This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: IJLjTfMD929cPB+yewmzIMvll3xlaHKQ71PXjd3I10U=
Subject key identifier: E5:B3:92:DA:01:76:93:85:0E:30:4B:E3:BA:46:E4:DB:54:84:69:48
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 019B620B821D26A95B6FCBAD2647FC4A11ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 17A1
Signing time: Sat 27 Dec 2025 23:01:19 +0000
Manifest this update: Sat 27 Dec 2025 23:01:19 +0000
Manifest next update: Sun 28 Dec 2025 23:01:19 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: IFdRj9Z6KJkYXJqvt7fCh25i+mDkZMkWh7djV0TH970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:62:0b:82:1d:26:a9:5b:6f:cb:ad:26:47:fc:4a:11:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Dec 27 23:01:19 2025 GMT
Not After : Dec 28 23:01:19 2025 GMT
Subject: CN=e5b392da017693850e304be3ba46e4db54846948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:3e:5d:33:e7:6f:61:d2:0e:72:77:13:5d:
cd:e7:d4:b6:4a:0a:52:5e:eb:20:cf:60:6c:ab:a0:
16:63:cd:57:89:8e:12:85:81:9d:5d:2e:ba:88:3a:
ea:43:f9:46:9b:d9:d6:22:a8:81:3a:e1:c1:e8:bb:
1b:9c:a1:13:b7:88:3d:c1:4a:0f:15:ff:be:7c:99:
c0:4c:5d:41:e6:7d:8f:4f:74:c6:8c:15:82:de:fd:
30:69:ea:59:78:6b:db:ee:67:5c:b5:b5:18:b3:84:
ae:50:bf:25:c2:37:2d:c9:ea:74:2d:69:40:88:f7:
ca:5c:ac:5b:c3:0b:05:31:3c:cd:5f:5e:c4:b6:b4:
d8:8b:1c:64:6d:bc:8a:f4:a8:dd:80:13:1c:3a:41:
82:d9:86:82:36:55:9e:9a:db:2d:b8:c0:86:04:77:
3b:a2:60:b8:ae:69:36:32:ee:b0:df:e2:4d:cb:eb:
19:21:61:4b:f8:82:14:62:bf:68:e9:6d:c0:ef:98:
b1:32:8f:e2:f9:9c:e1:82:41:e9:a1:89:0b:85:e7:
91:36:3c:d0:0c:74:a5:86:c6:dd:a1:e2:9d:60:50:
c3:d5:f5:f3:a8:a6:d3:83:ec:34:f7:4f:b7:30:33:
af:6e:4d:c6:3b:b5:53:0a:e7:46:df:a6:91:10:85:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:92:DA:01:76:93:85:0E:30:4B:E3:BA:46:E4:DB:54:84:69:48
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:b4:0f:fd:07:15:9f:53:39:3b:53:65:4a:8e:6b:f5:5c:
93:32:47:6c:28:bb:99:6e:10:5e:29:1f:99:e9:28:f2:af:a3:
37:04:dd:81:f2:af:76:b7:18:c7:3c:36:b6:16:51:29:b6:31:
25:22:a7:6c:47:a2:f7:a9:60:1d:96:52:2b:89:c1:87:9b:16:
0a:73:de:8b:e8:0a:83:ed:9b:da:15:b5:28:d3:82:22:89:3b:
25:85:b5:86:0e:cf:e6:19:86:1f:1b:45:46:2f:ba:b7:db:09:
2f:0d:dc:0c:2b:b3:a3:ff:55:65:67:79:99:88:dc:df:ea:36:
a8:26:59:52:d2:bf:8e:3c:ac:ab:b9:bf:80:f9:87:0c:3a:7f:
92:cb:8c:fd:4d:f8:61:6e:d0:25:6c:ff:48:40:0e:32:f3:fb:
99:0c:59:e2:0b:b9:9d:dc:70:fe:a5:2c:c8:ca:74:2c:43:64:
91:6e:59:30:51:31:23:b4:0a:2c:37:e2:7d:82:d6:7e:6b:d6:
7a:89:01:97:b6:9b:48:7e:b7:26:03:e5:9d:76:76:a0:06:49:
76:c3:4a:97:93:08:91:69:bc:c3:34:da:07:0f:63:0b:27:b8:
08:f9:67:87:64:b3:46:5f:fa:04:c4:44:b4:d7:a0:77:35:3d:
04:a4:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:26:38 2025 by rpki-client