This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: QCOEx2cHdKO/uHkvqlsJQ8SaTlXmA0dzEQH/yxmUzK8=
Subject key identifier: 1F:DD:A1:05:05:0F:7D:5B:80:53:87:06:34:EB:EB:BB:08:87:88:F7
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019B4A02E25E24A0C91386E25C0600391BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 178D
Signing time: Tue 23 Dec 2025 07:01:01 +0000
Manifest this update: Tue 23 Dec 2025 07:01:01 +0000
Manifest next update: Wed 24 Dec 2025 07:01:01 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: PTXI1NhHetdwM3N3qVn/s1JVw3ItZ8MRDpX5EGHArwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:02:e2:5e:24:a0:c9:13:86:e2:5c:06:00:39:1b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Dec 23 07:01:01 2025 GMT
Not After : Dec 24 07:01:01 2025 GMT
Subject: CN=1fdda105050f7d5b8053870634ebebbb088788f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:81:0d:22:c4:cc:7f:ca:bc:b5:a2:be:58:
61:95:b9:ed:aa:28:7f:c8:71:3f:51:c5:88:87:d1:
c4:c0:ae:f4:14:3e:22:a1:fa:21:3b:9d:ab:ae:57:
1f:fb:7f:6c:94:39:26:be:c7:55:d4:5c:1f:77:65:
12:d5:67:b6:31:25:8d:15:15:16:4f:d3:fa:b7:ec:
f2:e7:55:b5:8f:3d:3f:be:63:70:1f:00:29:9a:21:
c7:30:48:2b:02:16:7e:1f:18:83:ab:ac:31:13:a5:
74:4e:20:7e:83:79:29:11:98:ad:dd:78:2e:71:50:
e2:a5:ac:50:8f:f9:36:7e:d6:6f:9b:e6:b9:69:04:
e9:d8:79:1b:47:a7:a2:26:52:db:53:19:cf:07:90:
68:7f:dc:84:cc:ed:7f:18:75:a7:de:aa:b3:21:ef:
1f:79:84:a4:f1:ba:39:fd:ab:0d:12:04:b7:4d:98:
a6:3d:c7:74:37:f0:2d:87:4f:71:6e:4a:f8:73:71:
02:9f:f1:66:03:09:87:13:f8:ed:a8:f6:94:90:fc:
3a:41:3f:de:1c:fb:55:cb:02:28:75:4c:c3:05:54:
cb:1a:cc:a6:f9:9b:ef:a2:db:4f:42:a6:46:61:18:
bb:e1:18:7c:d1:c3:d4:04:e2:5c:03:16:8b:52:53:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:A1:05:05:0F:7D:5B:80:53:87:06:34:EB:EB:BB:08:87:88:F7
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:27:37:57:e6:61:80:01:c0:75:0c:e8:99:8a:84:eb:e5:
e8:b3:30:e1:a2:7e:52:ac:13:10:2a:1f:85:bf:f3:1d:be:3b:
18:56:49:3c:c3:fc:c0:72:66:b0:2b:a5:e6:ba:dc:9a:dd:cc:
2b:18:1a:78:26:1e:bc:cb:eb:9b:f6:c1:22:e5:7c:a4:43:61:
d4:53:28:77:39:48:da:5c:58:10:ef:67:19:0e:fc:ad:c4:ca:
f4:2a:26:67:71:e8:c7:7f:e1:bb:e3:98:90:f9:6b:e5:4b:d4:
df:63:c2:b1:96:bc:54:9f:c5:e1:0d:23:91:e1:e8:56:db:23:
09:1d:00:3c:e6:04:c9:d6:47:3d:97:c6:93:a8:85:26:fb:65:
96:e2:62:16:50:41:d3:01:ba:1c:b1:e6:93:d8:ab:3e:72:1f:
e2:a6:76:bf:01:81:35:38:06:7d:de:30:a9:4b:b2:18:ca:e3:
75:2a:dc:87:9d:fe:01:98:d4:b0:c4:e6:69:15:02:68:bd:31:
23:19:f7:fe:58:65:3b:9a:ae:f8:87:cd:99:6d:68:10:a5:8b:
9f:f6:a6:b2:ac:85:31:24:90:34:f1:73:00:e8:7b:7e:f3:5a:
da:c2:e5:76:dd:28:53:e5:70:04:5b:70:08:28:9e:14:29:e9:
21:fa:b2:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtKAuJeJKDJE4biXAYAORvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjUxMjIzMDcwMTAxWhcNMjUxMjI0MDcwMTAxWjAzMTEwLwYDVQQD
EygxZmRkYTEwNTA1MGY3ZDViODA1Mzg3MDYzNGViZWJiYjA4ODc4OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h2BDSLEzH/KvLWivlhhlbntqih/
yHE/UcWIh9HEwK70FD4iofohO52rrlcf+39slDkmvsdV1Fwfd2US1We2MSWNFRUW
T9P6t+zy51W1jz0/vmNwHwApmiHHMEgrAhZ+HxiDq6wxE6V0TiB+g3kpEZit3Xgu
cVDipaxQj/k2ftZvm+a5aQTp2HkbR6eiJlLbUxnPB5Bof9yEzO1/GHWn3qqzIe8f
eYSk8bo5/asNEgS3TZimPcd0N/Ath09xbkr4c3ECn/FmAwmHE/jtqPaUkPw6QT/e
HPtVywIodUzDBVTLGsym+ZvvottPQqZGYRi74Rh80cPUBOJcAxaLUlPs5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/doQUFD31bgFOHBjTr67sIh4j3MB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaEnN1fm
YYABwHUM6JmKhOvl6LMw4aJ+UqwTECofhb/zHb47GFZJPMP8wHJmsCul5rrcmt3M
KxgaeCYevMvrm/bBIuV8pENh1FModzlI2lxYEO9nGQ78rcTK9ComZ3Hox3/hu+OY
kPlr5UvU32PCsZa8VJ/F4Q0jkeHoVtsjCR0APOYEydZHPZfGk6iFJvtlluJiFlBB
0wG6HLHmk9irPnIf4qZ2vwGBNTgGfd4wqUuyGMrjdSrch53+AZjUsMTmaRUCaL0x
Ixn3/lhlO5qu+IfNmW1oEKWLn/amsqyFMSSQNPFzAOh7fvNa2sLldt0oU+VwBFtw
CCieFCnpIfqyYw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 17:16:03 2025 by rpki-client