This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier: Gj+Qw5JOnXYbsZjfFIvI+FalMdUY0JJ22uKCsu1c18g=
Subject key identifier: DA:44:81:AA:26:08:DF:CA:3D:D5:11:68:BD:41:49:AE:CD:05:1D:1C
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019B2852287878649EAAEB603294A4ED17A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number: 12B3
Signing time: Tue 16 Dec 2025 18:00:31 +0000
Manifest this update: Tue 16 Dec 2025 18:00:31 +0000
Manifest next update: Wed 17 Dec 2025 18:00:31 +0000
Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
5: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
6: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
7: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
8: Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa (hash: YgQs04TbYGBp6z7hdUp7he/neEsxdPKRCp6qgTF++e4=)
9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
14: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
15: oF17FWGJTn6UIscGvTvJAT2bF9s.roa (hash: fwpfwyvA7EQCmsPepsKw3LosX8muYMblWDHxTAWFwOQ=)
16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
18: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
20: vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa (hash: a3rSSugcF/W8EnRna3Y5K0Q4cnP41HN2mioCgG5ku08=)
21: woqB-lp41jPnWfABUhjX5NctLxQ.asa (hash: v3DbKFdxADYHJQ3DIANngq+EbQulpWmrtEktO22gNc8=)
22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: pZnATk6kHUBZibmj8vJNqTbUAAXPUsQyPdqWWWdtK3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:28:52:28:78:78:64:9e:aa:eb:60:32:94:a4:ed:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Dec 16 18:00:31 2025 GMT
Not After : Dec 17 18:00:31 2025 GMT
Subject: CN=da4481aa2608dfca3dd51168bd4149aecd051d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:5b:9b:7c:77:02:4c:8d:d2:f2:5b:97:d9:
82:d2:f3:41:9d:34:0f:97:6d:e0:44:b8:23:46:39:
1e:34:aa:e1:95:fb:79:62:8f:6d:24:fc:59:7c:0e:
70:1c:a1:4b:b4:b5:4f:c5:e4:80:cb:cb:2b:47:d1:
9f:5b:55:7b:95:31:e5:55:2a:46:ea:95:5d:6c:b2:
c6:92:8d:30:90:f1:60:b4:ef:6d:bf:c4:ad:7f:9d:
28:e7:9f:1b:28:83:4d:c3:18:46:f1:44:52:ca:51:
29:42:20:5c:e8:d5:d4:6c:7e:06:ca:c1:89:b4:1f:
a3:5d:46:8c:eb:15:e1:24:e2:23:65:1b:6e:14:87:
f5:bb:d9:8d:9b:1b:ea:86:30:32:d3:91:d4:ed:61:
7c:2b:c1:af:34:99:18:5d:59:d3:76:f4:1c:21:1e:
51:6b:c4:df:b4:e0:ec:b5:1c:d6:cc:b1:c0:c9:5a:
2c:f4:9f:30:d9:a2:a3:c9:73:7c:98:e0:94:a6:4b:
8c:dc:8e:c4:86:ea:43:4d:d9:54:bf:5b:5a:09:b9:
33:fe:89:4b:d0:6b:c2:27:e6:19:e0:78:d8:ca:f9:
26:0b:aa:54:7e:8f:03:a3:79:9c:ef:71:f0:ac:70:
6f:df:1b:88:24:d4:6a:c6:cd:cd:13:c3:1d:35:d9:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:44:81:AA:26:08:DF:CA:3D:D5:11:68:BD:41:49:AE:CD:05:1D:1C
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:91:ff:07:92:c5:ed:cb:65:50:bd:b4:78:d6:58:3d:8a:93:
bc:0d:49:5b:3b:c7:5d:71:db:e7:ce:16:05:93:d1:7a:aa:a3:
36:4c:f3:31:23:c0:9f:77:98:f1:65:70:23:7c:ed:c1:69:6d:
65:34:dd:5b:00:f4:9d:0f:ff:55:28:0c:bd:6a:aa:41:ff:d7:
15:21:72:4c:5f:64:f9:e9:bd:5c:4b:0d:66:66:a6:ef:ca:be:
f1:58:67:3e:db:c0:3f:c1:28:ce:03:f9:78:92:ec:83:a5:eb:
3a:1b:2c:f5:b6:6c:7d:64:e9:b6:4d:72:7e:5a:ad:b0:fd:f3:
3a:0c:d3:0d:57:e0:95:77:e8:ab:d9:50:9d:bd:98:11:94:06:
ff:fc:b3:4f:c6:d1:38:ca:97:1d:a6:9b:57:72:35:04:26:c1:
0e:c7:59:e1:71:9d:f8:63:4f:29:ec:31:1a:c4:52:57:3c:c3:
8c:67:cb:3b:30:2c:f3:ee:ab:63:d0:da:63:5c:be:eb:34:0c:
9a:05:02:63:5f:db:c4:fc:ee:ca:37:be:1c:4e:a1:e5:d2:99:
e3:ae:b9:b3:ab:c0:22:af:bc:77:45:0f:cb:be:b2:7f:e1:9d:
43:d1:1e:af:93:2b:2f:a2:09:ae:ad:50:2e:3c:b5:61:a3:de:
ce:6a:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:14:18 2025 by rpki-client