This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: iVNHnzzw8JVetYDk0CdDJulqsqEVj+m2AsAu7JCvTPc=
Subject key identifier: 40:AE:65:D7:A6:A3:C6:FC:C1:5A:7D:76:D0:47:0A:A9:7F:73:75:0C
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019B39B3FD2BE253F3A7475D27545483FA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 06D5
Signing time: Sat 20 Dec 2025 03:00:55 +0000
Manifest this update: Sat 20 Dec 2025 03:00:55 +0000
Manifest next update: Sun 21 Dec 2025 03:00:55 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: iMZgoaStjOUEAMCmn8uwKK3b4WUNNZs4JEdFpDtjh3g=)
2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:b3:fd:2b:e2:53:f3:a7:47:5d:27:54:54:83:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Dec 20 03:00:55 2025 GMT
Not After : Dec 21 03:00:55 2025 GMT
Subject: CN=40ae65d7a6a3c6fcc15a7d76d0470aa97f73750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:12:66:a0:b9:1a:bc:7a:c1:76:67:85:c1:
33:88:8e:78:42:d3:fb:90:07:31:cc:7e:43:33:cb:
2e:f9:51:89:5e:e1:c8:0a:0d:27:1a:08:b7:8f:11:
4d:61:f8:f1:44:66:25:69:53:3b:59:64:38:77:be:
79:5b:61:73:ef:f4:46:59:f7:54:bf:a2:54:50:05:
e9:b4:de:77:a1:2f:81:d6:79:c8:d4:fe:fb:1c:97:
29:b5:8d:c4:a5:f7:00:46:ec:c1:0a:bd:6a:f8:6d:
0e:c5:61:08:14:bc:63:fb:4f:2a:f5:5a:c7:46:60:
b0:c3:bc:1f:dc:57:bd:f2:27:fc:08:e7:f0:f4:1c:
b1:a0:dd:56:00:1e:b5:af:b6:b4:98:8c:68:1a:53:
3e:6c:9b:4b:34:a9:39:0a:89:f6:5a:03:d5:d7:63:
d7:38:7f:91:e2:5f:ff:ad:dc:1d:a9:5c:83:e8:f7:
06:ad:50:15:e1:f4:d2:6b:54:26:ee:46:10:c9:aa:
ab:24:b4:03:09:a8:d1:c5:85:93:d7:98:9c:88:17:
fa:13:34:5f:da:89:7d:93:50:5d:f4:d2:ff:b6:3b:
45:2d:e0:34:90:3d:30:8b:ab:79:2e:8f:7b:11:a4:
bf:9a:7e:1b:90:d1:a7:ee:f2:6c:e8:3f:5b:28:3a:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:65:D7:A6:A3:C6:FC:C1:5A:7D:76:D0:47:0A:A9:7F:73:75:0C
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:87:13:4c:a7:a1:d0:e8:92:ee:8b:ab:df:03:62:db:20:
51:23:69:33:cc:fa:f0:7d:d0:46:e7:73:4f:47:cf:c1:e5:f7:
7f:33:c8:a6:2e:1b:79:bf:72:0c:6d:4f:68:01:c0:2a:8d:52:
34:5d:d9:bf:52:65:72:c2:42:c3:39:28:f8:f2:aa:35:10:18:
66:1d:d4:97:55:85:40:58:24:4f:ae:83:16:ae:27:92:5c:f4:
89:ff:ab:03:9f:9c:90:a1:05:12:ab:30:1e:89:0c:8e:80:47:
65:2a:8b:1f:42:eb:db:00:63:93:f1:69:f0:83:19:1a:9b:7f:
41:eb:fb:51:c6:df:6a:68:8d:f5:be:ec:48:71:c8:26:60:89:
a8:3b:43:bc:db:2c:f2:66:49:f4:49:f6:46:c7:e8:41:e9:f9:
be:58:fd:d5:bb:00:07:1d:32:92:ea:08:93:1a:18:f8:24:1a:
33:98:4c:34:52:f0:3a:15:2d:bd:29:42:20:fc:42:2e:a5:33:
8d:00:1a:bf:19:4b:3d:44:f7:e5:2f:2c:7a:7c:63:6e:dc:c4:
83:91:15:45:95:fa:8d:24:05:7c:d0:7c:f7:12:c0:9a:ed:b1:
03:e3:2e:79:c6:19:16:48:06:84:34:87:58:02:36:2e:6b:6c:
80:b7:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:03:30 2025 by rpki-client