This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File: femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier: D4N8IxKdnogRg5ZiSW5G6wkhLHOOUAuyFIzQo5y4K6Q=
Subject key identifier: CB:60:42:0F:32:1E:F6:FD:5A:C1:DF:A8:E2:B9:51:99:EC:55:EE:B6
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 019B3FB61104F15DA4D01352815D37EB67E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number: 178F
Signing time: Sun 21 Dec 2025 07:00:55 +0000
Manifest this update: Sun 21 Dec 2025 07:00:55 +0000
Manifest next update: Mon 22 Dec 2025 07:00:55 +0000
Files and hashes: 1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: rIMrHgnI6ApnieXZFSQiyFojDlBE79njTIoRTBKKAsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:b6:11:04:f1:5d:a4:d0:13:52:81:5d:37:eb:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Dec 21 07:00:55 2025 GMT
Not After : Dec 22 07:00:55 2025 GMT
Subject: CN=cb60420f321ef6fd5ac1dfa8e2b95199ec55eeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:30:8c:df:89:1e:f0:55:b9:d7:a6:ac:91:
03:fd:69:f1:e6:b0:f4:03:79:3a:98:db:80:6a:89:
89:10:ce:93:13:8e:b0:63:42:69:5c:2d:de:f6:74:
5f:2f:bb:15:dc:ce:93:62:d6:aa:4e:cc:38:5a:43:
56:b3:e6:f5:22:7f:42:0c:7f:27:dc:df:fd:91:76:
de:a5:43:d2:85:de:27:2b:d6:d2:d2:fd:7f:fc:48:
15:b4:aa:b9:a9:12:1b:f5:37:35:b0:e1:de:d2:38:
cb:24:d7:7d:f7:bd:64:c9:3c:93:8e:60:63:be:f9:
68:47:1d:08:b5:c3:52:63:76:6d:c8:f1:69:1c:92:
54:fd:ed:91:92:a8:a0:1c:7a:c0:3a:c3:c2:b8:ab:
29:31:ed:d3:ee:8c:95:56:23:5e:7c:f0:7b:75:98:
54:29:46:28:02:cf:68:f5:98:fa:b1:7f:d6:49:18:
71:07:27:14:53:b6:11:92:f8:ef:17:51:e6:d1:b9:
87:a7:9c:8a:94:98:fb:52:70:80:4e:b0:8c:f5:60:
dd:4b:18:63:43:78:3d:f3:34:ef:5d:e1:68:49:7a:
88:30:66:e6:1a:42:31:47:8c:4d:81:cc:ec:98:83:
4d:e7:19:dc:f8:f9:c9:41:51:a4:9b:f7:fd:19:4b:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:42:0F:32:1E:F6:FD:5A:C1:DF:A8:E2:B9:51:99:EC:55:EE:B6
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c7:a0:d8:98:0c:76:99:6b:bd:45:92:98:0b:12:6c:b0:85:
07:3a:a5:c3:0b:ac:3f:e2:74:0d:41:33:20:65:a7:66:38:16:
70:05:58:4e:f9:81:a4:f0:fb:e2:36:d4:70:6e:b1:b0:72:88:
a3:0f:58:9e:df:5a:73:8a:33:76:f0:fd:01:c6:b3:54:6a:7c:
f4:d9:e2:ac:53:1f:5b:a5:db:4e:ee:ef:2e:67:29:11:44:6c:
39:94:bb:31:a1:71:97:63:ac:31:db:83:d5:a7:09:49:7f:b5:
2a:a5:bf:fa:80:22:85:a2:bc:d7:99:fc:1a:47:76:62:28:90:
84:2c:dd:f5:5f:35:6e:55:03:77:16:5a:0b:ac:85:b8:3a:d4:
ea:21:bf:53:db:6f:fd:59:bf:c4:c6:ca:5f:47:99:08:85:04:
18:9b:67:d2:ce:d7:18:79:60:e7:12:7b:64:14:d6:47:d7:8b:
ad:43:f0:ee:0f:4c:90:78:fc:d6:fe:87:58:65:5c:19:21:a1:
6d:64:f6:90:79:33:4b:52:e0:b8:31:32:f1:20:da:87:29:c9:
9f:4d:34:94:1f:cd:e0:98:5d:eb:26:48:e0:a7:16:3a:ab:b2:
54:2d:ec:85:e0:ac:cb:45:f9:17:00:bd:96:55:c7:6a:24:66:
8b:22:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:34:17 2025 by rpki-client