This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File: miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier: mV/DFzLeURY6+6Nswj61Wb71xtRkGpeJijZ0mjZep/M=
Subject key identifier: 7A:7C:A0:21:EC:60:F9:95:15:DE:01:F9:D6:D1:C7:D0:30:03:20:87
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 019B405AED5C23A1329FA64E3F09BA3D0E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number: 0680
Signing time: Sun 21 Dec 2025 10:00:59 +0000
Manifest this update: Sun 21 Dec 2025 10:00:59 +0000
Manifest next update: Mon 22 Dec 2025 10:00:59 +0000
Files and hashes: 1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: pFxq06afizT6mC45B+BISQkczIMLyqUjfsiah9fvT/U=)
6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:5a:ed:5c:23:a1:32:9f:a6:4e:3f:09:ba:3d:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Dec 21 10:00:59 2025 GMT
Not After : Dec 22 10:00:59 2025 GMT
Subject: CN=7a7ca021ec60f99515de01f9d6d1c7d030032087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:55:61:48:24:c5:76:5f:a9:73:f0:13:a8:
ff:16:1c:11:a6:71:05:97:df:32:8f:3d:0f:22:b4:
6f:a9:67:22:9f:c5:7f:c7:ed:90:3c:99:80:e0:ff:
0f:76:b8:21:ad:2b:bb:f6:5e:33:fb:96:10:73:fe:
85:5b:7d:cf:31:14:ed:c1:52:19:ce:f5:f9:78:85:
51:42:31:07:25:04:42:07:e6:8c:30:bb:63:ab:d3:
7c:11:f4:94:81:8b:4c:b1:2e:84:70:e3:0d:dd:0e:
1e:f6:da:46:18:10:0f:3f:d9:c8:fe:3d:2b:15:e2:
77:c9:42:02:a4:b7:97:7a:c3:ea:e6:11:d6:97:0e:
db:5a:83:bd:f3:df:6b:ad:ea:05:78:9a:4c:37:b6:
4b:f3:7a:d5:98:a6:33:a3:9f:69:a1:c6:1a:33:02:
82:c1:f9:f5:2d:c8:da:2d:b1:65:f9:a0:72:14:16:
49:86:dc:ea:52:b5:6c:90:35:40:b6:32:7b:b0:75:
e4:cc:52:a6:70:b3:a1:10:71:9a:3b:08:8e:8e:70:
79:00:e5:b8:fa:f2:75:35:fa:ad:a6:b5:30:52:b6:
7b:1a:c8:42:32:5c:c5:05:87:7e:10:72:f7:d0:c0:
db:aa:e3:ca:ac:36:3a:49:c4:47:73:62:53:60:0c:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:A0:21:EC:60:F9:95:15:DE:01:F9:D6:D1:C7:D0:30:03:20:87
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:43:19:cf:c6:f0:03:f8:e9:a5:80:dd:44:c5:26:5c:f6:
8d:ed:8b:59:85:5d:f1:72:b8:31:4b:e5:89:1e:ab:ac:0e:db:
37:92:3d:10:8e:d7:39:c7:dc:39:ec:53:0c:24:b4:21:5b:03:
2b:60:5a:e3:1e:cf:5c:9f:32:57:a9:70:8b:68:01:4b:32:be:
6f:4f:66:4c:03:a4:96:42:96:e7:fa:e9:64:33:79:3a:50:93:
51:91:fe:3e:36:a6:a3:50:a5:b3:85:8e:40:4a:4b:35:bd:d1:
19:29:44:f0:99:b0:b9:23:43:97:a5:73:84:18:33:f6:25:a0:
d3:94:79:a5:0b:55:cf:fa:28:ba:5a:29:74:95:7a:1b:0a:e4:
d4:09:92:00:1b:89:e1:e5:ce:bc:06:6f:9a:d3:bb:5b:ca:31:
e3:b4:4f:09:99:42:f8:92:26:7a:ca:ab:6e:5b:d7:96:93:c8:
81:5d:14:c2:9c:a7:c1:8c:07:38:16:65:d6:89:a4:5f:ec:a9:
2c:43:b2:3c:ff:4c:63:22:82:1b:a9:88:cd:70:98:c5:71:b7:
e8:28:09:61:43:c8:8d:45:b8:9c:b4:3f:ca:7b:a1:fc:b3:31:
95:ed:8b:23:94:fa:b6:3e:16:26:9b:ae:2a:37:cb:ee:9e:70:
ce:c0:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:52:21 2025 by rpki-client