This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: UTS1mhJOkaF51yfBJX5sCIGpDm6VW0xLj3VBAq8uXWQ=
Subject key identifier: CD:D9:8E:6F:97:B1:B5:B6:D7:78:04:34:A8:E2:45:1A:19:A3:BB:57
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019B3EDAB9A49754112B17F668E7A6B0F7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 03:01:20 +0000
Manifest this update: Sun 21 Dec 2025 03:01:20 +0000
Manifest next update: Mon 22 Dec 2025 03:01:20 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: 5CAXIIa+UWNKyyvrl68HfThrD8RE3d4UHCaQloeXB2A=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:da:b9:a4:97:54:11:2b:17:f6:68:e7:a6:b0:f7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Dec 21 03:01:20 2025 GMT
Not After : Dec 22 03:01:20 2025 GMT
Subject: CN=cdd98e6f97b1b5b6d7780434a8e2451a19a3bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:2b:2e:cf:7b:37:35:f9:cb:b2:12:88:91:
5b:82:ff:56:23:7e:73:c9:c0:68:79:60:ee:36:93:
15:47:ec:e8:64:cc:7c:4d:9a:d1:31:6f:57:06:59:
c0:e4:47:54:5c:3c:50:1a:15:12:38:7c:05:43:70:
ac:ad:c1:f9:6f:0f:bf:7d:f6:dc:f6:89:cb:6a:4d:
3b:f5:75:91:15:07:21:f7:8a:2e:33:44:a2:0e:a4:
d2:d4:c2:73:4b:ab:96:6c:10:0b:4b:d9:e1:45:22:
5a:cc:3a:b0:d8:45:74:a8:2a:03:6c:81:68:84:41:
74:d9:36:e3:19:62:26:22:e0:09:48:fe:aa:2f:5d:
0a:bb:e2:4e:7b:37:f6:50:e1:44:91:a6:be:e5:42:
a0:e4:46:ae:c5:ad:df:7e:a9:53:4c:40:56:4c:26:
95:b0:bc:cf:86:5d:95:c7:98:3f:52:fd:23:86:b7:
d3:9a:7e:ad:9f:e9:be:ce:7a:0b:b3:19:17:8b:ad:
86:5e:39:18:ad:bb:a2:22:51:ab:24:6a:98:cf:d7:
12:ea:92:da:8a:ae:7b:c5:fc:5e:ee:bd:a6:b9:9d:
e3:48:f3:1a:5d:6d:fd:b1:63:13:58:bd:c9:ee:35:
cf:ed:d4:07:af:42:c6:3c:3e:2e:8d:c5:80:0c:08:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D9:8E:6F:97:B1:B5:B6:D7:78:04:34:A8:E2:45:1A:19:A3:BB:57
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b7:c5:f9:ca:f1:25:46:bf:3a:ce:54:8a:0e:15:62:69:e8:
27:1b:b1:0b:2d:a3:34:4e:f5:32:0f:be:57:b7:ee:0b:f6:1c:
ca:69:d4:60:ef:54:bb:a3:bc:ec:f8:18:d7:33:ac:26:1a:69:
00:d1:d5:fd:1f:10:6c:31:73:24:1b:a3:8d:df:f3:78:97:c7:
d1:8f:ac:ac:9e:64:34:4e:3e:78:4f:28:ba:c0:9c:a1:39:7e:
1b:8f:f1:cf:11:cb:fe:1b:a6:09:e6:3b:04:96:22:4a:30:22:
91:0c:83:83:96:de:cd:11:18:14:d7:bb:3f:3c:fb:4b:03:89:
c8:e1:5c:1d:49:75:63:61:90:e1:d4:48:6f:f6:0d:32:d1:6b:
70:8f:48:81:c2:e9:5b:2c:68:16:02:c4:88:f3:de:79:6c:bb:
5f:fa:69:07:b8:32:32:46:5f:7f:4d:cf:a5:dd:b0:fc:5b:0f:
ef:b3:ba:0b:f5:28:25:8e:8c:0e:85:d6:62:f9:1c:2f:2e:13:
b3:bf:60:aa:d6:27:4e:6e:05:34:a5:f3:b9:8d:10:08:3f:64:
96:db:d3:12:2e:ea:3c:17:84:01:ba:d5:3d:ef:fc:2b:56:ca:
b3:90:83:74:6a:02:56:d9:98:e1:aa:a3:c8:64:6a:be:85:38:
7f:00:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:04:40 2025 by rpki-client