This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: YPaNMnMrO9tTNRgOL/oLqh6PJitAtzyHmgRAw7ZB8Vc=
Subject key identifier: A6:95:B9:36:80:78:74:CD:B3:AB:42:39:77:B1:24:7E:ED:F6:FB:D6
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 019B3CB4E7503301FD45678FE92A19199CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 1789
Signing time: Sat 20 Dec 2025 17:00:47 +0000
Manifest this update: Sat 20 Dec 2025 17:00:47 +0000
Manifest next update: Sun 21 Dec 2025 17:00:47 +0000
Files and hashes: 1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: Yfn/omKmH/JIfZx/YVobKpPGWdCU5EcD5XY0V9PJO0g=)
5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b4:e7:50:33:01:fd:45:67:8f:e9:2a:19:19:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Dec 20 17:00:47 2025 GMT
Not After : Dec 21 17:00:47 2025 GMT
Subject: CN=a695b936807874cdb3ab423977b1247eedf6fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:01:cd:5d:7f:e8:24:cf:bd:fa:2f:e9:87:
a4:43:63:de:cc:8d:0c:57:a8:ff:21:22:28:60:1a:
96:09:f7:76:1c:d3:76:4c:a7:5a:58:05:46:08:2a:
ae:2d:c0:c2:75:56:be:72:a3:21:cd:9f:6c:3d:c7:
26:2b:5f:03:2f:cf:5d:34:d5:a0:9e:c9:c3:83:88:
f6:5f:60:0e:83:82:34:54:35:b7:91:fd:d2:0f:8f:
da:d7:dd:0c:27:f7:2b:36:62:59:01:55:1f:18:95:
bf:a4:77:fb:75:b7:3f:0b:f4:ee:5f:7b:a1:7f:25:
c2:11:06:08:7d:28:ec:a7:3c:16:03:20:ba:1e:f1:
39:96:ff:15:35:33:e2:cd:d3:74:20:3e:36:35:7f:
18:b2:de:c7:0c:a8:78:17:32:3b:dd:15:6e:1f:3c:
f9:72:5e:a1:8d:05:80:07:29:61:b6:ad:4b:d8:b0:
37:d9:6f:2c:66:37:0d:0c:b7:5e:d2:3d:23:19:42:
20:fb:7e:a2:e8:b9:98:97:cc:48:01:ca:5c:77:e3:
7c:52:35:1c:22:c7:6b:c5:eb:82:fa:87:c6:21:58:
b2:cf:cb:31:68:0d:7b:42:48:a8:3f:9d:b0:64:18:
07:61:30:6b:73:cf:c9:1a:cc:b7:d8:3b:48:76:89:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:B9:36:80:78:74:CD:B3:AB:42:39:77:B1:24:7E:ED:F6:FB:D6
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:ac:9c:bc:c3:5c:8f:81:85:d3:03:c3:85:28:a1:1e:5e:
ea:ae:1e:42:52:23:6c:65:ea:7a:f3:51:ec:4a:3f:0d:9f:2a:
91:f0:8e:19:3d:e6:6e:ec:7f:7b:55:30:eb:06:8c:32:4e:1d:
e0:dd:e4:3f:47:ae:2e:b6:90:60:c1:f4:ad:d8:c0:69:db:da:
d3:f6:f2:99:38:7a:9f:d8:4e:ab:ca:53:ce:f6:63:76:5c:1d:
a0:4c:38:6f:2d:e2:2f:fb:ef:a8:80:d5:11:4c:f7:45:eb:13:
8d:e6:41:3d:ae:26:1d:48:e1:c7:ee:a9:a0:10:8d:51:9a:58:
02:ae:be:c2:87:00:6f:4a:fa:e7:2f:09:ab:ec:6c:87:39:6c:
8d:8c:76:cf:82:4d:b5:d6:d1:87:fb:91:7f:eb:51:18:c9:59:
12:84:b1:f9:d3:43:7c:b4:b0:8a:a2:4b:53:26:3c:58:bc:49:
7f:80:9e:ab:16:81:98:81:87:50:7f:aa:e3:09:d8:2d:20:a4:
67:cb:d0:57:3f:71:10:e8:a2:9c:37:37:4f:42:df:b3:e2:88:
e6:93:32:fe:b9:a8:7d:b3:c5:a6:e2:8d:d2:1a:43:c1:b9:15:
6b:db:d6:95:e9:df:32:64:2b:49:74:a7:80:af:f6:b8:f9:8c:
fa:c4:b0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8tOdQMwH9RWeP6SoZGZz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy
OTcwMGEwHhcNMjUxMjIwMTcwMDQ3WhcNMjUxMjIxMTcwMDQ3WjAzMTEwLwYDVQQD
EyhhNjk1YjkzNjgwNzg3NGNkYjNhYjQyMzk3N2IxMjQ3ZWVkZjZmYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNsBzV1/6CTPvfov6YekQ2PezI0M
V6j/ISIoYBqWCfd2HNN2TKdaWAVGCCquLcDCdVa+cqMhzZ9sPccmK18DL89dNNWg
nsnDg4j2X2AOg4I0VDW3kf3SD4/a190MJ/crNmJZAVUfGJW/pHf7dbc/C/TuX3uh
fyXCEQYIfSjspzwWAyC6HvE5lv8VNTPizdN0ID42NX8Yst7HDKh4FzI73RVuHzz5
cl6hjQWABylhtq1L2LA32W8sZjcNDLde0j0jGUIg+36i6LmYl8xIAcpcd+N8UjUc
IsdrxeuC+ofGIViyz8sxaA17QkioP52wZBgHYTBrc8/JGsy32DtIdokKtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaVuTaAeHTNs6tCOXexJH7t9vvWMB8GA1UdIwQY
MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt
ZjhkNjYyYjk2ZGFiLzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi
LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQasnLzD
XI+BhdMDw4UooR5e6q4eQlIjbGXqevNR7Eo/DZ8qkfCOGT3mbux/e1Uw6waMMk4d
4N3kP0euLraQYMH0rdjAadva0/bymTh6n9hOq8pTzvZjdlwdoEw4by3iL/vvqIDV
EUz3ResTjeZBPa4mHUjhx+6poBCNUZpYAq6+wocAb0r65y8Jq+xshzlsjYx2z4JN
tdbRh/uRf+tRGMlZEoSx+dNDfLSwiqJLUyY8WLxJf4CeqxaBmIGHUH+q4wnYLSCk
Z8vQVz9xEOiinDc3T0Lfs+KI5pMy/rmofbPFpuKN0hpDwbkVa9vWlenfMmQrSXSn
gK/2uPmM+sSwPg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:05:45 2025 by rpki-client