This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: ZvkurSd0Kxg4awkvl1GGcY/3yzpEWytG8AlRGnZ8ZFQ=
Subject key identifier: E1:07:38:4E:67:97:9A:BA:F3:38:82:EF:43:4E:85:E0:1A:88:91:DB
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 019B589A43A31B5039066E1CFF1F4F4F3D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0B7A
Signing time: Fri 26 Dec 2025 03:01:03 +0000
Manifest this update: Fri 26 Dec 2025 03:01:03 +0000
Manifest next update: Sat 27 Dec 2025 03:01:03 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: ewPwADDgaikslkCMV2UL3eaJlSESpRTRs6TGbj+my9E=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:58:9a:43:a3:1b:50:39:06:6e:1c:ff:1f:4f:4f:3d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Dec 26 03:01:03 2025 GMT
Not After : Dec 27 03:01:03 2025 GMT
Subject: CN=e107384e67979abaf33882ef434e85e01a8891db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:9b:9b:18:3f:3a:90:c8:70:a9:30:df:36:
6b:b8:57:97:81:60:01:f8:3f:7d:30:83:14:e0:07:
c0:f5:f9:bc:aa:24:24:c2:7f:2a:3f:c7:2a:0f:25:
6f:7f:35:f6:ef:fc:20:b9:25:9c:9d:fd:8f:97:fe:
c8:f9:b0:5e:f3:ed:a4:dd:87:16:97:be:db:50:2e:
cc:57:73:c4:f7:84:f7:e5:6f:b9:eb:d7:0c:99:fa:
97:89:e1:89:dc:00:bc:bb:d0:ae:83:16:fb:2b:33:
71:eb:e6:81:9a:ec:d7:d2:3b:80:e9:5e:8f:40:82:
42:7b:cf:71:95:43:d1:db:a8:24:59:70:e7:08:5a:
3e:53:a3:01:7c:3e:c0:17:41:b7:e3:d7:83:73:08:
15:ce:06:cd:97:73:11:a4:94:93:3d:6f:72:82:3b:
5b:52:36:0b:54:00:b7:24:6e:b6:92:81:54:83:a7:
e0:80:dc:c1:b6:19:d4:63:9f:c8:a4:2c:7a:91:db:
e4:a4:61:56:ca:ea:4a:72:50:8b:9c:03:f1:e9:b7:
3f:35:41:b5:de:62:cd:88:91:4a:c1:af:85:c4:c6:
14:48:19:b0:59:54:32:78:64:6a:4f:a2:97:8d:ed:
a4:da:df:91:c6:a6:53:98:3d:1c:d9:63:38:41:83:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:38:4E:67:97:9A:BA:F3:38:82:EF:43:4E:85:E0:1A:88:91:DB
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:e4:00:c9:2a:d6:23:a9:d5:1c:ff:e2:bf:f1:ed:d1:9b:
d1:da:30:1a:91:e4:c6:55:67:ee:24:79:53:65:b8:94:8d:72:
cb:36:19:29:24:04:95:2a:d5:01:27:d3:d8:30:fb:d9:ea:49:
07:5e:ac:be:f4:12:4f:46:ec:d9:ae:ca:5e:d1:33:42:ce:9b:
9c:83:ec:d5:23:c1:6e:66:c4:54:2a:a4:d3:9c:85:1e:f0:08:
58:e4:ce:8f:17:55:ee:11:1a:16:25:97:dd:00:14:79:62:03:
f9:7b:02:bd:76:df:12:7c:47:0d:e3:df:c0:c8:47:88:34:84:
09:1c:83:7b:19:ed:94:c8:2d:93:e5:34:46:0f:ff:c3:50:54:
4e:fa:48:a6:18:a8:5d:a8:02:af:ff:88:d5:2c:22:6c:49:61:
2a:e7:ea:69:94:b9:78:22:0b:2f:4c:fc:8a:54:7f:49:8d:a5:
6f:98:60:63:69:d5:72:da:04:65:81:32:fc:85:4a:99:99:80:
a5:e4:de:97:63:11:d3:2c:b6:2c:99:9e:cf:e9:93:92:d8:4a:
4b:73:a5:72:96:27:b8:b1:dd:83:33:60:6c:87:5f:6f:fd:34:
12:76:66:92:4c:76:5a:3f:a6:a4:f6:8d:c9:bc:9e:af:6a:a0:
9c:c1:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 11:03:11 2025 by rpki-client