This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: dy4FFmj/teEqhURTYHSfPpUdJyl7mr/LTK9Ox1frvSE=
Subject key identifier: A7:F3:67:BD:4E:41:79:09:21:5D:E1:D2:ED:2A:4E:7A:32:74:E3:C0
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019B405AF01EBB9516D4CE2A374FB4968C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0CBF
Signing time: Sun 21 Dec 2025 10:00:59 +0000
Manifest this update: Sun 21 Dec 2025 10:00:59 +0000
Manifest next update: Mon 22 Dec 2025 10:00:59 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: dD9XnXrx4CU/+rGKd9wtUGIMPoy3WXDuiyMd3AvgsCM=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:5a:f0:1e:bb:95:16:d4:ce:2a:37:4f:b4:96:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Dec 21 10:00:59 2025 GMT
Not After : Dec 22 10:00:59 2025 GMT
Subject: CN=a7f367bd4e417909215de1d2ed2a4e7a3274e3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:8d:91:1b:62:9f:5c:1a:b1:e3:1c:f2:de:
8c:53:20:7e:5a:ee:ad:1f:31:1c:31:32:c9:9e:3c:
57:da:64:ab:a3:71:d2:25:b7:55:ce:d6:0a:1a:dc:
3d:67:03:a4:07:2a:a6:22:03:d8:90:4a:1a:81:8b:
6e:d0:ef:41:56:a3:40:71:ba:b1:c1:01:8b:11:bd:
8e:b0:85:77:e7:49:d4:ce:2c:d4:ed:0d:c4:9b:e8:
65:77:8e:01:dd:f0:7c:bd:17:80:d9:8e:1a:cf:1c:
6b:ca:cf:46:20:43:95:c3:5d:92:1a:ab:37:d9:fa:
b2:82:75:22:a9:1b:57:32:56:6b:01:19:95:e6:a7:
9f:de:a3:f5:c7:f1:e4:75:3e:bf:8e:fb:c8:a4:c3:
18:2b:3b:35:37:31:ac:53:fd:00:82:b9:7a:96:a5:
55:b2:c3:34:a0:50:f6:35:a8:1e:0a:7b:c9:7f:e3:
6c:ef:70:f3:f2:20:b6:82:38:66:a2:e8:6d:63:25:
d5:bc:e8:a5:34:db:cc:04:1a:03:e6:dd:2e:96:82:
16:28:92:d5:22:11:da:23:70:bb:f0:fd:37:7f:6f:
20:7a:47:2f:d7:c6:f9:87:08:3f:b1:00:ec:3a:95:
06:f2:0e:4b:92:90:6b:97:c4:29:5e:88:a5:4d:e5:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:67:BD:4E:41:79:09:21:5D:E1:D2:ED:2A:4E:7A:32:74:E3:C0
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:b8:b3:18:2d:e3:68:90:85:6b:c7:d0:db:6d:f3:2c:57:
42:e7:62:62:01:99:66:44:8c:c4:56:f7:91:c2:1e:99:45:67:
a4:82:86:b6:73:10:7d:22:e3:53:a9:5a:94:6e:fb:0f:61:37:
57:a3:e8:f8:28:73:4a:cf:29:76:b7:c0:d6:ef:45:c8:74:48:
fa:1e:5a:19:3f:c0:c8:f7:72:d0:ef:32:3d:98:3b:c9:33:55:
f0:ae:62:78:45:b9:69:08:1d:fc:30:bc:86:b7:f1:90:f4:90:
7f:6c:be:65:a0:96:cf:11:29:33:e0:fb:0f:11:94:5f:91:63:
bd:20:27:25:83:f8:bc:e2:f4:e6:40:93:e9:c6:c9:dd:78:47:
b9:ca:14:8b:c2:e8:5b:13:30:4d:11:19:ac:74:e2:80:21:5c:
1e:21:07:02:1c:51:d9:c1:b2:16:ff:b1:da:b9:0b:f1:22:31:
d7:7b:a0:f8:e2:28:88:28:4e:90:1e:b1:79:cd:32:e7:b8:4d:
86:09:c0:17:7d:54:cb:1a:c2:d4:d5:5b:5d:e9:22:ea:9e:3c:
b4:28:47:d5:ef:86:d8:0f:2d:0b:cc:3e:77:5a:73:04:b6:50:
5d:f2:1e:25:7a:69:21:b8:89:89:52:07:78:93:a7:bd:d1:60:
d3:64:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:59:06 2025 by rpki-client