This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: wgzOE+/4tZXiZ+g2En4TBVSeefulW1HVwICi8RLxCjc=
Subject key identifier: 8D:67:FF:CC:3B:E6:EB:7E:52:02:A0:B9:00:A5:92:77:46:C7:38:D0
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 019B3CEC8BC5401554E081DB0D6DBDC3F394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 13D6
Signing time: Sat 20 Dec 2025 18:01:33 +0000
Manifest this update: Sat 20 Dec 2025 18:01:33 +0000
Manifest next update: Sun 21 Dec 2025 18:01:33 +0000
Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=)
2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: DKDHyyK/NZ5B+5vJriza+ag9PuPeTlK+3RhJLSfA9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:ec:8b:c5:40:15:54:e0:81:db:0d:6d:bd:c3:f3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Dec 20 18:01:33 2025 GMT
Not After : Dec 21 18:01:33 2025 GMT
Subject: CN=8d67ffcc3be6eb7e5202a0b900a5927746c738d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:f6:05:1d:aa:13:9c:55:4b:51:b7:ca:94:
d5:0c:ca:35:81:a5:82:3f:a5:8b:9a:4a:d8:af:99:
cd:80:ac:77:0c:62:5e:f8:cf:b1:15:2f:c9:9e:65:
9e:ce:5b:04:7d:db:fd:b0:a3:91:d8:84:62:96:f7:
da:0a:1f:89:b6:0b:70:37:4a:77:16:7e:61:ef:b3:
29:94:e2:cc:a3:07:e3:ed:0a:5b:96:6f:60:32:04:
74:78:cf:48:52:d5:59:53:a0:80:f7:06:ab:5a:69:
d4:41:14:2b:71:f0:19:53:d0:e3:8c:7d:a2:33:2b:
ad:66:df:f0:86:21:c6:70:37:b5:58:4d:9d:d9:54:
15:11:4a:e9:a0:40:db:3d:a4:91:61:2c:a7:a0:fb:
33:05:98:b7:3b:4b:14:23:44:65:97:27:bf:07:e5:
6f:78:33:64:fd:68:e7:cf:49:50:96:56:f2:91:9d:
57:33:40:5f:33:20:43:d5:f8:04:a7:db:f3:d7:e0:
c0:9f:56:b9:cf:6f:04:e6:e5:30:72:77:94:61:1c:
40:c1:a5:21:93:18:6e:46:dd:6a:80:7f:3d:50:d9:
36:ac:3e:8a:58:84:f6:96:67:9f:50:21:94:14:69:
5a:8c:d8:84:f8:a6:9c:cc:ee:6d:d0:6f:d3:82:6e:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:FF:CC:3B:E6:EB:7E:52:02:A0:B9:00:A5:92:77:46:C7:38:D0
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:20:3c:de:96:34:4b:b5:77:3c:a1:01:74:2c:37:8a:55:38:
14:b2:39:40:c6:5e:4c:95:cb:1b:b2:83:e1:3b:bd:d6:dc:66:
b4:06:fb:28:98:7c:5f:e5:38:c5:5a:a0:68:71:55:79:b7:16:
f3:bf:7c:9c:f6:de:5d:01:5c:5b:d8:68:df:a1:c8:95:cf:9c:
d7:ba:be:61:64:bc:22:3b:2d:79:65:c7:c4:74:ae:7d:f9:09:
7f:f1:52:02:19:0f:a1:ef:4d:a6:0e:82:58:ee:36:ba:ca:41:
4f:6f:82:ca:4b:24:64:6a:55:72:f2:69:73:c7:b8:c7:f3:ab:
7d:bf:e9:43:4f:4f:3d:8b:54:d6:d5:9f:67:61:ab:67:24:79:
23:bd:17:2c:d9:1b:f2:58:01:49:49:68:d8:ec:7c:85:82:eb:
d4:8a:2c:d0:dd:d8:5b:c2:c7:62:48:84:e5:f3:c3:fc:50:1a:
54:aa:46:6c:69:5d:7b:57:8e:6d:f5:b5:2c:37:8c:bd:54:19:
cf:e9:39:bd:09:fb:d3:d1:a9:d0:26:9a:38:a5:fd:1c:1d:34:
d9:b9:06:56:2b:ae:bd:6f:65:75:a6:b1:20:5f:fd:ab:d9:f6:
62:6a:9c:f2:86:c5:7e:15:d8:ec:c6:60:58:b4:71:3e:d7:fd:
9c:b8:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:28:02 2025 by rpki-client