This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File: FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier: 1EX//yJ8CMsSl7P3SeVNH5h3FejfdIg0C3hmxWVN5GQ=
Subject key identifier: 0D:F0:39:F8:23:4F:85:2E:84:83:40:AD:30:B6:55:62:CB:15:48:7C
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 019B48F09303153315EC7F0DD8D825662DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number: 0CDE
Signing time: Tue 23 Dec 2025 02:01:24 +0000
Manifest this update: Tue 23 Dec 2025 02:01:24 +0000
Manifest next update: Wed 24 Dec 2025 02:01:24 +0000
Files and hashes: 1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: eveMBmn4RmB/zJ6mRj43FQ8rQQQ5PFjY5Xq/i67CDnk=)
2: ojHiQO19UWzWeZWUnpfHf7I7cMc.roa (hash: 9VsVu1Joj/Zh9nV4rRjBb7OhHCDd3dk9hkqFPQjM6n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 23:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:f0:93:03:15:33:15:ec:7f:0d:d8:d8:25:66:2d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: Dec 23 02:01:24 2025 GMT
Not After : Dec 24 02:01:24 2025 GMT
Subject: CN=0df039f8234f852e848340ad30b65562cb15487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:be:38:3f:c7:e4:04:ec:4c:32:8a:a7:c4:
96:01:0c:c5:8a:67:61:3c:1f:29:e5:4c:53:d3:fd:
1c:51:38:85:88:28:05:af:d5:c3:73:50:87:7c:27:
b0:17:a2:6e:95:80:cd:83:2d:e7:84:f8:b0:08:4a:
d2:27:f3:8a:73:d2:cd:d6:d9:67:1d:43:8b:6e:46:
e8:5e:6c:b9:0b:8e:a0:e5:74:ce:27:e0:fb:de:d7:
3c:e7:9d:76:df:fc:ae:d1:0c:de:ae:3e:0b:63:ff:
ce:30:86:50:19:14:3c:0d:a8:e0:f9:ae:fe:ba:b5:
f5:5e:80:e7:ed:99:a0:f6:d3:7a:53:c2:22:2a:26:
14:01:d8:80:84:33:50:69:e1:c9:2d:c7:d8:0f:9a:
30:a8:d5:f3:d2:eb:b1:df:38:df:56:64:70:1e:47:
9e:70:ce:d5:d5:ca:23:e9:ff:9d:34:3c:37:df:bc:
fb:5f:da:3e:3c:47:dc:1b:e0:10:44:52:0b:f6:c1:
c4:fb:58:77:9d:d9:e3:5d:a8:18:51:bf:d3:c1:46:
b5:7e:ed:8e:3d:c0:65:8c:34:95:e7:3c:b1:30:7c:
97:cb:0e:aa:a6:cc:bd:b8:f2:f9:32:0e:2f:8b:25:
33:64:1f:c7:05:7c:d3:e0:17:66:bb:41:5a:3e:60:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:39:F8:23:4F:85:2E:84:83:40:AD:30:B6:55:62:CB:15:48:7C
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:a1:53:13:bf:cb:04:bb:15:66:b3:f2:a8:9f:a5:6d:19:
ba:19:d8:84:e2:cc:b9:52:71:e8:fd:71:88:f4:1a:c3:49:9d:
bd:a3:03:c6:ef:7f:40:e5:fb:19:6c:13:ae:e4:20:c5:7d:6a:
2a:3b:b3:0a:65:03:29:90:6c:8b:44:e4:4f:00:5c:43:2f:ef:
5e:d6:17:9f:f4:28:7c:d8:40:f2:2d:3e:a8:40:19:2a:5d:67:
72:51:35:a5:1d:fc:bd:97:72:51:33:5f:26:9c:45:4e:5d:28:
0e:38:3f:6c:37:26:fb:33:1e:13:38:17:b3:a7:5f:0e:19:f0:
b2:ab:f5:b5:1b:45:49:51:5d:f9:f0:56:d6:41:0a:c0:ff:35:
62:f2:5e:8b:09:31:25:da:1b:c1:68:2e:bf:42:8f:5e:35:42:
ab:ab:41:00:00:b3:9e:2d:c1:98:88:d9:03:92:d3:f9:22:0e:
de:d2:8b:5a:94:a3:ed:7f:d7:07:a1:a9:4d:d1:16:b6:f8:4a:
f1:43:92:6a:9d:2c:d2:4d:40:02:37:1f:99:a3:96:14:99:44:
c8:fd:ae:67:d7:bc:4d:f2:9a:77:8b:5e:f6:23:a0:e3:68:c5:
4f:bf:c0:7d:dd:b0:ee:b4:b0:49:1b:c6:f8:fb:ac:ed:f6:42:
84:81:7b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtI8JMDFTMV7H8N2NglZi3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk
NDE3NDUwHhcNMjUxMjIzMDIwMTI0WhcNMjUxMjI0MDIwMTI0WjAzMTEwLwYDVQQD
EygwZGYwMzlmODIzNGY4NTJlODQ4MzQwYWQzMGI2NTU2MmNiMTU0ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxme+OD/H5ATsTDKKp8SWAQzFimdh
PB8p5UxT0/0cUTiFiCgFr9XDc1CHfCewF6JulYDNgy3nhPiwCErSJ/OKc9LN1tln
HUOLbkboXmy5C46g5XTOJ+D73tc855123/yu0Qzerj4LY//OMIZQGRQ8Dajg+a7+
urX1XoDn7Zmg9tN6U8IiKiYUAdiAhDNQaeHJLcfYD5owqNXz0uux3zjfVmRwHkee
cM7V1coj6f+dNDw337z7X9o+PEfcG+AQRFIL9sHE+1h3ndnjXagYUb/TwUa1fu2O
PcBljDSV5zyxMHyXyw6qpsy9uPL5Mg4viyUzZB/HBXzT4Bdmu0FaPmBErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3wOfgjT4UuhINArTC2VWLLFUh8MB8GA1UdIwQY
MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt
MWJjZTNiYzY3OGVkLzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk
LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF6hUxO/
ywS7FWaz8qifpW0ZuhnYhOLMuVJx6P1xiPQaw0mdvaMDxu9/QOX7GWwTruQgxX1q
KjuzCmUDKZBsi0TkTwBcQy/vXtYXn/QofNhA8i0+qEAZKl1nclE1pR38vZdyUTNf
JpxFTl0oDjg/bDcm+zMeEzgXs6dfDhnwsqv1tRtFSVFd+fBW1kEKwP81YvJeiwkx
JdobwWguv0KPXjVCq6tBAACzni3BmIjZA5LT+SIO3tKLWpSj7X/XB6GpTdEWtvhK
8UOSap0s0k1AAjcfmaOWFJlEyP2uZ9e8TfKad4te9iOg42jFT7/Afd2w7rSwSRvG
+Pus7fZChIF76Q==
-----END CERTIFICATE-----
Generated at Tue Dec 23 04:28:02 2025 by rpki-client