This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: dOE+rEp1VPfodf5DhfCgTwVaZs+1fRx8b8Ss0dTetzw=
Subject key identifier: FE:95:FD:B0:A9:53:36:61:F1:3A:14:3D:02:0E:B1:0B:FF:DF:0A:08
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019B37C5C187A539360A1A40D03ACB3A223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1786
Signing time: Fri 19 Dec 2025 18:01:05 +0000
Manifest this update: Fri 19 Dec 2025 18:01:05 +0000
Manifest next update: Sat 20 Dec 2025 18:01:05 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: A98rEk9GhkXH7rBvpic8w1wiiKdi4ddDrepm15CeWds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:c5:c1:87:a5:39:36:0a:1a:40:d0:3a:cb:3a:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Dec 19 18:01:05 2025 GMT
Not After : Dec 20 18:01:05 2025 GMT
Subject: CN=fe95fdb0a9533661f13a143d020eb10bffdf0a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:2b:cd:07:87:a1:17:aa:70:29:b7:f0:36:
fa:40:31:c1:d1:51:e3:f5:03:cb:1d:22:be:fa:99:
61:99:b9:4b:dd:af:89:c4:cf:8c:7b:38:97:c1:34:
15:eb:62:41:b1:13:76:b7:45:86:d9:22:4d:d1:21:
fd:05:a2:ea:b6:c5:65:13:75:30:a0:bc:c0:13:58:
c4:b8:45:4e:0b:a9:f2:be:5f:61:b8:2f:1b:86:bf:
03:a2:2a:b8:ba:0e:23:10:a2:b4:6a:f3:98:2c:44:
4f:4f:df:c6:f6:58:22:f6:97:88:2c:95:a1:1b:2c:
c8:aa:4d:aa:36:e5:16:a4:5f:79:55:ec:28:4d:45:
87:78:f0:d7:6d:7f:4d:8c:89:98:18:24:e2:a3:b0:
0f:4a:e2:73:91:f6:01:c3:38:8a:1f:38:e1:15:dc:
15:35:2d:ed:a8:da:04:65:e8:7b:00:81:89:af:71:
c1:77:ac:56:bf:c6:da:71:8b:66:89:e6:e1:06:95:
80:ee:3a:a6:e9:dd:5b:c9:76:77:b5:02:cc:b0:1c:
76:8e:ae:4b:b2:41:5a:da:1a:7b:0c:ca:33:64:d7:
8b:25:43:6a:6f:26:93:22:c1:6d:be:fe:44:6a:c7:
df:c1:27:30:aa:6f:95:7c:71:68:d9:50:14:b9:88:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:FD:B0:A9:53:36:61:F1:3A:14:3D:02:0E:B1:0B:FF:DF:0A:08
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:3d:2b:85:5a:02:a5:fc:ce:a9:84:d6:4e:c3:ab:8f:1d:
ac:ff:2d:86:02:2d:a0:00:80:a2:ac:8b:e7:4a:3a:0b:d6:5e:
42:a2:01:1e:05:69:0d:41:29:e1:4c:37:4d:ea:2e:f7:8d:aa:
26:a1:28:e5:ff:e6:12:3a:71:3a:74:39:c4:34:65:4f:32:28:
d0:74:f2:5a:8a:60:56:cd:a7:4d:04:51:65:c2:0d:e0:f4:a1:
9a:7a:18:b8:ed:b3:d2:ec:5b:f2:bb:3a:43:a7:e5:9e:f9:ae:
31:c0:61:df:b8:3e:50:e5:cc:b9:0f:e5:84:c9:a9:58:89:0e:
24:b9:b4:cf:ff:7f:93:a8:8d:ee:89:90:3e:41:09:1e:17:42:
3f:4e:e4:1b:0d:1e:7f:f8:ff:75:e7:5a:74:f5:89:b9:a7:99:
9c:f2:c4:b3:43:30:f4:b6:e0:23:6d:c3:98:64:53:90:cc:48:
3f:65:b5:49:40:8c:68:3f:62:2d:3d:17:cb:d9:dd:7c:8c:71:
15:17:d8:c0:a5:f8:f7:e4:e1:e4:67:f9:21:29:b5:a5:3c:ae:
43:25:f1:bf:b9:05:3c:3e:46:dd:d0:ff:11:57:de:68:12:ed:
1b:0e:cd:ec:4e:2c:59:a7:fd:3a:87:bf:03:c7:27:58:b3:45:
e2:bc:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:11:29 2025 by rpki-client