This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 8Tu/37UmyPHa6747wcKO94nkDG1XKlebHzi9oRgY0hk=
Subject key identifier: 95:88:77:B6:2B:34:21:CA:24:D5:60:15:93:C2:ED:AB:2B:5E:B3:8E
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019B4A39C3D4355B9517A80C402E72FD932A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 16CE
Signing time: Tue 23 Dec 2025 08:00:58 +0000
Manifest this update: Tue 23 Dec 2025 08:00:58 +0000
Manifest next update: Wed 24 Dec 2025 08:00:58 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: H7OD/FEVcmsn68O/OCsxkEkbt90Nwa5D5qcl5Oe02QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:39:c3:d4:35:5b:95:17:a8:0c:40:2e:72:fd:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Dec 23 08:00:58 2025 GMT
Not After : Dec 24 08:00:58 2025 GMT
Subject: CN=958877b62b3421ca24d5601593c2edab2b5eb38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:51:a8:e0:a0:51:b8:14:d7:f1:a9:b3:94:
37:35:86:ac:46:2e:31:30:86:3f:ac:30:60:a5:57:
17:9b:e1:09:8c:0b:1c:8a:f6:5d:de:d7:5b:78:73:
54:c1:f4:a6:c3:8d:30:8d:2b:5d:2a:ea:4d:c1:0f:
d5:dc:95:c8:d2:2c:02:1b:47:3e:84:1c:5a:a6:47:
a0:a5:b2:9e:87:b3:0a:b8:92:69:8c:8c:32:d2:c6:
a2:ef:89:30:a8:32:e6:69:a8:c9:72:8f:44:99:3c:
75:7e:d8:85:57:df:3d:0c:cc:bd:da:1c:ad:7b:37:
9b:01:33:3b:1e:35:33:d5:6a:ba:57:62:86:d3:ec:
0b:b7:13:cc:e4:7a:fb:e0:1c:68:dd:15:06:44:e9:
a9:fd:36:79:8a:a3:bc:86:aa:fb:3d:e9:c0:7b:00:
3e:25:2a:75:f3:bc:14:16:63:20:0a:1e:1a:e4:60:
ca:21:3c:d1:2c:e7:1c:ed:af:2d:dd:14:0c:69:5e:
36:75:59:2a:a3:ce:1f:93:43:0a:a9:5c:ae:ac:ed:
e0:df:c4:26:ca:38:08:53:61:3c:e0:dd:bc:6e:07:
02:cf:3e:3e:11:51:88:4c:1e:7a:88:9c:4b:38:48:
5d:cf:f3:f9:44:3b:5e:4c:87:e3:5b:7b:60:b3:a3:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:77:B6:2B:34:21:CA:24:D5:60:15:93:C2:ED:AB:2B:5E:B3:8E
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:8a:62:71:09:fc:1a:1c:c4:db:b4:ea:a8:65:8f:56:cb:
17:4c:41:32:24:36:93:df:b6:34:af:62:38:fc:44:d0:92:0f:
42:3f:31:66:c6:a8:62:00:02:2d:b0:47:28:29:8a:92:6b:af:
75:f7:e0:83:55:7e:b2:ab:08:23:a0:a1:06:d3:c7:ad:4b:a0:
ec:35:f9:35:26:b6:11:50:7b:86:db:4c:2d:6e:08:c7:88:89:
a0:19:68:af:16:9a:c8:5e:eb:bb:54:d3:5f:b5:a0:56:72:6d:
12:ef:7b:e3:9c:b0:2d:d9:0e:90:2f:6e:c9:15:70:f7:03:b3:
7d:38:c5:71:b7:50:fb:f3:97:7a:60:93:9b:30:12:d7:90:ee:
f1:2e:7d:3e:55:d6:43:18:38:28:08:b4:31:b2:14:73:38:9f:
39:ab:e6:c1:de:53:98:5d:98:e8:2f:ff:1a:f7:fe:98:22:c4:
20:c6:0f:c5:7a:df:95:fb:be:8f:98:52:ec:0a:94:a2:29:2e:
c9:bc:ee:7c:0c:42:37:81:75:fd:b0:2f:07:94:8f:f1:c7:cd:
05:fa:3a:fe:70:ed:d1:a7:9b:95:1b:17:80:04:40:ac:07:23:
27:7a:31:a2:dd:b0:72:a4:be:b2:50:4d:cf:f7:78:fa:64:18:
1e:73:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:48:13 2025 by rpki-client