This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: BUG+XZkXdR6LtRItaZWfn3iG+1BOt+sQMP51m0rao0k=
Subject key identifier: 3F:3D:51:20:3F:5F:CF:68:31:0F:50:AD:5F:9C:C9:2B:7D:DB:D2:C1
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019B42B748BEDCF90FCCED29AB26635D9C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 178D
Signing time: Sun 21 Dec 2025 21:01:06 +0000
Manifest this update: Sun 21 Dec 2025 21:01:06 +0000
Manifest next update: Mon 22 Dec 2025 21:01:06 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: Cm70Sd++8LHlerMh2/nXjMpEdWE/AUXTPOwcEutZZuo=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:42:b7:48:be:dc:f9:0f:cc:ed:29:ab:26:63:5d:9c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Dec 21 21:01:06 2025 GMT
Not After : Dec 22 21:01:06 2025 GMT
Subject: CN=3f3d51203f5fcf68310f50ad5f9cc92b7ddbd2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:04:57:8d:d6:dd:f5:54:89:3b:d6:16:4c:
4a:85:8b:4f:cd:d8:c1:0f:a7:ef:50:7c:fe:b7:d1:
7c:f5:bd:eb:b9:7c:b9:00:f1:f8:f3:b9:74:e2:ba:
8a:01:b8:d9:f0:c9:d0:de:47:fc:ca:02:89:f2:87:
b6:3e:ad:3c:ae:c0:42:28:ae:55:16:e5:83:8f:ef:
68:29:63:56:fd:4f:9c:81:21:16:e3:b6:b3:b9:4f:
8f:00:45:6d:12:e7:4b:40:1b:cf:0c:d9:52:a7:58:
0a:47:74:31:58:90:60:ee:4d:c8:cb:01:e9:f8:b0:
3d:8d:00:74:9a:51:a5:14:de:ea:8f:04:3e:a6:5b:
85:9c:f1:c4:e9:d2:3b:23:c3:76:45:8b:36:83:8f:
d4:36:1a:68:18:db:69:b4:1c:a9:06:c0:36:b8:b7:
ba:d4:05:5d:95:67:27:16:8a:89:a7:ce:fe:e9:74:
d1:31:96:cd:86:cd:fd:ed:f4:c4:60:41:c2:3c:4b:
c1:39:f5:6a:c0:b7:d0:9b:ae:5a:6b:ab:83:0a:88:
57:98:25:7a:69:47:de:7c:ee:ee:50:1f:69:3f:f7:
93:da:8e:62:a6:e1:73:bd:92:15:c4:ed:42:42:98:
ea:c1:55:11:fd:1a:7a:ce:f4:fd:10:7e:48:00:07:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:51:20:3F:5F:CF:68:31:0F:50:AD:5F:9C:C9:2B:7D:DB:D2:C1
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:c3:ef:3b:0d:08:30:f1:a7:b5:1a:82:7d:db:8a:1a:62:
a7:d2:3b:07:64:a1:19:b1:a1:9b:b7:3a:00:c0:4d:b4:4e:04:
86:d8:3f:41:79:c4:c8:ef:e9:2a:d8:28:ae:44:54:d2:0d:3b:
ca:52:25:90:9d:38:a5:b1:05:24:ba:a6:70:3d:e3:ac:a6:06:
bc:ac:f7:8e:21:df:49:98:b9:de:13:c5:c8:d3:a0:03:98:3b:
5f:23:1b:55:a2:69:e4:f4:d4:65:6f:6a:4d:71:b7:8e:59:13:
07:c1:ce:8f:31:4a:54:dc:79:b4:97:b8:fc:14:1a:0e:97:f3:
1a:5e:42:2a:df:95:2f:47:7b:14:a3:ae:fc:ce:85:87:64:4d:
f5:3a:cc:19:73:79:f8:fc:0d:69:33:4a:16:8f:0f:89:5b:7d:
7e:c1:b5:d3:ec:3c:7f:5c:01:8f:d0:12:46:5a:ac:f8:52:9d:
6e:51:5f:03:c8:f5:df:43:3d:90:70:df:77:2f:ce:f4:33:07:
07:13:a2:50:61:d9:8c:e3:0f:8b:f2:b2:8c:66:70:4b:77:db:
4c:c8:fb:55:cb:eb:01:9d:7c:8e:0f:38:6d:25:2c:15:74:19:
cb:d4:4f:74:14:ea:5c:b1:1a:27:cb:57:7d:14:c3:01:91:e6:
59:15:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:51:50 2025 by rpki-client