This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: TEtePPP06zDa0/n5wb6xGTl5HwSeAuhEBOQEM/Hdi3c=
Subject key identifier: 0C:1A:78:F4:AE:F5:89:D9:36:60:86:EA:80:AD:CF:73:80:9D:05:BC
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 019B2F67DFD9E74A572146573701FC0A75E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 177F
Signing time: Thu 18 Dec 2025 03:01:35 +0000
Manifest this update: Thu 18 Dec 2025 03:01:35 +0000
Manifest next update: Fri 19 Dec 2025 03:01:35 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: WOgbdubjdqwcMXZ3xAreyvn59b5fG4t8FsAdwQR8mhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:67:df:d9:e7:4a:57:21:46:57:37:01:fc:0a:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Dec 18 03:01:35 2025 GMT
Not After : Dec 19 03:01:35 2025 GMT
Subject: CN=0c1a78f4aef589d9366086ea80adcf73809d05bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:0a:cb:35:da:9a:a0:cc:05:71:60:4b:77:
f0:14:d4:5e:a2:25:1a:8c:95:7b:ae:bd:10:f5:ba:
3f:74:4f:28:b6:49:7f:0e:e6:2c:b4:60:fc:c4:b2:
8b:2c:29:7a:68:75:db:83:09:70:68:1d:04:a4:b0:
0d:bc:3c:a4:c4:66:57:0e:d6:3c:d5:cd:a9:4d:24:
65:85:e3:d0:9b:be:48:6c:a5:a2:3e:ff:41:d3:ac:
1c:b0:a7:62:ed:7e:88:27:6e:63:05:cb:3d:19:94:
75:65:f5:56:2b:07:fc:3f:4e:00:f4:4b:45:59:b4:
74:cd:4e:cf:50:6d:06:08:54:82:13:09:47:50:7b:
35:49:2c:a2:ba:be:8d:bd:29:e3:e9:01:cc:fc:3f:
71:8b:b2:4f:2f:81:4b:49:1b:b1:43:78:37:0e:e5:
71:79:52:28:53:ab:f5:8a:b5:f5:6f:b7:67:87:fe:
7c:61:4f:77:54:bb:42:cf:97:f7:ae:d4:5a:cc:39:
ca:32:98:e6:80:19:89:13:a1:51:36:46:b3:c9:5f:
e8:ad:9f:f9:69:95:48:8f:b8:07:a8:9a:30:0b:7d:
d1:86:b4:88:bf:46:e9:d6:55:cb:30:e8:c5:d1:db:
8d:99:33:55:f3:f7:f4:18:71:3b:0d:69:2c:48:86:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:78:F4:AE:F5:89:D9:36:60:86:EA:80:AD:CF:73:80:9D:05:BC
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:e5:2e:7f:86:92:78:5b:be:78:f6:ac:ec:56:aa:ce:84:
65:ac:28:a3:eb:5c:fd:67:b1:0b:8b:a7:bd:94:60:b9:69:08:
98:6a:a0:e6:ea:d3:f3:77:b8:46:bd:b3:93:98:4d:ce:69:42:
2f:8e:af:4f:a0:da:04:1f:b1:0e:c2:15:db:e1:a1:89:1e:1b:
8d:4c:e5:4c:96:29:c8:38:a6:9a:c9:8a:ca:12:3e:de:f5:92:
11:52:8d:c8:e2:00:67:62:80:1f:c3:93:d0:a1:95:b4:51:35:
64:1b:b7:ec:7b:ee:17:63:c1:d7:b3:cd:86:ba:5e:65:8c:c0:
4d:a8:a0:95:da:9a:eb:bf:4c:3d:b8:b9:a4:27:81:6a:1f:38:
5e:b6:f9:c5:32:45:58:db:78:4d:66:c9:cc:fd:7e:6b:52:97:
a3:7a:dc:f4:61:07:91:f8:d9:aa:7e:6a:10:29:74:90:79:55:
cb:62:fc:40:9a:6f:ca:28:eb:61:96:b2:71:01:a2:0e:a4:7c:
d8:2b:05:45:39:0e:21:48:f3:23:a9:99:69:de:96:fe:96:fc:
17:94:90:26:d3:b2:e8:c2:2a:dd:b0:45:e4:22:87:a2:4a:8b:
18:48:86:a5:fb:f5:c5:5a:9f:95:0c:e9:ee:3b:3c:7c:8f:18:
05:c9:90:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvZ9/Z50pXIUZXNwH8CnXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjUxMjE4MDMwMTM1WhcNMjUxMjE5MDMwMTM1WjAzMTEwLwYDVQQD
EygwYzFhNzhmNGFlZjU4OWQ5MzY2MDg2ZWE4MGFkY2Y3MzgwOWQwNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleIKyzXamqDMBXFgS3fwFNReoiUa
jJV7rr0Q9bo/dE8otkl/DuYstGD8xLKLLCl6aHXbgwlwaB0EpLANvDykxGZXDtY8
1c2pTSRlhePQm75IbKWiPv9B06wcsKdi7X6IJ25jBcs9GZR1ZfVWKwf8P04A9EtF
WbR0zU7PUG0GCFSCEwlHUHs1SSyiur6NvSnj6QHM/D9xi7JPL4FLSRuxQ3g3DuVx
eVIoU6v1irX1b7dnh/58YU93VLtCz5f3rtRazDnKMpjmgBmJE6FRNkazyV/orZ/5
aZVIj7gHqJowC33RhrSIv0bp1lXLMOjF0duNmTNV8/f0GHE7DWksSIY6lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwaePSu9YnZNmCG6oCtz3OAnQW8MB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlflLn+G
knhbvnj2rOxWqs6EZawoo+tc/WexC4unvZRguWkImGqg5urT83e4Rr2zk5hNzmlC
L46vT6DaBB+xDsIV2+GhiR4bjUzlTJYpyDimmsmKyhI+3vWSEVKNyOIAZ2KAH8OT
0KGVtFE1ZBu37HvuF2PB17PNhrpeZYzATaigldqa679MPbi5pCeBah84Xrb5xTJF
WNt4TWbJzP1+a1KXo3rc9GEHkfjZqn5qECl0kHlVy2L8QJpvyijrYZaycQGiDqR8
2CsFRTkOIUjzI6mZad6W/pb8F5SQJtOy6MIq3bBF5CKHokqLGEiGpfv1xVqflQzp
7js8fI8YBcmQgw==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:12:15 2025 by rpki-client