This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier: fTJdXHRC2ogYgEVnL0z79bm1HlkvWITII7Dua0gxeBo=
Subject key identifier: 6A:E0:FF:BC:04:59:C7:40:CB:98:83:71:2F:F7:E9:0A:D6:9F:00:7C
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 019B34C5E835CCDC653F087F976ECC6F6E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number: 0F20
Signing time: Fri 19 Dec 2025 04:02:23 +0000
Manifest this update: Fri 19 Dec 2025 04:02:23 +0000
Manifest next update: Sat 20 Dec 2025 04:02:23 +0000
Files and hashes: 1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: Ec8PrkQwwUrFSFwv+61cVaPhC8DQ/GJcIx15WUlY2Ys=)
3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
4: uElDFGcVxZsMl0bu0vs6jORoDh8.roa (hash: aT6b179aTl0Zm/hagXpA3FILak7batN1BBwPLZgXw5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 04:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:c5:e8:35:cc:dc:65:3f:08:7f:97:6e:cc:6f:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Dec 19 04:02:23 2025 GMT
Not After : Dec 20 04:02:23 2025 GMT
Subject: CN=6ae0ffbc0459c740cb9883712ff7e90ad69f007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:e6:1f:42:d0:d2:0d:7e:1e:4d:e1:e6:38:
83:6d:a1:dc:50:b2:d4:45:65:91:f9:f5:27:e7:65:
5b:52:bd:48:90:66:8a:d8:ff:46:60:20:1a:97:84:
78:12:07:0e:c8:3a:9c:ef:71:c6:73:b8:cd:d6:4f:
b7:41:17:21:ed:7a:65:9e:da:ca:09:25:f2:c7:4b:
25:a6:9f:ee:f2:a6:10:af:63:c7:e3:db:7c:06:ae:
10:6f:d7:e6:4b:cc:4e:2e:14:52:5c:50:43:fc:66:
ca:b1:3f:de:05:47:30:0e:63:00:de:59:4d:d2:bf:
1f:01:74:68:16:3a:54:b8:de:4b:b6:bc:cd:50:49:
72:87:84:ac:f7:93:e6:4e:47:f9:9a:08:2b:83:bd:
27:72:4f:3b:74:e4:55:06:43:38:00:0b:a4:55:f9:
32:95:d3:2b:86:58:fe:9b:bf:51:ca:40:64:fe:d9:
44:fb:62:6a:3e:5e:51:a0:44:93:5e:16:d2:9c:0c:
41:8e:3f:54:d9:c0:cf:71:ce:4d:4b:9b:46:90:cf:
5a:d3:24:85:a5:74:25:b4:80:04:fe:fa:cf:0b:fc:
b4:7e:be:2a:54:96:9d:0b:9c:45:b8:22:79:75:cc:
04:ec:da:71:01:9a:73:45:f5:00:2c:ef:5c:50:da:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:FF:BC:04:59:C7:40:CB:98:83:71:2F:F7:E9:0A:D6:9F:00:7C
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:56:9c:08:d1:09:79:9c:44:7f:48:69:b3:e0:6f:8f:c7:93:
e2:a8:0d:47:b9:4e:f8:dd:db:c0:e1:4a:86:30:0a:30:de:00:
b4:f9:b9:70:17:8e:8b:15:51:3d:0e:ea:32:39:b7:65:f3:ae:
86:2f:43:42:76:16:6d:e2:d1:dc:95:90:81:fe:03:c2:78:23:
c3:8c:39:ff:de:5c:3e:41:e1:6c:93:12:45:9c:38:29:ce:70:
79:f1:3b:a0:a7:d7:d5:ce:1d:b2:25:22:df:d9:02:3b:8a:08:
26:c5:54:24:ff:a0:3c:13:71:af:48:af:8b:4f:b7:fc:4f:99:
82:ff:18:78:59:d6:3a:82:9a:2b:c3:ad:af:59:dc:0a:12:75:
43:f6:ff:9b:b2:01:fd:26:6d:88:df:8c:70:85:d1:b7:7c:a1:
5b:d9:88:28:91:79:05:5d:dc:8c:8d:ca:18:34:1d:cb:ce:90:
b6:81:88:31:94:bc:02:c2:b6:07:97:e9:ce:1f:b8:a4:d5:e2:
4c:a4:a0:cd:10:53:23:ea:38:fb:8c:db:ed:d5:eb:ea:71:10:
5f:d4:86:fd:f4:b0:6d:ed:ad:25:ef:4e:62:21:76:52:60:b2:
9f:e3:8c:d6:f1:ed:93:ec:ec:4c:51:f3:ca:0d:15:41:b3:c4:
01:73:2b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs0xeg1zNxlPwh/l27Mb249MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGRkNGM5ZGMyM2ZhYzM1NTc0ZmNlMmI0Mjk0Mzk4YWRk
ODUyMWMwHhcNMjUxMjE5MDQwMjIzWhcNMjUxMjIwMDQwMjIzWjAzMTEwLwYDVQQD
Eyg2YWUwZmZiYzA0NTljNzQwY2I5ODgzNzEyZmY3ZTkwYWQ2OWYwMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/XmH0LQ0g1+Hk3h5jiDbaHcULLU
RWWR+fUn52VbUr1IkGaK2P9GYCAal4R4EgcOyDqc73HGc7jN1k+3QRch7XplntrK
CSXyx0slpp/u8qYQr2PH49t8Bq4Qb9fmS8xOLhRSXFBD/GbKsT/eBUcwDmMA3llN
0r8fAXRoFjpUuN5LtrzNUElyh4Ss95PmTkf5mggrg70nck87dORVBkM4AAukVfky
ldMrhlj+m79RykBk/tlE+2JqPl5RoESTXhbSnAxBjj9U2cDPcc5NS5tGkM9a0ySF
pXQltIAE/vrPC/y0fr4qVJadC5xFuCJ5dcwE7NpxAZpzRfUALO9cUNoT9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrg/7wEWcdAy5iDcS/36QrWnwB8MB8GA1UdIwQY
MBaAFBXd1MncI/rDVXT84rQpQ5it2FIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEt
Y2IzY2QwNDA0YWI1LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEtY2IzY2QwNDA0YWI1
LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFacCNEJ
eZxEf0hps+Bvj8eT4qgNR7lO+N3bwOFKhjAKMN4AtPm5cBeOixVRPQ7qMjm3ZfOu
hi9DQnYWbeLR3JWQgf4Dwngjw4w5/95cPkHhbJMSRZw4Kc5wefE7oKfX1c4dsiUi
39kCO4oIJsVUJP+gPBNxr0ivi0+3/E+Zgv8YeFnWOoKaK8Otr1ncChJ1Q/b/m7IB
/SZtiN+McIXRt3yhW9mIKJF5BV3cjI3KGDQdy86QtoGIMZS8AsK2B5fpzh+4pNXi
TKSgzRBTI+o4+4zb7dXr6nEQX9SG/fSwbe2tJe9OYiF2UmCyn+OM1vHtk+zsTFHz
yg0VQbPEAXMrhA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:49:22 2025 by rpki-client