This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: e9R3ipnm6HR7VmR0oMMH/yCUFYotV4FzXRfCMIdBbt8=
Subject key identifier: B4:FD:9E:64:15:A7:6F:75:3A:67:1E:86:A8:1C:86:3C:52:C3:76:0D
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019B57195455907CE34AE2CA586A45198051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0E62
Signing time: Thu 25 Dec 2025 20:00:36 +0000
Manifest this update: Thu 25 Dec 2025 20:00:36 +0000
Manifest next update: Fri 26 Dec 2025 20:00:36 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: 5jLsoOUoObhKC+TKQEXIIOIZuh0hm7UL9xcnKpKK26E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:57:19:54:55:90:7c:e3:4a:e2:ca:58:6a:45:19:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Dec 25 20:00:36 2025 GMT
Not After : Dec 26 20:00:36 2025 GMT
Subject: CN=b4fd9e6415a76f753a671e86a81c863c52c3760d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b7:73:41:a5:33:8a:1c:66:ab:fc:8e:f7:13:
f7:51:a1:df:22:90:49:43:08:b6:25:49:b3:0b:bd:
2d:09:14:0e:d6:42:3c:d3:c7:6d:b5:7c:8c:79:f6:
8d:fa:3e:a3:b1:92:ec:79:2f:08:f5:b8:7e:9d:be:
be:0b:5b:c2:db:8e:6b:e0:cd:e2:30:84:30:aa:44:
04:2c:1b:eb:9a:f8:af:43:1e:16:c9:f6:5c:15:0d:
d2:c5:6b:fb:b4:fc:79:5e:d8:d5:1b:b0:ef:71:7c:
57:c2:91:31:84:63:a3:20:4b:09:48:d9:0a:c0:49:
fb:be:89:14:0f:40:27:9e:b5:41:3e:ed:ab:8f:c4:
84:6e:a6:b7:5f:fa:ba:18:91:88:97:73:da:95:13:
fb:3f:17:a1:c2:8e:47:08:e4:de:00:4a:f6:42:cf:
7d:9d:61:b6:3b:46:a5:cf:59:7d:06:38:e6:ee:98:
67:5d:3d:41:b9:0b:22:0b:02:25:5d:94:8e:1a:f0:
76:0f:e9:0f:45:37:b3:c4:b4:42:7c:c8:1b:24:45:
68:9f:ca:dc:64:46:1c:52:ca:7d:61:a5:be:95:4f:
18:a6:7c:02:9c:c4:e6:5f:3e:ef:bc:cf:0f:7a:d3:
5e:67:30:f0:3f:b3:e2:c6:4d:00:c0:85:31:59:1d:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:9E:64:15:A7:6F:75:3A:67:1E:86:A8:1C:86:3C:52:C3:76:0D
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:21:a8:95:c1:6b:18:e1:3e:6d:69:a8:92:11:66:72:0e:d3:
d1:8b:b7:65:d8:cd:4e:58:34:30:00:eb:8d:3b:46:85:5d:47:
95:ba:fb:c3:fb:f7:9c:5d:70:7c:21:bb:de:45:33:fa:ae:d5:
73:d6:cc:27:92:82:0b:d3:17:31:3d:d5:b5:c1:17:2a:d2:ac:
bd:a2:a8:a0:05:25:13:92:0b:26:67:47:8a:1f:ee:69:3e:e8:
b0:12:c1:e1:94:34:2c:45:35:4a:c8:33:84:c8:af:bb:67:78:
9c:f4:62:12:34:85:d3:c4:18:33:e3:1a:8f:ae:16:11:47:40:
04:03:aa:98:5a:0f:2b:d9:33:f3:b6:5b:44:45:c7:21:17:fb:
5d:be:64:83:c4:01:15:bc:96:dc:9e:5e:ea:ec:4c:f8:6f:8e:
f3:84:2d:30:00:7e:21:17:e0:7f:71:a7:e8:0b:ae:70:be:63:
58:32:c7:68:ad:4b:f6:b1:65:c0:3d:d9:31:7a:4d:5c:fb:e8:
52:0c:ee:16:d1:c2:4e:a0:12:fb:b6:bb:1f:87:0e:a6:44:f1:
c9:36:a5:81:c0:67:71:3c:6d:2b:d8:df:b1:63:8b:81:29:38:
6b:26:33:d9:82:1c:8a:c9:fc:b4:b7:9a:18:a5:cd:f9:85:51:
23:6c:dc:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtXGVRVkHzjSuLKWGpFGYBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz
OTcyMTMwHhcNMjUxMjI1MjAwMDM2WhcNMjUxMjI2MjAwMDM2WjAzMTEwLwYDVQQD
EyhiNGZkOWU2NDE1YTc2Zjc1M2E2NzFlODZhODFjODYzYzUyYzM3NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LdzQaUzihxmq/yO9xP3UaHfIpBJ
Qwi2JUmzC70tCRQO1kI808dttXyMefaN+j6jsZLseS8I9bh+nb6+C1vC245r4M3i
MIQwqkQELBvrmvivQx4WyfZcFQ3SxWv7tPx5XtjVG7DvcXxXwpExhGOjIEsJSNkK
wEn7vokUD0AnnrVBPu2rj8SEbqa3X/q6GJGIl3PalRP7Pxehwo5HCOTeAEr2Qs99
nWG2O0alz1l9Bjjm7phnXT1BuQsiCwIlXZSOGvB2D+kPRTezxLRCfMgbJEVon8rc
ZEYcUsp9YaW+lU8YpnwCnMTmXz7vvM8PetNeZzDwP7Pixk0AwIUxWR1iIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT9nmQVp291OmcehqgchjxSw3YNMB8GA1UdIwQY
MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt
NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0
LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSGolcFr
GOE+bWmokhFmcg7T0Yu3ZdjNTlg0MADrjTtGhV1Hlbr7w/v3nF1wfCG73kUz+q7V
c9bMJ5KCC9MXMT3VtcEXKtKsvaKooAUlE5ILJmdHih/uaT7osBLB4ZQ0LEU1Ssgz
hMivu2d4nPRiEjSF08QYM+Maj64WEUdABAOqmFoPK9kz87ZbREXHIRf7Xb5kg8QB
FbyW3J5e6uxM+G+O84QtMAB+IRfgf3Gn6AuucL5jWDLHaK1L9rFlwD3ZMXpNXPvo
UgzuFtHCTqAS+7a7H4cOpkTxyTalgcBncTxtK9jfsWOLgSk4ayYz2YIcisn8tLea
GKXN+YVRI2zctw==
-----END CERTIFICATE-----
Generated at Thu Dec 25 22:47:56 2025 by rpki-client