This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: 9AXVxs4FO/BfOTsKlMMMbYOsZUgPtzgZ97rlUEewfe8=
Subject key identifier: 22:7A:05:8B:0D:92:DF:FC:F1:DF:BB:C2:8F:F4:BB:10:26:5E:28:7B
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019B390F9CCB0EADE1ADB18B9C4D900149C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 178F
Signing time: Sat 20 Dec 2025 00:01:23 +0000
Manifest this update: Sat 20 Dec 2025 00:01:23 +0000
Manifest next update: Sun 21 Dec 2025 00:01:23 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: eEjb8DAP9bahq2O5j_HQb2xzlO4.roa (hash: fOyU7lhmD+ZIHBvuQudHEnoFTSwbSNrbIy4UHUxoCs0=)
6: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: 15bhdT+5Ap5XYSx5DLUAGcv6kzJDKFUIxzREOT0l34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:0f:9c:cb:0e:ad:e1:ad:b1:8b:9c:4d:90:01:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Dec 20 00:01:23 2025 GMT
Not After : Dec 21 00:01:23 2025 GMT
Subject: CN=227a058b0d92dffcf1dfbbc28ff4bb10265e287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:92:b8:d5:bf:e0:ae:e3:fa:24:59:36:29:
de:26:47:f4:e6:e4:72:4c:92:b2:bc:e3:3a:b4:84:
dc:9b:11:9b:8b:2a:57:11:2e:43:9a:26:d4:bf:7c:
57:df:b7:6d:67:0d:a1:70:db:8d:6f:e0:2a:c0:17:
c6:57:36:87:5e:c5:7a:ea:67:45:21:fd:98:4d:06:
8c:9a:1d:fd:86:58:36:17:db:8e:dd:8e:00:47:11:
76:a9:1d:2e:59:52:7f:0b:3a:df:64:22:4a:80:00:
bf:32:bf:4e:9c:dc:b7:3d:20:03:fe:59:3e:a3:a0:
20:6a:2d:8d:62:dd:12:6c:bb:82:6d:b9:cf:1f:ab:
7e:63:1a:16:66:3f:10:b6:2c:37:6b:6d:36:83:65:
0d:ac:34:8a:44:68:89:0a:b7:6f:ab:cb:62:91:bf:
4c:07:ef:32:2d:cb:53:40:95:a5:ff:7b:a4:51:d2:
92:65:28:d3:ad:07:0b:05:46:21:a5:b4:96:ca:2e:
52:36:ed:65:f5:7c:51:99:2d:6a:38:38:84:72:2a:
9b:22:97:ee:dd:b6:65:9a:ea:33:19:f5:4d:73:df:
6a:9e:c2:e4:7a:48:0f:51:09:34:22:16:a0:13:2c:
bb:c7:fb:53:7a:e8:be:42:22:8d:26:09:e1:11:0b:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:05:8B:0D:92:DF:FC:F1:DF:BB:C2:8F:F4:BB:10:26:5E:28:7B
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:46:1e:01:86:84:96:9b:67:05:c4:eb:73:d9:2f:04:53:
bd:7f:f4:14:85:57:85:63:44:be:ea:7a:af:e4:30:36:b1:ec:
20:53:1f:83:ea:4f:db:da:41:a5:c9:a6:e9:28:94:fb:b5:0e:
a2:69:25:ea:4c:35:d4:14:04:1b:00:56:43:a5:80:6a:c1:4a:
89:0d:2d:b8:e2:9c:3d:3b:0e:9e:46:e0:1a:9a:43:04:fd:5e:
1c:ae:2f:2a:73:5c:7b:64:e0:7b:75:3d:b6:e4:7f:95:1a:b7:
78:c6:ed:35:56:b1:07:16:15:3f:08:0f:a9:d2:c3:2a:eb:ec:
31:72:ab:65:cd:0d:c5:aa:4f:86:83:79:d2:77:7e:91:6c:ed:
df:44:4a:ab:68:e2:ae:24:82:99:aa:32:f1:c0:ed:ef:99:94:
79:a7:d7:7f:03:d3:be:7a:b6:b8:db:16:c2:9a:66:1f:43:05:
65:03:6a:42:85:b7:24:d7:06:99:89:0c:e8:ce:7c:f0:f5:b3:
7c:2a:43:8a:c3:3e:d3:b5:a4:00:c9:3d:fa:a7:d8:a0:83:bf:
e1:4c:bc:44:e5:10:71:45:f5:de:54:8a:dc:fe:d7:5e:a8:b2:
b5:f6:0b:86:1b:fb:f5:b8:b9:8d:1a:d0:2b:fb:09:88:f5:1e:
10:ac:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:26:28 2025 by rpki-client