This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: veOaamhteBHNtDaCOEDsjnFhdgaikHS/az6BH1Nopb0=
Subject key identifier: 15:4E:3F:9B:8D:85:FE:60:4B:25:8A:16:61:93:A9:7D:31:53:93:82
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019B514E6003D7B6D65AF4FE96BB6FA9773F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 15E8
Signing time: Wed 24 Dec 2025 17:00:49 +0000
Manifest this update: Wed 24 Dec 2025 17:00:49 +0000
Manifest next update: Thu 25 Dec 2025 17:00:49 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: ahSXl9T+P8W+XND2qG9kSN8BnVkWB6s5C/OtnRuTcP8=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:4e:60:03:d7:b6:d6:5a:f4:fe:96:bb:6f:a9:77:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Dec 24 17:00:49 2025 GMT
Not After : Dec 25 17:00:49 2025 GMT
Subject: CN=154e3f9b8d85fe604b258a166193a97d31539382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:01:29:f1:85:2f:57:3a:49:fb:d0:04:8d:
b3:63:4c:37:0a:4f:d0:11:f6:5b:2f:a2:16:13:7b:
74:c8:67:66:8b:ea:f2:e6:02:63:04:14:5d:90:df:
07:e8:3f:85:9f:44:1f:1a:b3:3f:41:7f:c6:b9:3f:
d7:8d:db:74:50:1c:3b:c2:c9:68:7d:8c:75:3c:ea:
59:35:7d:9d:b7:c8:21:41:55:02:2c:7e:c2:cf:9c:
ff:c8:ed:60:dc:ca:1f:bc:5c:68:6e:62:41:38:a2:
03:46:9a:30:a9:d7:fd:1a:75:76:57:97:a5:0a:9f:
06:52:e1:5f:39:fe:33:cc:fd:ee:19:5f:6c:2d:56:
b2:cf:0f:c4:b7:50:d9:9e:75:a8:54:08:47:3d:4d:
49:17:66:cd:fb:23:86:9d:fb:a4:d2:ef:ef:20:d8:
bd:c0:3a:e7:3b:a2:71:7b:85:bf:a3:36:8d:de:69:
4d:2f:c1:76:6a:ba:9b:4f:4d:4f:62:e7:d7:d9:ad:
f7:9a:c6:72:32:a9:28:d3:16:4d:d3:b0:01:c0:89:
ba:30:1a:22:15:f2:15:a0:14:c1:b8:0c:57:99:c9:
0a:6d:a1:c2:31:6d:0a:34:26:7d:c8:84:a7:47:e9:
72:dc:a9:7f:bc:1c:6f:56:13:7b:d3:89:26:49:99:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:3F:9B:8D:85:FE:60:4B:25:8A:16:61:93:A9:7D:31:53:93:82
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:e2:27:63:11:16:bf:ce:2b:ed:66:0b:ba:f4:9c:dd:47:
48:17:3e:d9:60:8a:51:cc:3e:98:35:13:ee:f5:b1:6a:57:93:
32:d7:b3:58:cb:9b:8c:55:9f:73:57:04:aa:ab:ca:36:74:5d:
1f:f3:ff:f6:b5:0d:62:4b:90:29:53:1e:2a:cc:ef:56:0a:e9:
e4:62:e7:f4:7d:3f:95:5a:6d:05:48:a1:fb:f7:e9:b9:eb:35:
3f:a3:8a:5d:b4:af:19:cb:68:b5:8e:36:18:84:cf:8b:d5:52:
80:ba:31:5d:27:46:24:45:72:9c:38:9c:b5:9c:67:d1:54:e3:
9e:e3:16:95:21:37:18:b4:14:42:a6:7e:56:12:d8:f8:c7:30:
34:a7:c2:a8:60:bb:b0:4a:dd:c9:2d:7f:5d:de:a6:17:85:20:
77:19:32:7c:15:6f:cb:fa:c3:ae:04:69:83:62:7f:37:b4:73:
7c:e3:c1:f8:d2:40:7d:b5:b5:fb:15:89:24:1d:61:63:75:3b:
36:8f:8e:08:7b:27:46:bd:08:8f:5f:c4:ba:8e:a1:29:71:8c:
2b:0e:05:56:e7:64:03:b6:de:c5:f2:e3:e3:a9:90:49:f1:b7:
7b:9c:a0:27:f1:db:a6:b1:83:3b:83:a3:eb:92:83:ce:ee:a6:
42:42:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:38:40 2025 by rpki-client