:16:b6:ca:b8:cd:73:2e:aa:0c:a8:e5:5e:f9:
00:e9:68:13:71:58:d0:10:97:c1:09:7d:a5:33:a5:
ae:68:96:d0:3c:fd:02:87:ea:73:e8:24:69:62:38:
14:bf:21:ab:84:02:eb:58:61:8f:ea:3d:a7:73:48:
58:88:3f:b1:da:63:eb:a0:ca:38:b3:ce:5e:77:c4:
71:02:3d:ed:fe:70:38:ec:30:af:52:e7:3e:a7:79:
fb:5c:98:86:03:85:9a:0f:55:ee:20:92:c3:2d:25:
94:c2:ff:13:01:37:46:a5:56:a7:ff:f0:44:99:15:
f4:cc:e8:fa:31:71:cd:9d:71:e9:6d:81:d1:f3:41:
bd:46:8a:41:d9:fe:58:35:44:78:4e:af:6c:c9:70:
80:20:2b:ce:1f:28:8f:54:54:d6:8f:c3:6e:39:08:
c4:4b:9b:4b:05:34:49:82:48:57:48:8c:9f:56:e0:
34:6e:ae:6a:11:d3:28:35:c7:54:e3:45:93:21:c9:
42:53:39:4e:2a:0e:cf:f0:73:15:98:b8:4b:a8:3a:
2c:00:dd:3a:85:59:7f:a7:2b:aa:9b:e0:bf:bf:84:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:38:B7:1E:4E:7E:AF:C4:49:DC:0F:94:74:F7:B5:27:DD:7A:4A
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:b0:80:23:65:86:f2:cf:4e:c8:ef:93:98:cc:aa:9e:0c:
3a:20:17:a1:aa:44:a0:0e:75:4a:f7:74:a0:a2:12:81:e8:dd:
79:2c:cb:d6:3f:5c:01:b4:bc:5a:77:53:1c:45:f5:20:e6:69:
d0:71:92:45:33:5e:a9:7e:5e:dd:32:a2:ce:80:7b:91:e8:28:
55:9e:10:72:0c:89:3b:72:d9:57:26:c2:0f:72:7d:f4:8f:e6:
29:b1:39:75:46:56:31:e1:1c:5d:91:ae:94:11:1c:86:96:93:
25:ef:c6:c2:02:4e:f2:00:71:e1:07:82:77:15:75:1b:ab:83:
06:ba:f8:dd:a5:84:7a:12:60:f9:17:1d:58:46:66:d2:3e:a8:
e4:02:87:4c:50:f2:d7:83:90:61:f7:7c:3d:6b:9f:71:07:12:
8d:16:66:6f:ab:ea:3f:d7:7f:9b:81:b1:6a:e2:f0:fb:49:d7:
d5:aa:43:a8:85:21:55:8f:65:02:37:c0:d4:11:0c:f5:2c:a1:
2b:c4:43:97:7b:da:2e:da:7f:fa:11:52:9e:7a:35:96:ac:f4:
a8:88:8c:ce:ec:f5:d9:10:2b:20:6b:5b:c3:a4:c3:8f:6c:68:
01:52:f5:40:4f:e3:89:b3:2e:12:34:5b:72:94:6b:4c:5c:5f:
5d:55:d0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3/PjuxXgzqgTGHzIhb+SgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjUxMjE5MTkwMTI0WhcNMjUxMjIwMTkwMTI0WjAzMTEwLwYDVQQD
EygwMzFhMzhiNzFlNGU3ZWFmYzQ0OWRjMGY5NDc0ZjdiNTI3ZGQ3YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9nViuKYzT1DhgQQAdV8J+kiVo8
9dR1im915E4ngBa2yrjNcy6qDKjlXvkA6WgTcVjQEJfBCX2lM6WuaJbQPP0Ch+pz
6CRpYjgUvyGrhALrWGGP6j2nc0hYiD+x2mProMo4s85ed8RxAj3t/nA47DCvUuc+
p3n7XJiGA4WaD1XuIJLDLSWUwv8TATdGpVan//BEmRX0zOj6MXHNnXHpbYHR80G9
RopB2f5YNUR4Tq9syXCAICvOHyiPVFTWj8NuOQjES5tLBTRJgkhXSIyfVuA0bq5q
EdMoNcdU40WTIclCUzlOKg7P8HMVmLhLqDosAN06hVl/pyuqm+C/v4TstQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMaOLceTn6vxEncD5R097Un3XpKMB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFOwgCNl
hvLPTsjvk5jMqp4MOiAXoapEoA51Svd0oKISgejdeSzL1j9cAbS8WndTHEX1IOZp
0HGSRTNeqX5e3TKizoB7kegoVZ4QcgyJO3LZVybCD3J99I/mKbE5dUZWMeEcXZGu
lBEchpaTJe/GwgJO8gBx4QeCdxV1G6uDBrr43aWEehJg+RcdWEZm0j6o5AKHTFDy
14OQYfd8PWufcQcSjRZmb6vqP9d/m4GxauLw+0nX1apDqIUhVY9lAjfA1BEM9Syh
K8RDl3vaLtp/+hFSnno1lqz0qIiMzuz12RArIGtbw6TDj2xoAVL1QE/jibMuEjRb
cpRrTFxfXVXQVQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:38 2025 by rpki-client