This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: EweWHXO9oEqGkaWUgzWcGkeIvELrkDD7f8z7HIlgZq8=
Subject key identifier: B7:11:F3:C0:57:3A:BB:78:23:7C:60:E1:E7:B9:A1:65:46:B2:B3:49
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019B3A21A44C69A8B2ECF35B5BE90EBEACAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 17B0
Signing time: Sat 20 Dec 2025 05:00:41 +0000
Manifest this update: Sat 20 Dec 2025 05:00:41 +0000
Manifest next update: Sun 21 Dec 2025 05:00:41 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: KjzNK7yUOvtUIU9YtJZtbtQJzRdEpUNPrfqf0VNbHSI=)
4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
5: GidaO4fqGI7-halQpBDnfVEn_Ok.roa (hash: 4Qa43QNlwQ5rnVqM9gppkhB0rPIyCwL3Fhw99Q4kiY4=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa (hash: OYUYahQ2k3gq1hCdgyN2LHpOg006aLSKZ8M7SU5zas0=)
9: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
10: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:21:a4:4c:69:a8:b2:ec:f3:5b:5b:e9:0e:be:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Dec 20 05:00:41 2025 GMT
Not After : Dec 21 05:00:41 2025 GMT
Subject: CN=b711f3c0573abb78237c60e1e7b9a16546b2b349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:95:45:73:68:f0:e1:4a:6c:78:bd:6c:5f:
9a:f2:77:6b:6b:f1:8a:55:b7:fe:08:d6:af:21:b8:
13:f3:14:ad:2d:92:cf:07:45:c1:87:22:d3:aa:35:
bb:92:fd:74:ae:14:e1:16:de:d5:2d:42:0f:10:d5:
e4:ef:1b:13:66:7d:21:b7:15:08:95:4e:72:3b:b6:
08:ef:a3:10:02:44:34:ae:51:c8:bb:cc:22:d3:04:
86:75:ef:c0:2a:05:58:77:9b:d9:3e:ee:17:30:36:
55:bf:b6:a3:da:e6:70:59:59:60:35:d8:59:30:ea:
f8:04:96:78:57:86:35:29:c2:32:af:ea:c4:81:09:
59:9b:f1:21:67:b6:f9:21:4d:c6:1c:2e:7f:7b:7c:
8f:c6:85:b0:d3:9b:62:da:68:cd:f7:a3:b8:b8:0c:
62:ce:6c:1c:47:2b:67:b3:5c:4b:da:40:aa:66:a9:
ca:71:f9:34:33:d5:65:ad:38:6a:b2:20:99:f4:f6:
17:a0:b8:e2:ef:53:3e:4e:ed:59:8a:70:13:40:40:
be:d5:37:15:ea:e1:be:1c:a6:0c:38:8d:aa:23:30:
c6:7f:99:e6:88:af:6c:3d:3b:57:42:be:67:1e:01:
bf:f5:fc:1e:58:83:27:6e:32:69:32:e0:a1:9d:69:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:F3:C0:57:3A:BB:78:23:7C:60:E1:E7:B9:A1:65:46:B2:B3:49
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:8f:07:e5:3f:fa:d1:3a:a8:7a:69:a8:58:20:a7:11:ab:
47:21:73:1f:5a:35:ab:bc:da:88:b7:7e:44:d1:61:c8:54:fe:
b2:4a:52:2a:82:ad:f0:c6:de:f5:6a:cc:d2:72:c1:2a:04:c7:
68:74:d8:39:9b:4e:5d:0f:0b:65:37:aa:34:17:4a:bc:37:a2:
6a:58:a8:75:ab:fb:69:6c:78:87:5a:44:bc:87:44:48:5b:09:
43:5b:ef:7f:02:65:f0:d8:88:78:7b:59:61:f0:77:34:55:59:
69:89:c5:07:17:de:7d:bd:0b:d0:95:28:d7:b0:d9:70:8b:db:
3d:f8:b8:be:4e:61:c8:45:6e:fa:57:2d:9e:69:3e:ce:7b:43:
ea:1c:43:b7:25:46:5e:eb:57:76:f4:5a:bf:c5:7e:ed:1d:4a:
56:05:6e:79:e1:b3:4c:57:26:56:7d:7a:45:dc:40:44:42:31:
97:71:db:b3:15:0e:37:18:2d:4b:6c:c4:17:8b:c0:37:56:58:
aa:76:48:4a:7f:e0:7e:b2:b7:a9:99:29:be:91:d8:15:c8:54:
0d:75:b9:0a:50:e9:36:cf:c4:06:44:30:c8:7b:98:b2:35:24:
7b:d2:44:7b:18:c1:3c:b0:1a:ec:01:df:93:bd:f8:5e:79:20:
d7:9a:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:03:24 2025 by rpki-client