This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: L8VFJuxN32Fn1dz7dv3ILIzN2wsM2ph7RBPGX3gAwIg=
Subject key identifier: E0:98:83:30:F2:6A:FF:83:01:91:6F:37:53:81:D0:0C:B8:EB:13:4C
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019B4136D639147D6DC7FE197CCA80646EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 07F1
Signing time: Sun 21 Dec 2025 14:01:11 +0000
Manifest this update: Sun 21 Dec 2025 14:01:11 +0000
Manifest next update: Mon 22 Dec 2025 14:01:11 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: B4e+43WyfADdr6jjqtFhaKg+oD2ZYU0CxCy5bev0NiE=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:36:d6:39:14:7d:6d:c7:fe:19:7c:ca:80:64:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Dec 21 14:01:11 2025 GMT
Not After : Dec 22 14:01:11 2025 GMT
Subject: CN=e0988330f26aff8301916f375381d00cb8eb134c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:68:2c:a9:de:c3:00:6c:a4:7a:63:b1:52:
b7:f6:c5:fd:41:b8:35:58:3e:a6:a0:37:e7:43:e8:
e1:bf:c1:47:5e:18:35:21:f1:1b:6e:c6:de:26:fd:
4c:9c:4f:fd:2c:8e:5c:16:16:87:cb:cc:d8:de:6b:
d6:33:6b:09:62:b5:99:af:c9:11:97:76:a3:b3:d5:
9c:b5:6a:71:be:2b:c8:f9:e5:72:ec:05:80:b7:c1:
d4:09:df:64:f5:5c:f6:77:97:30:70:a1:10:08:ed:
73:f8:ff:80:b7:ce:d5:fa:01:57:83:93:c6:67:d6:
87:1a:38:e4:28:8e:22:a0:87:af:07:3c:2a:9f:e0:
db:44:33:44:8a:f0:2a:41:7b:f3:30:6c:43:ce:dd:
80:e1:09:ca:0e:da:9a:c1:d0:9a:18:fc:58:64:32:
2b:aa:25:68:97:85:3b:42:ca:2f:c3:eb:0e:e8:8f:
04:1a:31:c6:87:a0:d6:03:88:e5:3e:8d:13:09:ce:
b1:24:57:64:5e:cb:c2:7f:2e:36:61:90:0a:57:46:
10:4b:99:78:97:fe:fd:c4:0d:fb:80:e0:55:7e:35:
b6:e0:f0:f5:cb:6c:82:1a:97:6e:31:08:6b:58:c3:
ea:a6:19:3d:5f:03:e6:fb:f0:4d:ed:df:41:f6:14:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:98:83:30:F2:6A:FF:83:01:91:6F:37:53:81:D0:0C:B8:EB:13:4C
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:1a:4d:3a:16:aa:4a:35:d6:e3:09:d5:16:4f:90:c9:7a:
66:3e:ba:9c:38:bd:62:92:ec:a7:af:f3:60:1b:f5:ed:1b:00:
2d:2b:98:90:65:19:fa:fa:3e:0b:0b:5a:3a:97:69:16:e4:de:
2b:6a:c2:fe:7d:5d:06:fb:6d:c7:3b:59:bb:04:c9:0a:ee:9b:
15:1a:bd:ec:be:5b:be:d9:59:2e:50:94:04:d3:8a:5e:a8:57:
6c:16:af:6b:c8:ea:7c:21:33:23:26:7a:74:82:42:ec:e4:4f:
12:6a:99:3c:76:e1:cc:0c:0b:62:ab:ea:ec:85:ae:e9:70:7f:
9f:d3:b0:58:3c:d0:3e:96:f2:c0:e5:97:33:9d:92:7e:67:c2:
8b:e0:91:ce:5d:3b:e1:70:f6:73:57:1e:37:5e:f6:f6:c5:03:
a1:fd:44:01:70:4a:d6:00:42:56:70:e1:6e:c9:56:d2:e1:5f:
24:71:03:44:7d:ce:3e:ad:be:d2:d4:46:91:ad:ef:c9:5d:3a:
5c:b2:b8:7d:43:84:25:81:af:58:ac:7c:31:0e:60:4f:e0:ee:
e0:88:c7:a5:d3:ec:3f:f0:0c:31:74:ab:1a:5f:a6:e8:af:17:
ff:01:28:b2:4d:23:6e:dd:db:68:fc:0b:a2:e8:18:40:25:46:
14:76:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:08:24 2025 by rpki-client