This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: ucjC3FKuwjSv7CFxwuBsB8D1bhb4a6iGgtXNcQB5LmU=
Subject key identifier: 09:95:F1:ED:64:F2:AE:5C:60:AA:61:63:21:56:27:CF:1F:AA:40:9B
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 019B3720B215EDEA00688898F6F54FC2D796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 1786
Signing time: Fri 19 Dec 2025 15:00:48 +0000
Manifest this update: Fri 19 Dec 2025 15:00:48 +0000
Manifest next update: Sat 20 Dec 2025 15:00:48 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: 58jGGxzmhKi5kDQ6IGv8++hAw1JdyB6ecvtDt9tIETw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:20:b2:15:ed:ea:00:68:88:98:f6:f5:4f:c2:d7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Dec 19 15:00:48 2025 GMT
Not After : Dec 20 15:00:48 2025 GMT
Subject: CN=0995f1ed64f2ae5c60aa6163215627cf1faa409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:4b:7a:aa:72:b3:c4:cb:5b:21:60:45:0f:
62:57:cd:17:13:64:f3:b1:8d:ab:f4:c5:09:19:e8:
d0:79:51:9c:ca:63:4d:8c:da:bd:00:fb:8a:0a:b0:
3e:12:8f:62:2b:99:97:08:a0:ea:a4:7e:46:1b:16:
37:50:e5:72:c2:b1:ab:bd:0c:e9:c5:4d:d1:83:69:
38:b0:c4:e7:e6:dc:b1:5e:57:67:d7:60:20:c7:4f:
70:59:59:d6:2d:37:2c:6e:f5:fc:42:3d:91:0d:33:
80:8e:3a:cc:db:1e:55:b5:87:0b:7b:eb:22:33:dd:
53:6c:fc:42:32:5e:c6:b6:56:87:1e:6e:a8:9f:19:
d9:31:a0:8f:f7:53:f7:c5:3b:07:ec:9e:58:94:bd:
f6:5e:b1:84:98:dd:ef:fe:c7:ea:6c:a7:1f:c9:06:
ec:12:e4:0d:54:fa:3c:a0:69:88:2c:7c:ea:8a:17:
d7:e5:1a:c9:bf:b4:94:3d:e0:d6:aa:e3:e0:c0:05:
26:55:cd:bc:d4:9f:9b:16:55:77:bc:d5:2a:46:4d:
6c:9e:14:06:ef:0f:d4:96:3a:11:4b:cb:6a:dc:ce:
c4:63:c0:fd:3a:86:b5:49:b1:cb:7d:e7:e3:e0:d9:
d9:dd:05:e4:a9:eb:b3:16:93:af:53:3f:e2:8b:7f:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:F1:ED:64:F2:AE:5C:60:AA:61:63:21:56:27:CF:1F:AA:40:9B
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:b1:c6:e8:b4:f2:9d:ad:48:a9:c8:53:e8:3b:c3:4e:5e:
fd:a6:73:05:3a:da:b1:05:08:1a:d0:ef:d0:07:b5:e9:6d:b8:
b1:e3:ea:35:2d:ae:e9:0b:87:cb:6a:4e:09:3e:81:6e:60:01:
5f:67:3b:23:7a:bb:63:52:98:33:7a:18:c5:cb:a9:20:45:74:
6f:84:ba:65:57:64:ab:20:ad:88:8a:45:a5:5f:67:33:5c:eb:
7f:f3:62:7b:91:a5:97:7e:84:59:ae:91:ac:90:1b:c9:a9:68:
48:41:20:d0:e9:e0:d3:4c:0e:dd:de:78:cc:73:b0:6a:87:d0:
91:3c:ad:1e:25:a8:25:c2:a1:1b:e7:a2:fd:c6:8f:9f:1a:21:
04:23:df:a2:c6:ff:0c:0f:f4:b5:f4:fc:9c:2f:62:24:43:0d:
65:35:6a:6c:dd:5a:c5:d2:39:c3:89:e4:d7:fb:a0:36:d7:cd:
8d:32:34:6e:42:ff:3e:1c:8d:7f:9f:12:f9:cc:e2:d2:99:20:
37:5f:c6:6e:32:db:28:6e:dd:29:28:18:e3:4a:3c:68:0a:0d:
c8:f9:24:49:60:73:0b:ca:fa:8c:f1:c6:b4:1a:39:a2:e6:88:
8b:0d:50:6e:7d:2c:b6:07:c1:0a:90:60:c3:e4:c7:ef:73:06:
6f:c8:09:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3ILIV7eoAaIiY9vVPwteWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjUxMjE5MTUwMDQ4WhcNMjUxMjIwMTUwMDQ4WjAzMTEwLwYDVQQD
EygwOTk1ZjFlZDY0ZjJhZTVjNjBhYTYxNjMyMTU2MjdjZjFmYWE0MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dxLeqpys8TLWyFgRQ9iV80XE2Tz
sY2r9MUJGejQeVGcymNNjNq9APuKCrA+Eo9iK5mXCKDqpH5GGxY3UOVywrGrvQzp
xU3Rg2k4sMTn5tyxXldn12Agx09wWVnWLTcsbvX8Qj2RDTOAjjrM2x5VtYcLe+si
M91TbPxCMl7GtlaHHm6onxnZMaCP91P3xTsH7J5YlL32XrGEmN3v/sfqbKcfyQbs
EuQNVPo8oGmILHzqihfX5RrJv7SUPeDWquPgwAUmVc281J+bFlV3vNUqRk1snhQG
7w/UljoRS8tq3M7EY8D9Ooa1SbHLfefj4NnZ3QXkqeuzFpOvUz/ii38KsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmV8e1k8q5cYKphYyFWJ88fqkCbMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPuxxui0
8p2tSKnIU+g7w05e/aZzBTrasQUIGtDv0Ae16W24sePqNS2u6QuHy2pOCT6BbmAB
X2c7I3q7Y1KYM3oYxcupIEV0b4S6ZVdkqyCtiIpFpV9nM1zrf/Nie5Gll36EWa6R
rJAbyaloSEEg0Ong00wO3d54zHOwaofQkTytHiWoJcKhG+ei/caPnxohBCPfosb/
DA/0tfT8nC9iJEMNZTVqbN1axdI5w4nk1/ugNtfNjTI0bkL/PhyNf58S+czi0pkg
N1/GbjLbKG7dKSgY40o8aAoNyPkkSWBzC8r6jPHGtBo5ouaIiw1Qbn0stgfBCpBg
w+TH73MGb8gJsQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:22:56 2025 by rpki-client