This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: omrtdQM/cbpiEBHx3DUXGM2hIH8dAu0eN0zjRJcqAIw=
Subject key identifier: 47:3F:8D:F2:E5:9B:BC:98:6D:2E:30:6B:D7:5D:C5:A6:CC:96:04:6E
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019B3833529970E7AE6D792F754C42059E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 178C
Signing time: Fri 19 Dec 2025 20:00:46 +0000
Manifest this update: Fri 19 Dec 2025 20:00:46 +0000
Manifest next update: Sat 20 Dec 2025 20:00:46 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: zqQMJ8R+PuEJ7hTjZg1dTXroHeC5aL3JWx9lNpYD5A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:33:52:99:70:e7:ae:6d:79:2f:75:4c:42:05:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Dec 19 20:00:46 2025 GMT
Not After : Dec 20 20:00:46 2025 GMT
Subject: CN=473f8df2e59bbc986d2e306bd75dc5a6cc96046e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:ed:f9:08:af:59:92:38:1d:70:dc:f5:4b:
e0:be:58:97:fe:5b:41:64:35:c7:a2:a9:2f:f5:37:
f9:c7:09:db:4f:59:68:75:66:94:ac:3b:28:b8:b5:
9d:61:be:c7:cb:f2:3c:21:36:1a:78:1f:9c:c5:8e:
78:04:01:ae:89:06:ec:f0:ca:07:15:7a:5f:22:d6:
8a:52:b6:0a:bd:51:81:5c:43:c0:90:d2:c9:33:1e:
45:09:f8:51:22:98:f9:2b:ec:88:53:fb:fe:ac:5d:
36:c9:0c:a6:b0:91:45:08:19:82:77:69:98:77:10:
41:c2:d8:97:1d:70:ed:f0:fa:0c:93:87:ee:d1:57:
43:23:98:18:d2:42:8c:42:8e:c9:98:f7:c8:19:83:
b7:95:8c:7d:5a:c8:25:12:b5:0c:a5:f0:86:5e:5b:
d1:cf:eb:81:22:df:9d:bc:dd:cc:9d:5f:0a:1a:8a:
29:d4:da:37:6e:1a:d4:ea:32:c1:ec:b5:bc:ef:92:
38:1b:a6:d9:ad:d5:5a:16:67:ff:8b:2f:a9:45:a6:
55:8a:aa:7e:45:e9:3e:3b:5e:58:4c:68:33:0e:b2:
ee:56:b2:7f:58:3f:12:e0:b3:7c:8d:47:2a:5b:3f:
e6:10:5b:20:e8:4c:be:11:21:42:40:2d:57:50:ca:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:8D:F2:E5:9B:BC:98:6D:2E:30:6B:D7:5D:C5:A6:CC:96:04:6E
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:4d:29:6d:3f:ef:d2:7b:23:e7:6e:cd:89:06:f0:cc:26:
d1:29:cf:8d:f6:4d:b3:84:de:a2:a5:74:b7:71:8c:17:84:f1:
65:f3:ab:a8:bf:aa:ab:e8:68:ef:d8:e6:a0:3f:3c:d9:69:b6:
79:70:26:c7:a5:2b:32:99:44:16:10:ed:82:a0:7a:06:69:3d:
3d:35:01:b7:4a:ea:ba:c1:29:fe:c8:88:12:57:bf:85:3e:d9:
5b:50:04:9a:13:f0:64:7a:a6:ca:d8:bb:e0:08:7f:02:4b:18:
71:94:9c:4c:18:fb:56:5b:92:44:db:a6:74:46:ab:79:7e:f5:
0b:92:de:ae:28:3a:a7:03:99:51:c8:8f:39:9c:84:f8:a4:26:
d9:a1:80:4b:6c:cc:15:11:4c:e7:32:8b:65:ce:e6:43:70:d4:
7f:07:53:de:08:9b:c7:11:d5:fd:1b:6a:c5:3f:66:86:83:72:
e7:d9:09:e3:c1:18:98:4f:02:63:4d:c5:a7:d8:66:5e:56:ed:
22:55:52:95:cd:4f:e1:59:cb:f4:59:58:12:de:59:5a:37:0b:
ef:dd:98:34:3f:e2:30:b9:78:61:26:18:06:0f:37:a2:b5:84:
1b:16:fe:0e:1f:9a:d8:5b:3b:81:56:ec:7c:cc:c6:57:d6:f3:
b1:59:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:39:46 2025 by rpki-client