This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: wW9NToq0JwvYbytVPtYbtCHT4gesA1YheauHcnAtvvc=
Subject key identifier: 15:5E:A6:68:CE:31:BC:81:AC:79:D5:E8:2C:E5:48:78:A1:9F:AD:8E
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019B484B41A9A94041CDF20BC3F47E3766D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 16CD
Signing time: Mon 22 Dec 2025 23:00:50 +0000
Manifest this update: Mon 22 Dec 2025 23:00:50 +0000
Manifest next update: Tue 23 Dec 2025 23:00:50 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: cswZyTfuYclxU++NQHF++cot411HPL8YNHVGVyIXuHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:4b:41:a9:a9:40:41:cd:f2:0b:c3:f4:7e:37:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Dec 22 23:00:50 2025 GMT
Not After : Dec 23 23:00:50 2025 GMT
Subject: CN=155ea668ce31bc81ac79d5e82ce54878a19fad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:13:56:a3:92:62:fb:a6:32:c5:bc:6b:50:
76:99:e3:e0:48:3d:0f:f6:96:c9:9a:88:d8:39:a5:
4e:54:5c:cf:54:e5:36:6d:f8:46:b6:65:d9:c1:1b:
0f:50:b9:bb:f6:e3:f7:ab:bf:02:74:6d:be:85:33:
03:95:2a:6c:42:9e:c4:3c:87:be:c9:f4:40:0e:df:
e1:4c:5a:c9:79:a7:44:51:3b:c9:12:d2:2f:51:f3:
dc:d2:2c:a7:d4:59:14:8c:d4:f0:af:7b:65:f7:59:
5e:26:c1:78:8f:e4:e0:b5:ee:b3:e0:d0:dc:0a:f3:
fd:10:c8:78:29:3b:28:de:91:a7:7f:d8:d5:ac:3e:
ca:66:29:b8:ea:ae:36:10:6e:3f:b4:d1:65:03:58:
e4:0a:a9:8d:33:ed:54:94:55:a6:c4:b0:67:80:49:
70:99:98:33:f4:f1:69:e7:ed:4f:60:3a:92:f6:ff:
57:ae:b7:10:eb:78:f1:7c:99:b9:f1:8e:da:29:e6:
79:2e:4f:d5:1a:e5:4f:ee:58:d8:a4:f3:61:65:c2:
c2:4c:0e:d7:84:78:ce:ef:6b:18:28:63:4f:db:58:
f1:fa:86:b5:9e:e0:fb:80:78:10:34:f7:51:ac:5a:
b5:1d:80:6d:fb:0b:4e:57:8c:d5:42:53:93:37:4c:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:A6:68:CE:31:BC:81:AC:79:D5:E8:2C:E5:48:78:A1:9F:AD:8E
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:e6:07:b9:2c:b0:03:71:42:97:13:8a:0e:30:b4:ea:5f:
e5:d0:33:8e:a9:d0:c0:06:32:06:ad:70:48:61:3d:b1:5b:f7:
49:72:3e:49:d6:71:05:67:62:1e:b6:0b:29:4e:27:61:ea:cb:
3e:e2:40:ea:52:32:37:3f:cd:ce:b7:7a:ef:af:ae:80:34:bf:
42:d2:76:db:0e:af:70:1d:d8:d3:aa:c2:3d:7c:0d:b4:71:3a:
5a:9d:a1:48:d4:59:19:25:ea:1e:d4:91:35:df:a7:55:32:96:
37:71:b9:d4:b8:24:d1:25:db:43:ae:58:cf:19:bc:16:f8:bd:
0b:8d:04:af:93:cb:dc:49:b1:d4:12:42:08:00:6a:16:dc:91:
96:3b:49:1c:f5:68:8c:8a:57:8b:3d:d7:4c:6e:b4:1c:70:c7:
f8:d1:c9:bc:09:20:84:53:6c:42:bc:74:47:f6:d2:c6:42:36:
26:8c:87:f0:2f:18:ed:3d:4e:10:54:3a:ab:10:78:56:3a:13:
24:22:fa:05:a1:b1:0f:65:cc:6d:68:43:d1:8d:3a:77:88:e7:
ff:30:cf:80:15:18:d4:f1:e0:15:b3:ff:1b:87:cb:04:20:0c:
2a:b4:23:71:25:df:a0:ea:06:21:6b:29:48:5d:ec:13:1f:98:
8e:be:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:18:46 2025 by rpki-client