This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: mG+Rm2KoUlAf8fGhPvmo1lGdJyXw3LRfcfAMnpXJnzo=
Subject key identifier: 2D:0F:62:EE:E1:5A:D6:33:EF:40:BA:B7:D4:7B:35:EC:36:B5:CA:46
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019B3E6E109A3BE2E4E4EDF12136CE3DE7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1347
Signing time: Sun 21 Dec 2025 01:02:38 +0000
Manifest this update: Sun 21 Dec 2025 01:02:38 +0000
Manifest next update: Mon 22 Dec 2025 01:02:38 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: fx+kJtMpXpu56v7OUpm6MrFQGc6aob3ePVNklPY9gxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6e:10:9a:3b:e2:e4:e4:ed:f1:21:36:ce:3d:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Dec 21 01:02:38 2025 GMT
Not After : Dec 22 01:02:38 2025 GMT
Subject: CN=2d0f62eee15ad633ef40bab7d47b35ec36b5ca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:da:6e:b1:4f:7f:bc:5a:e2:e3:4b:ff:3f:
28:97:6c:96:e9:55:7a:19:f8:36:fd:59:7c:96:93:
f7:ea:e6:16:b4:27:bc:b3:00:a4:75:16:97:1d:c5:
85:6b:9b:f3:07:f8:b9:60:81:76:0f:6b:25:40:94:
4f:70:ab:76:e0:c7:b6:5c:67:15:b3:f2:86:4c:fa:
a2:50:76:cf:a1:52:94:d7:78:a8:b7:c3:b6:f7:8f:
a9:32:bd:e7:ab:fc:24:39:90:d1:5f:7c:05:a7:7e:
3e:72:b2:73:79:74:a3:25:99:0e:0f:5d:ac:24:e4:
e2:56:87:1a:e4:81:20:19:25:ba:33:2f:7b:53:3b:
0b:29:48:b9:9f:bd:49:dd:d3:51:ed:14:a8:e6:ef:
53:a7:55:70:ac:22:43:72:4a:59:4c:bd:f1:d7:70:
d0:c4:53:bf:f5:15:aa:eb:05:fd:08:60:f0:5b:f1:
40:a8:d2:26:78:a0:bd:e6:0c:fd:14:29:06:1b:d2:
57:2d:cc:b8:cf:2c:c5:02:fd:79:57:c4:9c:62:98:
b5:37:d2:00:98:3c:9c:72:30:ed:85:db:ad:15:ee:
ae:bc:41:ba:a5:bf:3a:2a:23:e7:88:4d:2c:68:a0:
e5:72:85:38:63:24:0b:a8:57:df:37:17:f1:4e:dd:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:62:EE:E1:5A:D6:33:EF:40:BA:B7:D4:7B:35:EC:36:B5:CA:46
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7e:46:51:70:bb:c2:09:d2:19:e1:f3:e4:bd:63:48:8e:d6:
2e:2f:1f:ad:0d:a9:9c:f0:69:6f:e6:26:ce:d6:0d:dd:7f:e5:
31:d9:79:20:d6:5e:32:14:8e:94:3a:56:16:69:83:33:c3:45:
60:4d:90:54:54:8e:ba:5b:9c:bb:1d:95:9b:7e:2f:4e:cb:bb:
da:51:eb:7b:49:ac:63:d7:a5:b1:13:0e:90:5f:a9:a0:e9:af:
9b:2a:cf:e5:07:53:74:a1:0a:d7:da:b9:80:11:d4:55:b5:9d:
73:0f:f0:b5:34:b3:04:29:2b:c4:1a:8d:d8:7e:7c:65:f0:77:
43:dc:1f:8a:bc:a3:10:bc:d9:70:3e:45:97:70:4a:15:b0:5b:
d6:8d:64:d5:96:63:ec:de:86:96:c1:b0:02:7c:50:ed:db:9d:
bb:de:0f:7a:86:0a:2e:56:ab:94:56:19:72:27:c4:72:5f:bb:
1c:79:d8:96:d3:cd:d6:a8:8f:56:e6:e7:17:5e:f8:f6:21:e0:
24:68:f7:89:0e:0c:09:96:58:4b:84:f6:d9:90:8d:1f:bf:a0:
a8:a9:6e:b0:46:a5:5b:13:3f:3f:c3:fe:d0:50:73:af:24:d8:
2b:b9:9e:ec:60:7b:59:7e:8b:0e:4c:b6:a3:93:bc:a8:de:40:
b5:c9:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:13:03 2025 by rpki-client