This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: mxj++UGt1h/L8frsGGdKNc/CBVYbnHJtfb7Gi7sSILs=
Subject key identifier: 2D:10:3A:A0:73:85:72:AD:66:A3:9D:40:8F:51:F8:A9:55:1D:37:2C
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019B3D238C46DF58F96F9C8BE20A2D87EFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0E57
Signing time: Sat 20 Dec 2025 19:01:38 +0000
Manifest this update: Sat 20 Dec 2025 19:01:38 +0000
Manifest next update: Sun 21 Dec 2025 19:01:38 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: yYdeF3oEVCnzbzkShf46zSwyOg4Ccikfd9Rjzp7hWOE=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:23:8c:46:df:58:f9:6f:9c:8b:e2:0a:2d:87:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Dec 20 19:01:38 2025 GMT
Not After : Dec 21 19:01:38 2025 GMT
Subject: CN=2d103aa0738572ad66a39d408f51f8a9551d372c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:b0:dc:bb:a9:95:15:8f:a7:e8:4e:c7:e7:
08:bd:4a:48:7b:2a:fd:85:fc:6d:bb:0e:dd:9c:c0:
da:6b:37:40:05:d4:79:f4:50:79:c8:6d:18:ba:84:
45:9e:a4:28:eb:bd:ed:e0:3c:14:1f:9e:49:a2:42:
51:d1:f7:49:b6:d7:56:b7:48:cd:33:ed:08:d8:f5:
86:2f:81:ef:fb:79:ff:42:2f:62:12:d5:f0:4d:76:
42:51:03:a1:cd:a7:ae:ff:e2:72:39:5f:44:b3:91:
45:25:2f:53:3a:2c:57:59:0b:ef:a8:b5:df:d3:a6:
96:ac:d5:9f:c2:50:ae:dc:d1:6b:7b:fe:81:19:52:
79:f2:0f:50:15:06:be:4f:f3:1b:e2:5a:73:ba:49:
b0:91:36:b6:72:8a:aa:2d:94:2a:4f:e4:9f:09:4f:
d6:cf:1b:6a:78:c6:9d:1e:a3:61:e0:05:d7:59:6c:
1d:db:06:48:4b:56:3a:bb:90:35:46:fb:92:22:39:
09:e0:e2:ff:33:83:0f:be:07:cd:d6:56:8c:95:7f:
fe:45:f1:d4:30:eb:68:9f:ab:71:cf:79:16:69:60:
4c:5e:c8:a1:29:79:eb:12:e0:5e:89:75:66:99:57:
bd:38:08:cf:5a:80:00:2d:79:12:1b:bb:7a:a0:ba:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:3A:A0:73:85:72:AD:66:A3:9D:40:8F:51:F8:A9:55:1D:37:2C
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:c7:71:af:72:21:c5:54:db:1f:9c:00:f6:e3:db:24:2a:
62:cd:f2:77:63:a5:87:37:4b:74:f9:dc:78:ca:ba:84:68:98:
a8:9e:5c:ca:d6:ae:92:21:5d:cd:c4:53:71:f4:65:b4:03:1c:
49:2e:49:35:8e:b7:8c:4f:d9:0b:66:74:90:b6:f3:14:0a:e5:
cf:ba:ee:b6:16:7c:9a:f8:d3:c0:75:cb:6f:58:6d:2a:bb:9d:
b8:d8:30:96:a1:8e:2b:19:13:a9:c6:56:7f:57:e4:12:5c:df:
e9:46:e1:c2:26:7b:2c:49:73:0a:80:87:29:f7:9c:c7:61:d9:
66:e9:3b:a6:7f:ed:1b:85:af:02:63:74:99:8a:9e:30:92:cc:
0b:a7:8f:32:c5:bd:59:5a:b1:70:52:f4:9f:8b:3a:03:ab:c2:
55:04:55:27:e2:80:31:11:af:4b:8c:48:54:4c:3f:ec:45:f8:
75:29:9f:c5:8e:e5:09:5b:50:ab:13:d7:f9:67:6a:49:e4:6e:
80:a2:b9:22:ae:58:95:4e:9d:73:06:02:d0:55:3e:fd:39:7d:
74:59:ee:64:4c:98:85:61:08:56:71:4f:bb:2d:25:e6:67:2f:
96:20:c3:71:77:8f:8d:ae:3a:7b:d2:8a:aa:54:7a:db:2c:da:
24:2c:be:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9I4xG31j5b5yL4goth+/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Nzc0YjdiNTMwZWRhY2Y4ZmE3MzM1M2E5MDE0YTU2Mzg5
NDliZmIwHhcNMjUxMjIwMTkwMTM4WhcNMjUxMjIxMTkwMTM4WjAzMTEwLwYDVQQD
EygyZDEwM2FhMDczODU3MmFkNjZhMzlkNDA4ZjUxZjhhOTU1MWQzNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRmw3LuplRWPp+hOx+cIvUpIeyr9
hfxtuw7dnMDaazdABdR59FB5yG0YuoRFnqQo673t4DwUH55JokJR0fdJttdWt0jN
M+0I2PWGL4Hv+3n/Qi9iEtXwTXZCUQOhzaeu/+JyOV9Es5FFJS9TOixXWQvvqLXf
06aWrNWfwlCu3NFre/6BGVJ58g9QFQa+T/Mb4lpzukmwkTa2coqqLZQqT+SfCU/W
zxtqeMadHqNh4AXXWWwd2wZIS1Y6u5A1RvuSIjkJ4OL/M4MPvgfN1laMlX/+RfHU
MOton6txz3kWaWBMXsihKXnrEuBeiXVmmVe9OAjPWoAALXkSG7t6oLqYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0QOqBzhXKtZqOdQI9R+KlVHTcsMB8GA1UdIwQY
MBaAFHR3S3tTDtrPj6czU6kBSlY4lJv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzkt
ODViZDM0YmQ0ZTVhLzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzktODViZDM0YmQ0ZTVh
LzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtvHca9y
IcVU2x+cAPbj2yQqYs3yd2OlhzdLdPnceMq6hGiYqJ5cytaukiFdzcRTcfRltAMc
SS5JNY63jE/ZC2Z0kLbzFArlz7ruthZ8mvjTwHXLb1htKruduNgwlqGOKxkTqcZW
f1fkElzf6UbhwiZ7LElzCoCHKfecx2HZZuk7pn/tG4WvAmN0mYqeMJLMC6ePMsW9
WVqxcFL0n4s6A6vCVQRVJ+KAMRGvS4xIVEw/7EX4dSmfxY7lCVtQqxPX+WdqSeRu
gKK5Iq5YlU6dcwYC0FU+/Tl9dFnuZEyYhWEIVnFPuy0l5mcvliDDcXePja46e9KK
qlR62yzaJCy+cQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:43:15 2025 by rpki-client