This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier: 0zLOF2bE5jiWQEzzO9uFF9JHBBePbWyxqoSAopJMjv8=
Subject key identifier: D7:E1:07:C7:8F:10:15:AE:F3:DF:5D:75:64:36:F6:2E:02:67:89:1F
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019B5D524217CB687DFE4B962408205CED24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number: 17AE
Signing time: Sat 27 Dec 2025 01:00:30 +0000
Manifest this update: Sat 27 Dec 2025 01:00:30 +0000
Manifest next update: Sun 28 Dec 2025 01:00:30 +0000
Files and hashes: 1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=)
2: 0NgIFKzE9U8mH1i_SzHm7txoLcU.roa (hash: hWQWohZ9IroKasDxxI/Z9V0O1L7U0SMQLl5Y82yIR3M=)
3: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=)
4: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=)
5: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=)
6: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=)
7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=)
8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=)
9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=)
10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=)
11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=)
12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=)
13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=)
14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=)
15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=)
16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=)
17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: k0hwQ2jWaxL/nfiEqe0bA7TWhldidpLEcs10mLv9esw=)
18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=)
19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=)
20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=)
21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5d:52:42:17:cb:68:7d:fe:4b:96:24:08:20:5c:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Dec 27 01:00:30 2025 GMT
Not After : Dec 28 01:00:30 2025 GMT
Subject: CN=d7e107c78f1015aef3df5d756436f62e0267891f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:33:ea:a5:9c:5f:18:7f:3c:a0:89:ff:1a:
88:da:01:53:1c:92:6d:ff:b5:29:0f:87:9f:4f:10:
bb:be:ac:73:40:77:6f:2b:4f:11:68:52:37:62:6c:
0f:88:41:d2:bd:2f:7a:e0:e6:00:08:9e:d8:61:03:
1d:bc:35:e5:a0:f8:b8:74:c3:8a:20:b8:9f:a4:96:
6b:9c:b6:3b:bd:d5:8e:02:67:66:83:54:6a:7e:84:
7c:48:44:50:ec:86:3e:a5:21:50:61:9e:1b:45:19:
be:3e:74:16:b7:aa:8b:bf:d4:73:8a:80:01:14:ba:
74:a4:9f:4e:d7:11:f1:80:c6:75:5b:03:ee:b3:7f:
2c:44:9e:1d:07:73:68:f2:8d:95:c1:43:3c:96:0d:
d7:82:d8:ab:29:d5:0e:0b:bb:56:c7:94:71:9f:07:
36:18:6a:57:36:ea:ec:cc:8c:57:c8:19:9b:54:f9:
c8:01:83:fc:ef:0f:0e:92:b5:38:20:51:dc:0b:6b:
41:57:d4:25:da:62:96:8c:e5:08:7e:4f:c4:1f:9c:
c1:1c:a2:5d:c8:1c:b9:b4:e7:37:27:a1:75:87:17:
0f:90:bc:de:46:93:4d:64:44:0e:a2:78:6d:04:9d:
04:74:ce:fd:4e:f4:78:b1:a0:45:a5:ed:8f:bd:ca:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:07:C7:8F:10:15:AE:F3:DF:5D:75:64:36:F6:2E:02:67:89:1F
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:16:5c:44:5a:b2:90:28:b8:c0:27:5d:72:89:cc:e8:ab:
39:bc:cc:ec:37:40:93:4a:be:93:73:8d:27:67:71:27:87:27:
18:bb:4f:fb:d2:43:d8:9d:15:e1:52:18:a2:f8:22:a6:cb:89:
a6:8a:e0:fd:2c:f0:7a:8f:78:50:9e:0f:67:71:6b:df:7a:6a:
29:10:b3:63:fc:e7:ec:31:b2:34:5d:74:91:7b:a1:32:c3:72:
70:f7:69:3a:8f:98:bc:c3:c9:17:26:23:9b:78:78:84:89:d1:
4c:45:73:65:4f:1b:82:90:c6:d1:e6:2e:a9:ec:df:86:aa:cf:
86:5e:11:50:b0:22:b6:92:32:ea:7c:7f:24:11:8f:ac:4d:da:
a2:5b:78:ca:5b:0d:51:cb:1d:3c:9a:3e:51:cc:1a:d9:7d:d1:
3c:bd:67:58:ba:2f:f8:64:13:84:9f:50:39:ca:b7:61:c7:b9:
e8:b0:f1:a6:57:1c:a3:90:e8:b1:13:fd:c0:e6:58:15:e8:97:
54:c4:73:64:a4:ed:5b:a0:b4:ab:bb:e6:37:28:3e:06:33:80:
eb:a2:53:9f:3a:fb:97:f4:e7:6c:9f:e2:bb:bf:10:9b:fc:ca:
8d:ee:09:ad:17:21:64:63:0e:0c:28:b4:bb:eb:37:14:8c:2a:
1c:50:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:15:43 2025 by rpki-client