This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File: rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier: 8ZRPnuxky+jpaSlG8PzBd2OWwjgjwBx49LBsvFHshcI=
Subject key identifier: 32:75:0A:41:52:A7:06:B7:FB:9D:18:98:2E:09:5C:6D:8C:20:1E:EF
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer: /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial: 019B36E9DBB7F46B9325A12D96893AF9F753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number: 0E3F
Signing time: Fri 19 Dec 2025 14:00:54 +0000
Manifest this update: Fri 19 Dec 2025 14:00:54 +0000
Manifest next update: Sat 20 Dec 2025 14:00:54 +0000
Files and hashes: 1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: EN/azcvrHeyf2mpgoUI1UznE1hx+LFN2FKJ7RJmaA7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:e9:db:b7:f4:6b:93:25:a1:2d:96:89:3a:f9:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Validity
Not Before: Dec 19 14:00:54 2025 GMT
Not After : Dec 20 14:00:54 2025 GMT
Subject: CN=32750a4152a706b7fb9d18982e095c6d8c201eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:4a:62:36:87:b1:19:cc:c6:8e:ec:68:67:
38:db:14:dd:d3:a8:30:73:9c:e7:86:31:6e:51:f4:
ce:aa:b6:fa:be:c3:35:36:c7:dd:ac:46:1a:bf:91:
a7:a9:f4:a7:ac:fa:92:54:8f:f2:63:52:21:2c:35:
0d:53:7b:ab:f2:26:a7:5e:90:40:08:05:c1:16:28:
3f:bd:44:45:6f:e2:d5:63:c5:ba:d0:dd:40:bd:35:
8d:3c:ff:0c:58:05:7e:5b:7f:ec:64:b8:e2:ff:8d:
29:fa:a2:84:4a:23:19:d8:ec:df:ce:b2:71:01:d4:
15:c3:74:f6:44:4a:78:b3:93:92:df:cb:fa:53:2a:
3d:51:30:82:c7:53:1b:7a:58:f2:a2:17:ab:c1:4d:
65:9c:81:05:4d:f8:c1:32:a4:8f:4b:03:b4:06:52:
e6:cc:95:ce:37:23:4e:00:cf:7f:93:a3:fc:04:f7:
58:d6:75:38:cc:a6:64:66:96:75:60:d6:60:36:97:
d0:37:ee:b5:69:f8:3f:91:2e:b1:3a:0d:78:80:f9:
65:bd:ec:e0:7f:b1:ad:4c:93:c0:e4:d5:cf:77:34:
f4:53:80:22:7d:72:b8:a1:9e:98:8c:e9:2d:51:c2:
68:af:9a:5c:0f:c0:39:69:5c:bd:84:f5:ad:15:96:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:0A:41:52:A7:06:B7:FB:9D:18:98:2E:09:5C:6D:8C:20:1E:EF
X509v3 Authority Key Identifier:
keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:58:cb:4b:73:42:eb:f6:80:d7:66:12:d2:97:73:6c:25:
6d:57:35:93:86:4c:56:b7:1b:fc:61:db:df:32:29:5a:95:d6:
f7:53:3b:61:12:b3:f9:e4:c9:76:f9:66:d3:ae:bf:9b:e3:fc:
92:ed:37:13:07:63:f1:e7:e0:68:9a:e8:48:2c:b8:73:bd:38:
67:3c:44:db:ff:76:46:58:f9:d0:aa:23:82:91:00:58:a3:03:
7f:f2:6e:73:c4:58:7b:e6:af:e4:f2:ad:d8:bd:9f:cf:b3:82:
23:02:c0:78:e7:ec:c8:d7:63:92:53:c9:bd:67:38:4f:18:74:
86:6a:f3:d1:0f:6d:70:74:c3:bf:25:9c:80:cb:11:47:71:77:
53:1b:92:fe:e5:08:55:ae:e5:4d:b8:02:8a:85:60:57:d2:4d:
e9:f7:83:b8:ab:d5:fa:41:d2:b8:f9:d3:7f:8a:84:bd:c7:4d:
ad:e7:a8:42:9a:17:2c:91:80:3a:8a:4e:8e:3b:93:bd:3d:77:
89:77:18:0d:5f:e5:53:28:63:fe:88:6c:1a:9f:a0:2f:dc:55:
f9:65:71:15:43:8e:09:12:9e:1b:2d:e1:b8:c3:18:a7:1a:cf:
63:46:e0:ee:34:5d:31:32:d2:d6:3f:8a:98:b4:00:33:fe:82:
7a:50:4c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs26du39GuTJaEtlok6+fdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzlmYTdjZDE1MzNkYTk3NWNmMzk5YjlhY2ZmZWJmZWQy
NmE5ZWIwHhcNMjUxMjE5MTQwMDU0WhcNMjUxMjIwMTQwMDU0WjAzMTEwLwYDVQQD
EygzMjc1MGE0MTUyYTcwNmI3ZmI5ZDE4OTgyZTA5NWM2ZDhjMjAxZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeJKYjaHsRnMxo7saGc42xTd06gw
c5znhjFuUfTOqrb6vsM1NsfdrEYav5GnqfSnrPqSVI/yY1IhLDUNU3ur8ianXpBA
CAXBFig/vURFb+LVY8W60N1AvTWNPP8MWAV+W3/sZLji/40p+qKESiMZ2OzfzrJx
AdQVw3T2REp4s5OS38v6Uyo9UTCCx1MbeljyoherwU1lnIEFTfjBMqSPSwO0BlLm
zJXONyNOAM9/k6P8BPdY1nU4zKZkZpZ1YNZgNpfQN+61afg/kS6xOg14gPllvezg
f7GtTJPA5NXPdzT0U4AifXK4oZ6YjOktUcJor5pcD8A5aVy9hPWtFZbGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ1CkFSpwa3+50YmC4JXG2MIB7vMB8GA1UdIwQY
MBaAFK05+nzRUz2pdc85m5rP/r/tJqnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODct
ZTMxYzBmZGVjZDI3LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODctZTMxYzBmZGVjZDI3
LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5ZYy0tz
Quv2gNdmEtKXc2wlbVc1k4ZMVrcb/GHb3zIpWpXW91M7YRKz+eTJdvlm066/m+P8
ku03Ewdj8efgaJroSCy4c704ZzxE2/92Rlj50KojgpEAWKMDf/Juc8RYe+av5PKt
2L2fz7OCIwLAeOfsyNdjklPJvWc4Txh0hmrz0Q9tcHTDvyWcgMsRR3F3UxuS/uUI
Va7lTbgCioVgV9JN6feDuKvV+kHSuPnTf4qEvcdNreeoQpoXLJGAOopOjjuTvT13
iXcYDV/lUyhj/ohsGp+gL9xV+WVxFUOOCRKeGy3huMMYpxrPY0bg7jRdMTLS1j+K
mLQAM/6CelBMHw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:21:52 2025 by rpki-client