This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: +u7JUkKQ0B+Rp7lYBvx7CkEqR/DuC1t2EPvmZPrYC6c=
Subject key identifier: 2E:0C:4F:83:E3:D2:D6:CD:E3:36:3C:7D:CF:94:0E:08:EC:93:BD:B4
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019B27775ECAF6BF0648DDE4AD4F014AD20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 177F
Signing time: Tue 16 Dec 2025 14:01:32 +0000
Manifest this update: Tue 16 Dec 2025 14:01:32 +0000
Manifest next update: Wed 17 Dec 2025 14:01:32 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: uNbbKw3IwKUYBmOO6cH4sHibsBp+10SlecJoYmL4x90=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:77:5e:ca:f6:bf:06:48:dd:e4:ad:4f:01:4a:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Dec 16 14:01:32 2025 GMT
Not After : Dec 17 14:01:32 2025 GMT
Subject: CN=2e0c4f83e3d2d6cde3363c7dcf940e08ec93bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:5c:cd:c7:5f:e3:3d:1e:72:3c:87:f3:80:
02:39:c4:86:59:dd:2d:a3:d0:46:fa:57:a3:ee:6a:
1a:17:dd:37:df:29:63:aa:c7:6d:1f:74:fc:4a:31:
89:88:3a:bc:a9:53:b1:98:1e:71:ea:bc:fb:d4:b8:
5c:a8:74:f7:6a:85:0a:48:c7:02:24:26:e0:5b:e0:
62:f5:2a:f5:15:d4:7f:68:d6:25:9d:bf:37:d2:84:
44:fd:54:9d:6b:1b:16:1e:72:6e:be:3e:1a:04:03:
f7:be:8e:06:49:98:2f:c8:b5:b6:ad:9f:da:90:4d:
19:b8:96:62:6a:a2:ef:16:66:d4:b3:6a:37:a6:36:
af:5b:e5:da:61:a4:fb:d5:9f:1e:41:35:21:73:7a:
a7:02:a9:f2:90:63:88:0a:f6:5f:6e:d1:9f:f0:a2:
ca:05:b0:0a:b2:5d:ad:7a:57:66:64:fb:98:19:32:
56:05:38:df:df:55:4c:67:58:d7:6f:70:c8:17:b9:
6d:56:c0:26:9a:17:8c:46:5a:7c:35:e9:5f:f8:b6:
f0:59:40:5d:85:55:2f:45:84:30:8a:97:2f:b5:51:
1e:e0:2c:fb:cd:05:bb:cb:e5:2d:32:95:42:08:46:
67:6c:ea:cc:5e:2b:dd:2a:04:8a:6d:9e:d1:19:1e:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:4F:83:E3:D2:D6:CD:E3:36:3C:7D:CF:94:0E:08:EC:93:BD:B4
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:aa:9a:11:71:d9:5f:b3:74:68:23:8a:6d:11:15:ef:d0:
ca:2b:66:c6:45:41:a4:ee:97:3f:b5:2c:89:1a:99:93:1a:64:
11:04:1a:d5:99:f8:47:e5:98:53:36:ff:87:a1:f8:40:83:8a:
1a:29:5a:4e:d2:58:b2:ac:8a:1c:3d:4a:db:9f:e9:2f:ad:41:
82:28:8f:f1:70:21:2c:47:a6:64:da:d5:7d:94:f9:21:2a:26:
41:ee:a9:d9:b0:bc:75:07:01:0a:9d:0a:c3:1b:76:e4:d9:ea:
93:50:17:a1:6c:f9:55:97:c3:0a:8d:63:05:da:29:01:cd:37:
c9:bc:1d:7b:18:ed:e3:c6:9b:f8:de:c9:82:ef:49:d4:1b:49:
c2:1f:78:24:ee:68:f4:df:fb:06:ab:81:7c:1f:27:9b:d0:a1:
e0:90:7c:cc:72:41:70:91:de:e7:14:52:bb:87:45:12:b4:ac:
43:26:75:e6:af:38:09:82:68:be:83:18:56:32:23:59:9c:fb:
21:ce:07:e5:d0:d9:38:3b:dd:bb:82:5c:81:96:43:cb:26:36:
40:2c:49:a5:8b:d7:83:d8:27:f3:79:22:45:e3:06:99:e9:d0:
9d:14:91:9d:d8:57:1c:77:c7:89:0a:7d:79:3e:74:75:a5:42:
17:b8:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:35:02 2025 by rpki-client