This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File: v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier: 9H47qOwT455kUBlpSb/b4mV6E2MAGfOdiHGufxyMKDc=
Subject key identifier: F8:7F:D3:43:D0:70:5A:73:A7:59:18:D9:71:03:04:07:86:81:32:FF
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 019B3AFDA6870807398286C938262FDA7250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number: 061E
Signing time: Sat 20 Dec 2025 09:01:00 +0000
Manifest this update: Sat 20 Dec 2025 09:01:00 +0000
Manifest next update: Sun 21 Dec 2025 09:01:00 +0000
Files and hashes: 1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
3: Ln11BgOmUJEm6_GJhlyEjZDBqa8.roa (hash: YU8DYP0hybkH04u9NGwYXXxl9vKt0cKtdE/xhRnHK14=)
4: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
5: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: vtlVcnwsSXjtKjyuGwbFO2MMzjpVU/9dnmI6W/Ps2c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:fd:a6:87:08:07:39:82:86:c9:38:26:2f:da:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Dec 20 09:01:00 2025 GMT
Not After : Dec 21 09:01:00 2025 GMT
Subject: CN=f87fd343d0705a73a75918d971030407868132ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:65:cb:30:db:06:23:d7:39:0b:38:48:81:
a4:c6:83:c9:03:cb:63:97:38:64:e9:39:c6:a2:aa:
59:16:33:ed:5a:06:66:e7:09:98:6c:b6:7f:cb:2b:
35:f6:96:a6:df:33:76:fc:57:c8:19:5d:f1:35:f1:
01:25:36:ab:6c:b0:55:df:f3:16:a0:5f:f0:57:8d:
44:28:1e:b3:aa:ee:54:58:3c:9b:f1:ab:11:08:b9:
f6:2d:09:e3:63:14:c5:ff:f0:84:e9:70:f8:4b:e3:
02:73:8d:25:ae:0d:5c:83:fd:00:71:d2:31:79:ce:
29:f8:df:c9:af:5f:bd:38:9c:c0:36:8b:50:9c:49:
76:2b:ad:ed:aa:ea:5f:6a:0a:9c:ef:b0:a4:70:5e:
ea:3a:ea:a4:4c:a7:08:8e:18:59:7d:23:dc:cc:64:
12:c7:f6:dc:eb:c5:87:7a:0f:4e:e6:cf:07:a7:f5:
32:96:90:f5:2b:c5:e1:48:b8:f6:5c:e1:ef:3e:fe:
e6:a2:c7:d1:32:31:d7:a5:bb:12:62:c6:20:29:20:
9e:b8:97:3a:f5:5e:65:1b:0d:8f:67:d4:9e:cf:4a:
94:d0:e7:0d:74:58:19:0c:74:57:f0:01:d1:e8:bf:
dd:fa:b2:af:48:d4:b2:40:0e:c8:b5:56:4c:d3:c7:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:D3:43:D0:70:5A:73:A7:59:18:D9:71:03:04:07:86:81:32:FF
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ff:24:15:8d:5c:66:8d:3b:6e:fd:47:8a:55:80:67:0d:19:
bd:ea:45:56:01:8a:43:9b:74:8a:5a:ca:18:d0:bb:d3:e6:ad:
16:c8:df:8a:76:62:7e:38:a1:4a:ed:53:04:67:5e:52:da:2d:
26:26:72:f1:4c:97:5e:53:3b:f8:7b:0f:b2:2f:63:d0:96:cf:
41:31:e8:3e:34:c1:ff:b2:08:e7:dd:2d:b9:27:1d:f4:a1:88:
d2:07:56:b7:78:77:32:7f:ce:29:e5:c2:1c:2a:f1:70:a0:de:
12:12:68:9f:e0:82:ef:80:21:c3:bb:09:02:9b:cf:45:cc:7f:
95:ab:4c:fb:bc:ca:7e:0c:00:79:3d:5f:f8:af:b3:49:8d:90:
23:05:23:b0:57:68:83:f1:f9:74:e4:72:d5:32:51:e5:43:17:
ae:d7:84:64:b0:04:d3:8c:e3:98:85:cd:00:f3:db:25:7f:b2:
2b:c1:cc:5c:fd:33:44:0d:68:bb:90:ef:64:a1:05:ce:7d:e9:
cd:f5:dd:e1:5a:23:cf:2d:b2:58:2a:09:5d:d9:1f:ee:ab:71:
f8:34:f8:81:44:d5:80:ae:ff:a0:e6:dc:7d:db:99:dc:96:fa:
77:9b:7d:dd:ff:20:0f:21:fb:52:bc:f5:2a:75:a0:dc:8f:a1:
9c:d3:e3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6/aaHCAc5gobJOCYv2nJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjUxMjIwMDkwMTAwWhcNMjUxMjIxMDkwMTAwWjAzMTEwLwYDVQQD
EyhmODdmZDM0M2QwNzA1YTczYTc1OTE4ZDk3MTAzMDQwNzg2ODEzMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQJlyzDbBiPXOQs4SIGkxoPJA8tj
lzhk6TnGoqpZFjPtWgZm5wmYbLZ/yys19pam3zN2/FfIGV3xNfEBJTarbLBV3/MW
oF/wV41EKB6zqu5UWDyb8asRCLn2LQnjYxTF//CE6XD4S+MCc40lrg1cg/0AcdIx
ec4p+N/Jr1+9OJzANotQnEl2K63tqupfagqc77CkcF7qOuqkTKcIjhhZfSPczGQS
x/bc68WHeg9O5s8Hp/UylpD1K8XhSLj2XOHvPv7mosfRMjHXpbsSYsYgKSCeuJc6
9V5lGw2PZ9Sez0qU0OcNdFgZDHRX8AHR6L/d+rKvSNSyQA7ItVZM08dOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh/00PQcFpzp1kY2XEDBAeGgTL/MB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsP8kFY1c
Zo07bv1HilWAZw0ZvepFVgGKQ5t0ilrKGNC70+atFsjfinZifjihSu1TBGdeUtot
JiZy8UyXXlM7+HsPsi9j0JbPQTHoPjTB/7II590tuScd9KGI0gdWt3h3Mn/OKeXC
HCrxcKDeEhJon+CC74Ahw7sJApvPRcx/latM+7zKfgwAeT1f+K+zSY2QIwUjsFdo
g/H5dORy1TJR5UMXrteEZLAE04zjmIXNAPPbJX+yK8HMXP0zRA1ou5DvZKEFzn3p
zfXd4Vojzy2yWCoJXdkf7qtx+DT4gUTVgK7/oObcfduZ3Jb6d5t93f8gDyH7Urz1
KnWg3I+hnNPjiA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:14:57 2025 by rpki-client