This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: GlMmx8zhrtqTfzT0D9j+QTLODXM8rqY6JaSrwxZsUg4=
Subject key identifier: 4B:6C:3C:E1:72:2D:65:6E:4A:0B:AB:BB:C2:C8:49:25:AE:EE:CD:AD
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019B668CA9F71CAB318DEE85B3CBEE9221FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 179E
Signing time: Sun 28 Dec 2025 20:00:52 +0000
Manifest this update: Sun 28 Dec 2025 20:00:52 +0000
Manifest next update: Mon 29 Dec 2025 20:00:52 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: f7Vpwv378glS5wt9CLdid96bOXO5G0a+EurHgMtLWAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:66:8c:a9:f7:1c:ab:31:8d:ee:85:b3:cb:ee:92:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Dec 28 20:00:52 2025 GMT
Not After : Dec 29 20:00:52 2025 GMT
Subject: CN=4b6c3ce1722d656e4a0babbbc2c84925aeeecdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:56:cb:62:8f:14:16:ce:1d:df:bd:9c:1d:
97:61:34:e1:92:28:c8:ef:72:e2:c2:0a:83:21:3e:
2d:5d:69:1e:61:dc:0e:93:02:e4:fc:3e:2a:95:ae:
4d:01:f3:73:f5:56:13:55:f3:89:c7:79:19:3c:37:
4d:dd:12:a7:a6:4a:3e:5e:9a:86:17:1c:df:14:74:
41:c9:1c:0c:df:73:a4:f5:78:93:ef:54:17:c8:37:
27:fb:48:43:2f:64:aa:8a:15:1c:ed:4e:58:36:91:
52:76:fc:14:8a:54:a8:5b:b2:ab:f8:b6:2a:a4:4f:
6b:e2:9b:2f:1e:a2:89:92:fc:8c:53:e0:18:b4:e2:
37:ce:c6:b0:d6:6f:5e:45:74:9a:18:c7:f0:ae:46:
fe:46:f6:6e:19:30:20:09:74:31:da:60:b4:b9:f6:
44:07:92:85:70:5b:b9:03:56:cd:52:46:f5:f0:da:
04:01:38:0b:f0:36:c2:8c:4f:fc:8c:43:c7:58:40:
69:6d:94:3d:d6:32:e2:4a:7a:29:05:57:f5:11:7c:
2d:66:92:3f:41:aa:c7:cd:61:f6:77:65:1a:e5:43:
35:2f:79:59:68:9a:de:f5:20:6f:ad:3e:9c:1e:92:
48:cd:72:b9:e5:e0:7d:be:7e:28:69:00:35:fe:82:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:3C:E1:72:2D:65:6E:4A:0B:AB:BB:C2:C8:49:25:AE:EE:CD:AD
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:49:e5:3e:13:0c:59:1e:f0:0b:6a:bd:9c:0c:2b:3f:77:
e9:2b:74:86:80:4f:40:aa:87:83:62:52:92:33:b3:72:40:29:
a3:52:86:66:b2:47:fd:ec:38:b5:ae:ba:32:5b:a7:fd:85:7a:
c9:4c:a9:e6:09:69:49:72:07:ee:12:0c:b0:73:ee:7f:dd:c1:
53:1f:c1:c7:93:3f:ae:a4:2c:1a:a7:eb:1b:13:85:d8:b7:ca:
fd:fb:aa:3e:fc:aa:a7:1b:f9:53:b4:9a:bc:47:b6:13:e3:c8:
31:81:9b:e2:5c:95:5b:c0:ca:39:3f:8f:fe:4e:0e:62:21:28:
44:27:c0:9f:52:88:26:7d:7f:93:e8:33:3f:2b:a5:f1:10:95:
ed:c8:25:7d:3b:7f:86:11:b5:f5:ed:37:01:ef:cd:ca:36:9d:
9f:ff:b4:61:30:de:34:b2:02:3b:a6:35:70:ad:8a:55:ac:7f:
96:ba:fa:6e:46:84:48:cb:0a:21:95:be:c0:d3:4a:09:0f:87:
d2:a0:01:0f:ee:53:49:f6:8c:c1:7b:f8:51:db:6c:7c:4a:32:
0e:af:78:a5:fe:19:53:f1:bf:03:10:31:d6:44:46:2e:f2:87:
2a:b3:23:10:fa:a3:ec:d6:f2:33:fb:18:2e:9a:38:05:bb:88:
39:cb:cb:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtmjKn3HKsxje6Fs8vukiH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz
MzExYzcwHhcNMjUxMjI4MjAwMDUyWhcNMjUxMjI5MjAwMDUyWjAzMTEwLwYDVQQD
Eyg0YjZjM2NlMTcyMmQ2NTZlNGEwYmFiYmJjMmM4NDkyNWFlZWVjZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IhWy2KPFBbOHd+9nB2XYTThkijI
73LiwgqDIT4tXWkeYdwOkwLk/D4qla5NAfNz9VYTVfOJx3kZPDdN3RKnpko+XpqG
FxzfFHRByRwM33Ok9XiT71QXyDcn+0hDL2SqihUc7U5YNpFSdvwUilSoW7Kr+LYq
pE9r4psvHqKJkvyMU+AYtOI3zsaw1m9eRXSaGMfwrkb+RvZuGTAgCXQx2mC0ufZE
B5KFcFu5A1bNUkb18NoEATgL8DbCjE/8jEPHWEBpbZQ91jLiSnopBVf1EXwtZpI/
QarHzWH2d2Ua5UM1L3lZaJre9SBvrT6cHpJIzXK55eB9vn4oaQA1/oJLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtsPOFyLWVuSguru8LISSWu7s2tMB8GA1UdIwQY
MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt
YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy
LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROdJ5T4T
DFke8AtqvZwMKz936St0hoBPQKqHg2JSkjOzckApo1KGZrJH/ew4ta66Mlun/YV6
yUyp5glpSXIH7hIMsHPuf93BUx/Bx5M/rqQsGqfrGxOF2LfK/fuqPvyqpxv5U7Sa
vEe2E+PIMYGb4lyVW8DKOT+P/k4OYiEoRCfAn1KIJn1/k+gzPyul8RCV7cglfTt/
hhG19e03Ae/Nyjadn/+0YTDeNLICO6Y1cK2KVax/lrr6bkaESMsKIZW+wNNKCQ+H
0qABD+5TSfaMwXv4UdtsfEoyDq94pf4ZU/G/AxAx1kRGLvKHKrMjEPqj7NbyM/sY
Lpo4BbuIOcvL1Q==
-----END CERTIFICATE-----
Generated at Mon Dec 29 05:26:27 2025 by rpki-client