This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File: siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier: UCTqtOqAkDWxnNWB7eyA7SogWUJasiAL+3o10npkieA=
Subject key identifier: FC:C9:DE:12:D7:7A:33:03:FF:54:87:34:82:BE:E2:55:BE:17:27:D2
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 019B522AA3C6D9EF5552A2CA54740DA02C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number: 06AC
Signing time: Wed 24 Dec 2025 21:01:24 +0000
Manifest this update: Wed 24 Dec 2025 21:01:24 +0000
Manifest next update: Thu 25 Dec 2025 21:01:24 +0000
Files and hashes: 1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
3: K4EzHSk1OTprfFu33wbkhRI9yVU.roa (hash: kwoZBLXnxtnLuus/aL73h2OdIKgHiGaRAdqLJUprZV4=)
4: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
5: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: FRdpLbSC1iPbNec7obszcpSbuCwokMsrmVxmCZyu9Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:2a:a3:c6:d9:ef:55:52:a2:ca:54:74:0d:a0:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Dec 24 21:01:24 2025 GMT
Not After : Dec 25 21:01:24 2025 GMT
Subject: CN=fcc9de12d77a3303ff54873482bee255be1727d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:02:0f:e2:22:74:4d:e4:28:44:67:52:44:
33:84:6d:80:6c:39:1c:67:fc:45:d4:0a:26:76:be:
e1:f6:19:ef:a1:e2:88:6b:f8:79:7a:90:05:43:ae:
cf:9d:94:5e:f3:98:a8:32:93:9a:f7:59:b9:67:83:
85:e5:7b:2f:44:78:a7:22:ac:05:c5:f4:be:04:38:
71:b1:be:6c:db:ed:14:64:21:8e:84:45:8d:aa:a7:
a6:02:d8:89:46:bb:52:f9:60:e6:6f:87:5c:d2:7d:
92:fb:a6:27:b9:0a:a2:e5:e0:b5:01:80:6c:14:f6:
f0:ef:2c:37:29:d1:b5:d9:1d:01:dd:fa:a7:5e:f6:
37:d3:10:bc:de:45:73:a8:a6:56:40:aa:f6:27:81:
56:4d:5b:61:a5:98:43:24:80:14:0b:23:94:69:1a:
37:72:a9:5f:99:e3:b7:79:63:ee:30:43:3b:4b:5e:
d1:f3:34:59:91:27:86:50:9a:ad:ec:64:c2:49:1a:
5c:92:42:43:f5:78:d3:37:00:ca:eb:84:18:1d:f8:
fd:8b:74:73:e1:26:66:f0:08:f3:88:0e:45:9d:59:
98:e9:0e:ac:7b:19:37:b9:13:b1:91:26:fb:ad:76:
21:9a:af:f5:fa:45:b2:35:9b:9b:e5:0c:75:df:df:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:DE:12:D7:7A:33:03:FF:54:87:34:82:BE:E2:55:BE:17:27:D2
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:44:e1:15:22:91:f2:a2:86:52:03:3c:16:23:f0:ff:3a:0d:
7e:53:4a:ba:72:87:78:f3:d8:72:a4:22:c6:1e:ff:ff:31:f4:
a8:99:a1:3b:a3:02:fc:b5:85:17:04:18:31:45:d8:ac:1e:2d:
2e:b2:3b:fe:fb:25:ff:a6:90:b7:5c:37:47:63:1d:0d:82:66:
a2:49:de:c1:a4:58:99:36:d5:68:6a:c6:af:3a:0f:ac:fa:6d:
2f:4d:fe:73:0c:40:85:0f:7d:1f:72:ce:d1:07:2a:5e:e8:19:
f9:fd:54:05:3a:c4:c2:59:d2:47:2e:70:02:47:ff:42:e7:e1:
d8:b2:6b:2e:17:83:5f:1a:0e:3b:43:ae:8e:52:41:ce:b6:81:
2c:a8:41:5e:7b:c2:81:05:a8:22:ff:f5:6f:97:00:02:29:78:
80:d7:75:0d:ea:a4:39:83:c9:ae:ba:49:94:b1:bb:4b:02:6a:
41:75:d6:33:72:3a:78:47:9e:b2:8f:4b:28:c7:14:40:a8:e0:
1f:39:2e:ff:23:de:05:f1:be:a6:f6:00:76:2c:8c:8e:7a:aa:
ee:f3:4b:af:b8:9b:cb:51:d8:63:c7:35:5c:d3:ec:f5:35:f7:
50:62:4b:5b:de:aa:b0:2c:c7:66:b2:63:43:29:f0:33:17:42:
9c:7e:62:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtSKqPG2e9VUqLKVHQNoCyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3
MTRhM2MwHhcNMjUxMjI0MjEwMTI0WhcNMjUxMjI1MjEwMTI0WjAzMTEwLwYDVQQD
EyhmY2M5ZGUxMmQ3N2EzMzAzZmY1NDg3MzQ4MmJlZTI1NWJlMTcyN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYCD+IidE3kKERnUkQzhG2AbDkc
Z/xF1Aomdr7h9hnvoeKIa/h5epAFQ67PnZRe85ioMpOa91m5Z4OF5XsvRHinIqwF
xfS+BDhxsb5s2+0UZCGOhEWNqqemAtiJRrtS+WDmb4dc0n2S+6YnuQqi5eC1AYBs
FPbw7yw3KdG12R0B3fqnXvY30xC83kVzqKZWQKr2J4FWTVthpZhDJIAUCyOUaRo3
cqlfmeO3eWPuMEM7S17R8zRZkSeGUJqt7GTCSRpckkJD9XjTNwDK64QYHfj9i3Rz
4SZm8AjziA5FnVmY6Q6sexk3uROxkSb7rXYhmq/1+kWyNZub5Qx1398rhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzJ3hLXejMD/1SHNIK+4lW+FyfSMB8GA1UdIwQY
MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt
MTc5ZTZlNDI5MGMwLzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw
LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0ThFSKR
8qKGUgM8FiPw/zoNflNKunKHePPYcqQixh7//zH0qJmhO6MC/LWFFwQYMUXYrB4t
LrI7/vsl/6aQt1w3R2MdDYJmoknewaRYmTbVaGrGrzoPrPptL03+cwxAhQ99H3LO
0QcqXugZ+f1UBTrEwlnSRy5wAkf/Qufh2LJrLheDXxoOO0OujlJBzraBLKhBXnvC
gQWoIv/1b5cAAil4gNd1DeqkOYPJrrpJlLG7SwJqQXXWM3I6eEeeso9LKMcUQKjg
Hzku/yPeBfG+pvYAdiyMjnqq7vNLr7iby1HYY8c1XNPs9TX3UGJLW96qsCzHZrJj
QynwMxdCnH5ilA==
-----END CERTIFICATE-----
Generated at Thu Dec 25 04:35:53 2025 by rpki-client