This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: +Fg+0sZ05iY2Njf3QBDjzW6g9b60gteYCmCuEp2l6Ys=
Subject key identifier: 76:F7:93:12:DC:B4:D0:EA:B6:06:F4:A8:DB:86:15:FA:AC:4B:79:E2
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019B397D34B3F4BBAFB434F2043F44101709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 178F
Signing time: Sat 20 Dec 2025 02:01:05 +0000
Manifest this update: Sat 20 Dec 2025 02:01:05 +0000
Manifest next update: Sun 21 Dec 2025 02:01:05 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: R2jZAHgzKQkaIXKkqDubRJ3464eVlRnHPn6P1yKW5vM=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:7d:34:b3:f4:bb:af:b4:34:f2:04:3f:44:10:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Dec 20 02:01:05 2025 GMT
Not After : Dec 21 02:01:05 2025 GMT
Subject: CN=76f79312dcb4d0eab606f4a8db8615faac4b79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:24:d8:64:e8:c8:73:4d:eb:b5:29:ce:16:
68:f5:96:df:db:82:63:13:24:99:1d:bf:16:4c:f5:
cc:4b:2e:d1:e5:44:12:01:90:5e:28:d5:cc:49:13:
02:68:75:1d:1b:83:6e:cf:af:a6:58:b2:be:44:a4:
9b:a4:ec:67:52:e8:c6:b1:6a:33:b5:0d:f5:2c:c0:
b4:f7:4c:fb:eb:3e:e0:a8:8c:d5:e2:86:d2:1e:26:
f5:e8:ec:7a:59:29:ca:5b:a6:99:bc:81:7a:4e:65:
a5:1e:9f:dd:36:c3:ec:72:ab:2f:cb:d8:56:72:5b:
d2:9a:43:e7:00:bd:b2:fb:c5:be:85:86:b6:bf:ec:
43:92:d9:eb:60:96:4a:ce:80:1f:ef:a5:fa:fa:f5:
bb:4f:50:99:21:79:f6:15:5e:b1:7d:8f:ce:ad:16:
71:e0:2f:9c:cb:3c:31:2f:04:b6:f1:d7:79:95:0e:
e7:71:75:30:df:50:ab:7a:c0:cb:ff:c9:60:35:2d:
59:7c:cf:cd:0f:ad:44:4d:45:26:b1:1f:07:42:56:
b1:a9:72:28:78:66:6c:a5:bf:2b:99:f8:a3:9e:3a:
50:01:17:c2:f3:7e:2f:d8:02:11:cb:21:6b:03:80:
b2:00:e9:98:c1:0b:cb:f4:c4:d8:24:64:9b:1f:3c:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F7:93:12:DC:B4:D0:EA:B6:06:F4:A8:DB:86:15:FA:AC:4B:79:E2
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3f:9e:1d:20:39:88:4b:be:85:ae:35:c8:28:a9:12:13:d7:
d2:a7:1d:fc:35:54:87:20:00:57:21:9d:37:96:f4:c4:51:88:
5e:bc:59:ef:31:3e:14:dc:f9:ee:12:62:6a:6d:73:7d:8d:0b:
23:b3:7e:e7:12:92:21:e6:62:df:ee:d0:07:68:c2:44:42:8f:
f9:8f:4e:31:a9:e4:78:4e:cc:ab:4b:52:d0:0e:6b:8e:fb:5f:
bc:a8:63:2e:1e:a1:ad:d3:33:41:93:78:f7:70:0d:b1:78:5e:
18:08:80:c2:d8:f8:08:75:0d:21:d4:68:1b:9a:b3:be:3e:03:
8d:f4:91:98:30:1f:11:1d:19:41:5f:8e:fc:cd:5d:f4:83:f4:
f9:8c:16:df:82:29:0b:3c:2a:f1:34:8f:11:3b:46:fb:78:65:
64:d4:23:d7:dc:19:a6:5e:f6:f5:e4:aa:52:ca:58:34:07:37:
5f:47:1c:63:81:2a:eb:9f:51:ea:33:25:ae:3a:dc:6d:ef:39:
e7:cd:6e:70:37:b9:e8:0f:9c:20:06:a0:6b:45:b6:8e:a7:e7:
61:cb:d3:4a:78:04:14:c0:97:02:8e:e7:41:23:49:7f:e4:fd:
2f:dc:2b:43:ff:29:33:c9:b4:3a:19:7b:fd:c0:f3:75:92:bb:
46:3e:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:06:04 2025 by rpki-client