This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier: LmP4ea2wMk2v6OgHERBtGiGK37aH0QgRc7ibehVbvY0=
Subject key identifier: ED:3C:75:E7:98:D1:DB:CE:BA:5F:E1:B6:3C:4F:D1:ED:61:06:35:E8
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 019B38D8370049065AC51331FEBC17DE082F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number: 144B
Signing time: Fri 19 Dec 2025 23:00:52 +0000
Manifest this update: Fri 19 Dec 2025 23:00:52 +0000
Manifest next update: Sat 20 Dec 2025 23:00:52 +0000
Files and hashes: 1: 5UoFLpQtoNWTRnd2IrHt1zDXCnU.roa (hash: mdK5sii+dlLtOUzntgin3VSmrrSF7YmdacNAlKzg9pg=)
2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: UlQfd+mTEc84al4DcQeWi2nOUUqvRturJwzCK/hlnlk=)
4: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
5: oWp27mBOrz7MXkN3QVP_5A9gnvU.roa (hash: /+rul4/RODDQhUqBM7ZwYOoIISVCxzBmGSNg7RYrmUA=)
6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:d8:37:00:49:06:5a:c5:13:31:fe:bc:17:de:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Dec 19 23:00:52 2025 GMT
Not After : Dec 20 23:00:52 2025 GMT
Subject: CN=ed3c75e798d1dbceba5fe1b63c4fd1ed610635e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:08:ce:7c:9b:d9:c2:06:fb:42:cb:ea:51:
d7:d1:0f:ed:7a:75:2a:3e:01:89:75:51:58:9d:61:
ae:05:ba:1e:16:62:ca:32:e3:d5:67:67:fd:d4:1e:
f2:e3:8f:f2:25:b9:e1:a5:c3:87:5c:84:63:b9:09:
77:e4:19:64:01:fb:07:aa:60:44:e2:63:8d:a9:3b:
21:44:4a:2a:a7:67:36:c3:e5:12:c0:88:2e:be:d4:
35:76:a1:f4:f3:f8:73:1e:9f:a9:86:2f:58:59:fd:
11:1c:15:3b:07:63:e1:02:eb:8b:fe:9d:45:f8:8c:
7f:45:f5:d8:12:be:7d:5b:55:8c:e6:85:7e:f4:6c:
cf:65:e5:bc:f3:4c:8c:31:3d:e8:60:05:37:16:b1:
9a:73:da:e6:8e:47:64:21:30:83:26:be:30:85:b3:
e8:13:6c:09:c2:50:15:61:06:6c:48:a8:bc:38:f2:
9a:ea:d3:96:c3:9a:73:49:c2:5a:39:ed:e4:45:f5:
5c:69:d8:45:cc:c8:b5:25:d5:fb:46:2d:be:f4:cd:
c2:c3:d9:98:7f:57:12:e8:f3:fe:95:70:d8:48:50:
37:c9:5c:e6:7a:93:0f:dc:e4:4a:b9:7d:90:58:40:
d7:75:1a:b4:1b:f6:62:30:fd:e0:c7:b6:d6:6a:02:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:75:E7:98:D1:DB:CE:BA:5F:E1:B6:3C:4F:D1:ED:61:06:35:E8
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7d:45:9f:66:3a:9d:ae:78:41:ed:6a:fa:16:d5:5c:3c:8d:
3d:cb:b0:e7:c9:c0:df:de:ca:97:2c:f1:0d:6c:44:55:44:47:
28:81:d1:e4:1d:7f:7d:9e:6d:d6:93:7c:7d:31:17:bc:fc:a3:
60:30:6e:02:10:7f:e4:f1:2b:92:a4:39:f0:31:d0:f7:54:61:
87:21:22:c2:e0:ed:d2:76:b8:db:e5:cd:e8:65:69:17:e3:ef:
8e:00:9e:54:3d:85:8c:64:58:1d:f2:fc:9d:e7:ed:11:5f:47:
90:bd:32:ab:65:3b:75:dc:86:75:23:b8:18:52:0d:c6:d7:01:
70:b8:a4:66:a5:ac:c4:ba:4f:49:53:6a:4b:6f:56:6a:55:1f:
4c:a5:03:dd:94:96:86:4e:e3:48:bd:f9:6f:db:0e:dd:e0:07:
b6:0e:40:e1:bc:95:6b:37:77:f8:87:35:78:94:71:83:6c:8c:
98:8f:6d:b3:4e:6a:ab:61:c0:86:42:c9:78:2d:72:a3:74:61:
ec:13:df:08:67:cd:99:87:75:74:77:bb:4d:51:7e:7b:40:a0:
19:53:a4:8a:c5:69:b8:f5:d1:2c:7f:b7:4d:84:2b:aa:0b:e1:
9b:b2:c8:4b:1b:2e:20:79:62:b7:99:8a:2f:ea:e7:b9:7d:05:
7a:56:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:17:52 2025 by rpki-client