This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File: preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier: lxCU1Fcsgk3nbBy8CZ1lowTrYus+vwiNTwp52B2ZkEc=
Subject key identifier: C6:D4:A9:6B:7B:51:E0:AA:FB:AC:DA:E7:AA:36:FA:F4:03:7C:21:36
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial: 019B40FFB6595796105FAC8B92A030FC5D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number: 1611
Signing time: Sun 21 Dec 2025 13:00:58 +0000
Manifest this update: Sun 21 Dec 2025 13:00:58 +0000
Manifest next update: Mon 22 Dec 2025 13:00:58 +0000
Files and hashes: 1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: 8BSlHWe3fTec82fl4ZFxOrLuS8TKSqrgK4VtTp4YddA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:ff:b6:59:57:96:10:5f:ac:8b:92:a0:30:fc:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Validity
Not Before: Dec 21 13:00:58 2025 GMT
Not After : Dec 22 13:00:58 2025 GMT
Subject: CN=c6d4a96b7b51e0aafbacdae7aa36faf4037c2136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:e1:11:c5:db:8a:5e:cc:ae:e6:17:20:bf:
6d:f1:29:cd:ed:23:62:9b:cd:18:66:d6:e4:e0:bb:
34:bd:0d:8b:b3:e6:cb:b0:d7:fe:d1:6b:76:89:71:
1a:5a:fc:c3:5e:0d:32:f2:5d:fb:c9:cc:6e:00:82:
b8:5d:ca:46:0b:ba:ad:6c:d3:55:3d:8e:ec:4a:c9:
0f:79:d2:95:97:9e:31:8b:62:cd:b4:c0:61:90:1f:
61:4f:2d:67:3f:89:2e:d5:e4:67:9c:cd:f3:bb:93:
f8:d3:7c:82:6a:c6:d4:17:3d:56:b7:a0:ad:4a:5d:
e4:ea:f7:45:94:ab:29:5a:e2:2a:d6:74:e6:d6:6e:
4d:e0:8e:dd:51:28:b7:68:ba:ee:a4:2e:7f:92:0e:
8f:73:f3:26:ca:08:9a:4c:da:3c:78:41:93:7d:b3:
c4:18:55:48:da:16:e0:be:b8:40:64:91:fb:31:5f:
85:52:ca:f1:43:0c:38:75:b1:53:a1:61:e8:54:88:
1d:b5:e5:6d:c4:8d:5f:26:7b:d0:b5:c1:22:c4:9d:
9f:a0:02:31:13:18:65:69:97:1e:92:84:64:54:47:
0d:27:5f:74:d5:24:3c:e2:93:bf:f7:bc:0d:96:b8:
2c:21:76:cc:84:0a:d7:b7:09:8f:23:4a:80:76:8e:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:A9:6B:7B:51:E0:AA:FB:AC:DA:E7:AA:36:FA:F4:03:7C:21:36
X509v3 Authority Key Identifier:
keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:aa:a2:80:36:cc:6a:25:f0:14:d5:ee:ff:cf:49:d7:c1:
d0:6e:8a:0c:ed:92:4a:08:bf:71:6a:41:72:8b:c1:86:97:43:
f8:5f:c8:e8:de:3f:43:8e:41:43:4b:a9:83:85:6b:fc:8f:a5:
cf:02:40:73:e1:19:0e:36:77:f0:2f:18:30:59:80:3c:1d:66:
be:03:e3:2d:5c:06:1b:ea:1c:f1:60:07:d4:d4:4e:bf:1a:31:
76:8c:72:2a:22:2c:47:36:53:da:f3:7d:62:9d:0c:b2:2d:9a:
bc:d7:a3:f9:b7:d4:dd:a0:d7:1c:09:e8:94:2b:53:69:15:ef:
e3:41:26:80:01:9e:83:42:09:89:96:87:a7:8d:7a:8b:31:38:
7d:70:f1:f3:96:d7:70:67:1d:fd:c2:08:e8:a0:9a:11:1e:70:
dd:69:27:25:65:23:ac:82:0c:8c:31:5c:ae:0f:91:fc:59:ee:
d7:8d:7e:d5:a1:c4:b8:7a:e9:f0:d8:8c:3e:32:64:84:75:51:
28:33:99:b4:60:ec:69:9d:c7:6c:ef:3b:bc:f1:28:ca:47:85:
30:9f:77:eb:8b:bb:e1:92:98:db:ad:11:3b:fc:74:af:95:67:
74:e2:c8:e8:a2:c8:39:08:08:a0:b2:eb:39:d2:f9:1f:24:df:
66:f6:38:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtA/7ZZV5YQX6yLkqAw/F0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm
ZjFlMDkwHhcNMjUxMjIxMTMwMDU4WhcNMjUxMjIyMTMwMDU4WjAzMTEwLwYDVQQD
EyhjNmQ0YTk2YjdiNTFlMGFhZmJhY2RhZTdhYTM2ZmFmNDAzN2MyMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy03hEcXbil7MruYXIL9t8SnN7SNi
m80YZtbk4Ls0vQ2Ls+bLsNf+0Wt2iXEaWvzDXg0y8l37ycxuAIK4XcpGC7qtbNNV
PY7sSskPedKVl54xi2LNtMBhkB9hTy1nP4ku1eRnnM3zu5P403yCasbUFz1Wt6Ct
Sl3k6vdFlKspWuIq1nTm1m5N4I7dUSi3aLrupC5/kg6Pc/MmygiaTNo8eEGTfbPE
GFVI2hbgvrhAZJH7MV+FUsrxQww4dbFToWHoVIgdteVtxI1fJnvQtcEixJ2foAIx
ExhlaZcekoRkVEcNJ1901SQ84pO/97wNlrgsIXbMhArXtwmPI0qAdo6wlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbUqWt7UeCq+6za56o2+vQDfCE2MB8GA1UdIwQY
MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt
MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy
LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdeqooA2
zGol8BTV7v/PSdfB0G6KDO2SSgi/cWpBcovBhpdD+F/I6N4/Q45BQ0upg4Vr/I+l
zwJAc+EZDjZ38C8YMFmAPB1mvgPjLVwGG+oc8WAH1NROvxoxdoxyKiIsRzZT2vN9
Yp0Msi2avNej+bfU3aDXHAnolCtTaRXv40EmgAGeg0IJiZaHp416izE4fXDx85bX
cGcd/cII6KCaER5w3WknJWUjrIIMjDFcrg+R/Fnu141+1aHEuHrp8NiMPjJkhHVR
KDOZtGDsaZ3HbO87vPEoykeFMJ9364u74ZKY260RO/x0r5VndOLI6KLIOQgIoLLr
OdL5HyTfZvY4UQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:54 2025 by rpki-client