This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: K1FUl2L/d1xDWZ+XQETu3x5gk7OuYdb3GvjpgeDIQ4I=
Subject key identifier: 59:67:5F:ED:DA:95:54:BD:7C:1E:CC:5D:F2:D1:46:49:B3:EC:F1:7B
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019B5CAE0F550598DD67E155130F4EF88CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 179A
Signing time: Fri 26 Dec 2025 22:01:09 +0000
Manifest this update: Fri 26 Dec 2025 22:01:09 +0000
Manifest next update: Sat 27 Dec 2025 22:01:09 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: SsR8ujPoDJLWsHCcoGM6liWOsjtKZczd9PJVFBTpn7Y=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:ae:0f:55:05:98:dd:67:e1:55:13:0f:4e:f8:8c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Dec 26 22:01:09 2025 GMT
Not After : Dec 27 22:01:09 2025 GMT
Subject: CN=59675fedda9554bd7c1ecc5df2d14649b3ecf17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:f3:7e:d3:d1:4b:cd:fd:7a:e7:32:ad:11:
c8:d5:af:26:c7:4a:83:46:71:58:6b:76:df:51:9b:
d8:8b:43:5f:11:13:e4:2a:95:b2:78:f7:62:66:44:
76:e6:3b:90:c8:fb:10:5f:67:77:ba:ea:cf:ed:13:
02:63:f2:bb:50:71:db:e3:09:a1:44:e6:28:a8:12:
da:ac:f9:cb:37:c5:a0:3e:00:fe:e2:a6:e6:a7:8b:
61:99:43:69:e4:73:80:72:be:77:4b:b7:1e:6e:cf:
a5:84:1f:f7:44:60:3c:03:13:ef:25:a5:0e:79:24:
fe:1c:89:9c:d5:7b:c0:35:09:16:b2:b2:30:75:54:
67:04:cc:99:36:c9:e8:cc:98:95:b6:f5:90:42:62:
2d:80:1b:b5:c4:e1:e2:5f:80:1d:1b:20:bc:b6:56:
a2:ef:ae:77:d8:25:24:9f:d7:a7:b8:0e:70:f8:b8:
c9:48:60:61:79:33:65:9d:fe:f5:1b:5d:c0:f3:85:
b7:c0:85:91:3c:5c:0f:0c:3e:56:82:78:21:07:ae:
ac:cf:20:9f:f5:58:32:3e:f8:3b:28:c8:98:29:b7:
1b:ed:91:1b:bc:59:8a:eb:d6:e1:f6:14:e0:60:73:
e1:ae:50:0a:00:43:bc:dc:db:61:95:86:08:b3:0e:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:5F:ED:DA:95:54:BD:7C:1E:CC:5D:F2:D1:46:49:B3:EC:F1:7B
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:2f:3d:37:c2:54:24:1e:21:57:4b:4e:92:b7:80:90:06:
71:20:8f:c5:ab:63:7a:28:29:8c:63:3b:fe:35:f0:c2:ad:21:
51:8c:8f:ae:14:73:08:60:8c:4e:68:75:58:5c:93:2b:48:4d:
43:9f:db:2f:d3:bb:e0:87:98:db:fc:be:76:84:2e:fa:42:4d:
f1:99:d8:a2:9b:d8:6f:b7:e9:f6:35:6f:e4:e7:65:e7:ff:d5:
5c:e9:2b:f2:e6:7a:3c:2a:4f:00:16:11:a0:da:c1:28:fc:44:
d3:69:2c:03:fd:7c:98:80:7a:32:f5:4c:c6:ff:b1:5b:69:65:
7f:cd:6a:fb:d7:cf:ea:8a:fb:39:14:77:3c:15:e7:06:64:60:
7e:dd:22:8b:55:80:1e:ba:58:f2:fe:2c:c6:dd:6e:35:1d:6c:
52:5c:fe:bb:e2:4f:84:10:d5:d0:11:2d:3d:82:34:85:ba:38:
af:5d:1a:66:b7:6c:06:da:fc:a9:1a:20:b2:99:34:9f:85:64:
0b:60:2a:02:61:e6:3e:fa:fa:cd:ea:92:ff:b8:d1:0c:43:9f:
71:74:ca:85:2e:ad:d0:de:51:1b:fb:69:9a:83:7c:06:11:b5:
1f:73:dd:f2:00:ec:42:d5:57:10:7f:e8:de:dd:5f:c6:99:eb:
49:bf:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:24:55 2025 by rpki-client