This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier: 7TzqUPRAYGhQ01gZGI26GPodWTrPfjZ9Hrr2bX+yh+8=
Subject key identifier: FC:C0:99:43:CD:AE:EA:98:B8:BA:7C:B6:F9:06:FF:FA:47:12:04:2B
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 019B378F2A9244BA011812C61A05A9C38175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number: 1787
Signing time: Fri 19 Dec 2025 17:01:27 +0000
Manifest this update: Fri 19 Dec 2025 17:01:27 +0000
Manifest next update: Sat 20 Dec 2025 17:01:27 +0000
Files and hashes: 1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: zfm4lnmmU1XyUzlN0lvnzODsPV7hUhyUBnFZI8N8MaE=)
5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8f:2a:92:44:ba:01:18:12:c6:1a:05:a9:c3:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Dec 19 17:01:27 2025 GMT
Not After : Dec 20 17:01:27 2025 GMT
Subject: CN=fcc09943cdaeea98b8ba7cb6f906fffa4712042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:17:45:1d:e1:73:41:ff:34:b1:96:ea:ca:
57:e7:cc:02:0f:83:a2:f8:d0:de:ad:34:21:18:04:
82:a8:5e:b6:fe:4f:14:d1:36:66:b2:b6:48:10:f5:
91:0e:4b:7d:26:0b:1b:da:52:41:88:08:da:21:e5:
2a:24:5c:8b:96:b5:f9:de:6b:e7:f5:1c:28:8b:20:
ad:48:c6:05:c7:8b:0c:92:1f:2e:e8:bc:12:1a:5d:
75:9f:17:15:37:d1:55:0c:89:b3:52:d0:97:8d:bf:
5c:be:39:65:ce:68:c4:42:81:05:fd:5f:1d:18:05:
80:9f:69:2a:6d:14:7e:c1:6c:bf:a6:d6:d6:56:8e:
d5:4d:11:46:70:d9:91:7e:59:50:bd:32:7a:04:d8:
7b:ea:49:9f:51:d8:ec:14:18:27:26:3c:98:0f:2e:
ba:53:bb:65:b2:a8:e9:18:c4:5c:dd:41:1d:9c:f6:
8d:ba:6b:e4:43:e1:fd:b1:23:c5:dc:6c:38:1b:f1:
7f:32:67:09:83:9e:73:3e:4e:38:27:a3:dd:af:35:
b6:9a:75:c0:9d:2a:da:8a:73:d1:04:52:71:6b:c9:
4d:de:54:75:0b:5e:bf:4e:d2:3e:6d:e2:54:bb:9e:
0b:56:85:16:7b:e9:57:e8:ab:7a:62:ea:09:ed:72:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:99:43:CD:AE:EA:98:B8:BA:7C:B6:F9:06:FF:FA:47:12:04:2B
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b5:00:1e:0d:5d:0c:89:fc:97:9f:3a:c4:ad:10:52:ac:fc:
aa:68:73:be:64:49:95:3d:3b:b0:de:f1:7a:45:3c:4d:a9:a4:
6a:be:88:ba:88:7f:e8:d7:37:69:c2:a1:76:ee:da:34:25:c9:
21:e9:bd:ee:b6:de:70:d1:54:87:2e:fa:8c:0d:79:7c:3c:fd:
40:53:06:ac:96:bf:07:9f:4f:a7:07:8d:89:9a:49:92:15:1a:
2c:df:64:73:72:95:b7:e3:a5:d9:eb:26:e8:49:77:05:a0:1e:
9d:21:a7:a4:a0:ad:af:9b:8b:98:34:31:84:1f:30:e6:97:97:
f6:5d:e1:b0:86:d6:c1:06:94:df:af:a0:f1:ef:bd:e0:07:21:
11:71:b7:ab:5c:6c:d6:d7:60:f8:92:b9:d9:e5:e8:30:82:64:
9e:a0:e0:ae:55:bb:f0:1e:74:e4:a6:98:9e:26:9c:cf:6f:94:
e5:73:62:1a:df:91:dc:60:c1:b0:24:28:d1:d3:4c:db:84:21:
c1:22:7f:e7:ff:b4:04:13:9e:72:78:10:f1:d5:44:26:7b:b6:
f7:17:bc:77:d4:23:2f:06:6c:d8:a4:53:a9:33:32:8f:9b:27:
ad:7f:76:a5:60:65:84:4e:2e:2a:f3:4e:93:1f:50:a0:c2:ec:
11:c6:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:26:00 2025 by rpki-client