This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier: ATYii+FOR/n1Vs3Azc7QCUlY3wRXH0XmwAhOYlOR4Fc=
Subject key identifier: 19:5D:0E:BD:A5:4E:35:38:32:49:F9:22:CE:C8:FB:EA:32:FA:CA:D7
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 019B3B6B890C0705BAA2207B59964C00B2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number: 0BBF
Signing time: Sat 20 Dec 2025 11:01:01 +0000
Manifest this update: Sat 20 Dec 2025 11:01:01 +0000
Manifest next update: Sun 21 Dec 2025 11:01:01 +0000
Files and hashes: 1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=)
2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=)
3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=)
4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=)
5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: wFL4XlZlWD0TSKielhd8TC7H3OBUkg3VlNgLmeI6KFk=)
6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=)
7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=)
8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=)
9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=)
10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=)
11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=)
12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=)
13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=)
14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=)
15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=)
16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=)
17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=)
18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=)
19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=)
20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=)
21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=)
22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=)
23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:89:0c:07:05:ba:a2:20:7b:59:96:4c:00:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Dec 20 11:01:01 2025 GMT
Not After : Dec 21 11:01:01 2025 GMT
Subject: CN=195d0ebda54e35383249f922cec8fbea32facad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:36:36:94:b0:cf:8a:8a:b7:f0:07:35:3f:
fd:09:28:09:c7:77:bf:f4:81:67:ea:91:b6:65:87:
e8:b5:7b:be:86:2a:9d:2c:5f:6e:12:6d:3c:46:3e:
13:ff:9a:5f:dc:b4:a1:cf:3d:f9:65:bb:7c:e1:9f:
da:47:49:54:d2:7e:f2:e0:67:26:98:89:2e:11:b8:
fc:70:65:b6:68:16:81:52:75:e1:a3:f9:24:43:ab:
c0:d9:e4:c8:9d:50:11:50:40:8e:7c:26:09:48:c7:
db:d3:ec:10:3a:ec:1d:32:29:ba:0d:3c:c9:76:55:
1b:94:9f:93:f8:28:a3:8d:c3:94:68:72:c0:5a:91:
c2:94:8a:93:bf:25:a0:da:4e:01:e5:77:f6:8f:80:
ec:9a:1c:90:69:54:ba:4d:82:40:89:0a:95:56:7b:
cd:7b:1f:2a:1b:8f:2b:78:5b:69:6e:64:e3:b2:35:
c0:c6:ef:aa:a4:a3:e3:52:fe:52:43:94:13:88:75:
86:53:00:40:91:09:0c:8d:b7:ff:ec:bc:82:20:f0:
97:b4:a0:50:4f:38:b7:79:b5:83:18:c8:6b:03:fc:
c5:e6:09:93:80:4e:6d:9a:ad:53:2b:74:d7:82:e0:
75:e1:f0:b1:87:36:b1:7c:b8:1d:30:25:5e:38:68:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:0E:BD:A5:4E:35:38:32:49:F9:22:CE:C8:FB:EA:32:FA:CA:D7
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:94:79:2b:73:0c:95:25:e0:79:65:9b:3d:21:33:0c:b6:
ae:93:cb:37:16:58:5f:1a:c6:2a:d2:34:3f:8e:3c:4d:79:78:
4c:46:53:02:dd:3a:00:03:6f:05:a8:0d:52:22:2d:6b:31:a8:
02:5c:f8:1f:10:95:ed:d4:55:ac:3b:de:c9:50:3e:c0:20:dc:
c9:9e:c2:96:84:b4:1a:15:ae:f4:09:ee:b0:1d:24:2f:44:27:
78:ed:14:fc:1e:5a:ab:9b:b3:98:15:43:a6:93:74:4e:eb:34:
de:c8:58:f0:3c:3a:8b:91:d6:d0:99:17:4f:b7:b0:3b:b3:f7:
56:c0:8c:37:2b:26:fe:fd:48:91:63:da:f4:9c:0f:6a:bf:25:
ce:b6:0e:a6:87:fc:a1:6c:4f:68:77:ea:01:a0:30:d9:56:fc:
dd:74:5e:76:a0:08:f3:d2:75:6a:43:a6:47:dc:11:70:ef:1f:
87:92:ba:0a:f9:f0:c8:13:82:b0:b8:f0:ef:8e:2f:e2:ba:e1:
b2:70:f2:4e:cd:14:bc:7b:cd:b3:e1:8c:c0:07:c3:45:7d:8f:
93:a8:4b:77:83:a8:06:df:dd:11:07:33:b9:0d:00:e5:65:b6:
01:c3:2f:3c:92:eb:6f:0c:bd:cd:e0:2c:1c:2e:63:9e:65:63:
b9:25:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:07:07 2025 by rpki-client