This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: s0inJkXIolsnkXyCeFSfn6Nv8/Ogv9tujA6ean4VMhM=
Subject key identifier: C6:01:16:DC:7A:2F:1B:DE:A1:9F:2E:FB:64:06:56:7C:22:3B:CA:CB
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019B4ADF473371CCDBD8D94C4A8E50910CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 178F
Signing time: Tue 23 Dec 2025 11:01:45 +0000
Manifest this update: Tue 23 Dec 2025 11:01:45 +0000
Manifest next update: Wed 24 Dec 2025 11:01:45 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: uuQfOBMJIjUeNJu00nYwxCmFPJNJ5kuj/nwp9pX1S+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:df:47:33:71:cc:db:d8:d9:4c:4a:8e:50:91:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Dec 23 11:01:45 2025 GMT
Not After : Dec 24 11:01:45 2025 GMT
Subject: CN=c60116dc7a2f1bdea19f2efb6406567c223bcacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:42:94:89:ef:f9:29:d1:36:a0:15:13:57:
c7:cf:8e:dc:3d:c6:58:01:a9:d0:6b:3e:b2:52:e0:
e6:0b:f9:e8:38:57:ad:da:f4:59:a3:73:5e:f8:dc:
8d:46:1d:63:94:27:a5:87:30:f0:5c:68:b2:67:83:
5e:c7:5f:0a:cd:e0:fc:5a:a2:de:0b:c8:dc:bb:93:
83:32:95:40:fa:36:e9:a8:5d:21:cc:d8:04:c1:d4:
d2:1a:dd:4d:2f:e9:ff:a3:fb:ff:53:99:96:e6:1f:
81:19:4a:8a:b1:4a:eb:8e:0d:de:8a:84:40:5b:b1:
e1:aa:f9:c7:24:8f:be:20:71:bb:9d:5b:e5:53:4a:
21:86:7f:f2:2d:e4:cc:0d:e4:3a:9b:9e:d8:64:8e:
dc:1b:b4:88:06:0c:b9:76:c5:98:33:b3:c5:ae:42:
82:79:ca:02:95:af:bb:ab:dc:d7:c7:5d:df:42:d5:
87:ae:13:ee:3f:86:43:c9:c7:0e:19:43:ef:7a:d7:
4c:72:4c:78:30:64:72:42:24:22:80:b0:69:38:25:
f6:ab:53:cf:75:70:b6:28:6c:ea:4a:5a:ac:88:c1:
74:7c:8c:52:2e:83:f7:b9:b4:d4:ac:6a:a5:e1:05:
e5:43:2b:f4:7b:b4:20:ec:22:07:72:9e:6b:01:fb:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:16:DC:7A:2F:1B:DE:A1:9F:2E:FB:64:06:56:7C:22:3B:CA:CB
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:61:64:94:67:36:a7:3c:39:11:9e:12:f1:20:91:af:1c:
5e:a6:f5:6d:de:1f:09:af:69:16:49:94:1e:23:8b:df:31:ac:
c3:22:b4:d7:29:4f:da:06:cf:2e:90:d9:9b:aa:6c:33:08:8c:
78:ca:06:60:7c:44:5f:67:7e:9f:0d:42:aa:8a:38:1c:29:85:
db:d8:05:41:b4:4e:b5:94:57:4b:55:5a:06:e0:af:85:66:fe:
9c:bd:29:28:45:b8:c6:0c:51:28:c3:47:1d:c2:03:5d:2a:a4:
81:9c:89:81:e8:62:86:6d:c0:6c:7f:dc:dd:33:06:a4:b3:a2:
ad:62:6e:e4:a4:5a:25:74:75:73:d8:de:3e:27:22:4a:68:b2:
18:0c:60:b1:84:a7:45:f2:4f:d1:b6:55:65:6b:5b:cb:f6:58:
92:19:9f:ca:f4:d9:d8:5f:b4:98:44:eb:c8:bd:ca:e4:c8:c8:
3e:0d:09:92:0f:13:a6:65:3a:fd:17:6a:d2:6a:5b:f3:c2:56:
1a:53:d0:25:30:a9:07:9f:f3:ff:b4:69:10:f9:9d:81:86:5c:
6b:cf:55:9c:f3:9f:7a:66:d1:08:44:e6:82:a6:fe:1f:4f:19:
8f:5b:e7:c5:b0:fb:13:f2:bf:36:45:40:8f:b1:63:24:6d:04:
fb:94:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:38:47 2025 by rpki-client