This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: i7awdQ4+Ee2QLrC5jsrFiffUJ+G+HCTsdfut6oAE4SU=
Subject key identifier: DB:DD:2E:E9:D7:4B:50:FB:F4:05:BF:54:D3:2F:4D:79:D5:36:A0:4C
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019B3DFE99519368AC0DB2C79C5D1DAFFE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 178E
Signing time: Sat 20 Dec 2025 23:00:54 +0000
Manifest this update: Sat 20 Dec 2025 23:00:54 +0000
Manifest next update: Sun 21 Dec 2025 23:00:54 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: yS0EpGxSGVOpPo5LaMCp1d3ID7WjSa7ULUHPth7mm5Q=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:fe:99:51:93:68:ac:0d:b2:c7:9c:5d:1d:af:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Dec 20 23:00:54 2025 GMT
Not After : Dec 21 23:00:54 2025 GMT
Subject: CN=dbdd2ee9d74b50fbf405bf54d32f4d79d536a04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:94:93:47:b5:5e:23:09:8e:f1:bc:cd:5d:
0b:db:37:49:47:ea:7d:fb:d1:4a:8f:5b:2f:dc:93:
27:a6:ec:2d:15:04:1d:39:e5:1f:9a:60:6c:6d:b2:
92:b4:6e:c8:6e:b9:b7:c9:22:98:7a:50:d8:84:8d:
9e:90:fe:42:4e:53:50:73:e8:66:ad:79:50:38:83:
15:ae:aa:53:27:c3:e2:29:df:c2:a1:46:b5:46:c7:
42:46:6a:96:9b:c3:27:2d:50:b7:15:47:93:ac:b1:
df:06:75:10:38:21:bc:92:71:45:75:35:a7:73:f5:
08:21:e1:e7:83:e5:7a:e2:90:4e:ad:19:7c:3c:29:
f8:1a:65:20:d0:c2:2b:b1:58:96:c9:ce:4f:f0:23:
00:d8:8b:56:ca:a9:d2:92:10:85:b9:eb:3c:f9:38:
ea:a4:48:7e:5a:33:93:7b:8b:f9:f9:b9:8c:a1:af:
30:03:13:ac:3d:03:e6:f1:8d:0d:84:1b:9d:fb:99:
6d:ba:e8:88:27:06:74:82:94:33:d0:59:b4:2c:25:
66:83:9c:e0:d4:ba:c3:07:d5:a6:f3:03:0e:d7:ea:
c5:71:f1:1f:5a:5e:51:a6:fc:e3:eb:2f:31:7a:0c:
36:9b:68:aa:c0:0a:9c:12:07:6a:37:24:4e:e8:c2:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:2E:E9:D7:4B:50:FB:F4:05:BF:54:D3:2F:4D:79:D5:36:A0:4C
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:fb:c9:a6:a0:4b:e4:f7:84:cc:e8:4a:1c:ff:da:2b:c3:
00:50:9a:7e:ec:ee:c2:01:c5:d1:8d:0b:32:fe:da:52:dc:d0:
7d:72:fd:35:b3:2e:37:6e:01:bf:d4:df:29:7b:a0:32:4a:a8:
ff:4f:e0:35:77:29:f6:28:65:a8:18:2a:12:b7:ae:5d:39:5e:
8a:e8:f2:f4:4b:70:3b:c9:61:7c:ab:47:e7:13:7a:07:52:7b:
7c:c3:79:73:95:76:0c:60:a7:20:9d:b0:3c:0a:fd:cd:74:0d:
6c:45:88:e1:a6:bd:8c:81:47:f0:1e:b3:21:39:9a:09:6d:c1:
57:6e:6f:0f:35:59:b8:a4:d9:80:0a:13:dd:f3:3f:96:b7:fb:
ae:d2:11:22:82:54:98:0e:5f:9c:13:d6:8e:bc:3e:7a:04:c3:
39:94:e9:fd:b1:e8:14:e3:4f:03:4d:de:e0:22:e5:f6:1b:59:
c4:c1:23:d2:f0:b8:f6:1f:c5:0f:5d:1a:07:69:1e:41:4f:57:
29:19:cc:82:72:04:e1:74:4a:c9:1e:86:f4:80:0b:6f:ce:eb:
ee:ed:09:c4:d7:4a:62:fb:2b:c7:5b:92:e0:1c:a4:71:c6:98:
2b:16:1a:87:b9:78:02:ec:81:de:90:9d:f8:d0:42:9e:51:15:
f7:e6:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:12:28 2025 by rpki-client