This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: IgbU4oTbIicMb4kJafJx9HsODBJHI/nyiIZxkrv+QWE=
Subject key identifier: E5:E2:BD:2A:70:71:2A:C5:72:19:6F:61:E7:A7:48:CD:34:2E:AD:63
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 019B3C7FAB3A0092827A9EDBEEFB2E698AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 178C
Signing time: Sat 20 Dec 2025 16:02:38 +0000
Manifest this update: Sat 20 Dec 2025 16:02:38 +0000
Manifest next update: Sun 21 Dec 2025 16:02:38 +0000
Files and hashes: 1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=)
2: 7NbESzXRMNmvEomT-Mf8me7h-5o.roa (hash: sP5JFPjYHopQ7eTPfJ05mH6EJsqFFPFigu0p8AF8Ees=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: Mu1Ef6u/lY2qrQGLu0+BVH80dISZjWulp1LsMvUc6rM=)
4: _8kwQM-X6Z8iQPUFtkn5eqJVuxI.roa (hash: euBW9IpgTvtCum/UZd3emtTuwK2uZ78wnCtDCEVJf2A=)
5: c4bLrKnAkTRBkWnGAk0rUMNmNi0.roa (hash: MeURMVUFI1PNljAcbfvTNPtm4Rnq7dMhBu12jSOQpgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7f:ab:3a:00:92:82:7a:9e:db:ee:fb:2e:69:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Dec 20 16:02:38 2025 GMT
Not After : Dec 21 16:02:38 2025 GMT
Subject: CN=e5e2bd2a70712ac572196f61e7a748cd342ead63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:31:eb:cf:ae:6f:98:e4:6d:7e:c7:e8:63:
12:af:82:3d:7c:1e:bc:53:8d:9f:ea:8b:70:a8:f7:
b6:b2:6f:4f:fa:20:96:b4:64:f7:66:9c:15:32:5e:
be:f3:35:26:5c:12:09:2b:ca:5c:ce:82:f7:25:39:
a0:24:40:47:40:73:64:71:a3:e5:08:bd:e1:f7:a6:
29:2f:38:83:2b:2a:48:03:42:38:63:d0:52:6c:92:
b8:ec:ac:86:9d:e0:38:63:2d:f8:66:4a:76:45:7e:
65:e8:2e:07:f7:04:cc:a8:12:47:da:f9:fe:c3:29:
b3:18:29:13:42:82:f0:91:cb:64:81:ab:f5:47:df:
58:89:d4:eb:35:3a:12:70:97:7d:88:37:c5:6c:84:
2c:05:10:a5:ff:76:90:d4:18:e7:01:74:0b:7b:d4:
69:6c:87:a6:d3:6c:21:83:c6:39:ae:cb:73:60:14:
5c:4f:d6:dd:1a:a8:03:28:31:05:00:33:fb:b9:20:
8c:7f:7e:8e:71:8f:f8:5d:e1:a0:7c:6a:b7:51:6d:
10:44:38:b6:50:3d:fa:9e:24:39:6e:68:e1:dd:f1:
98:92:10:b6:82:e9:96:f2:a2:af:6f:50:c1:fd:a4:
e7:44:00:8b:f0:19:8d:da:09:fe:08:68:ba:2b:d8:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:BD:2A:70:71:2A:C5:72:19:6F:61:E7:A7:48:CD:34:2E:AD:63
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6e:c6:32:12:06:ef:e4:a3:65:6b:04:75:b4:79:95:bd:c4:
1f:48:70:e6:f0:c4:e4:b6:a4:de:e5:01:f1:55:c9:18:c3:79:
4f:c3:54:25:75:2a:cd:a2:6a:92:0c:72:63:b5:7f:33:64:0f:
be:b4:20:0f:1f:09:15:14:fd:05:50:f7:38:c3:8f:42:36:13:
20:fa:cc:16:b3:15:3f:a3:99:85:56:05:06:e9:8f:99:55:fb:
93:39:dc:30:5a:13:b7:cc:7d:df:f6:78:e5:33:c9:cb:4e:69:
9c:54:1e:ab:b4:b0:10:58:18:25:65:fb:75:7c:0a:57:d5:5d:
69:cc:c7:07:50:e7:f4:22:eb:03:4d:62:b5:ca:8a:4d:fc:78:
1e:b4:eb:27:c1:00:ed:5b:5a:61:91:97:e6:7f:fc:6a:64:3f:
62:8d:ae:29:d3:dc:68:a0:c2:11:b1:28:87:d2:0c:09:bd:10:
9a:de:a5:51:84:7e:24:b1:f4:2a:8c:b7:d7:8d:2d:5d:73:16:
4e:5c:f6:46:0c:2a:58:db:cf:5d:67:ea:70:4b:6c:c0:f6:e6:
8e:af:3a:ea:05:75:a3:58:f7:bf:dd:73:39:90:a4:21:f1:84:
5e:70:e6:52:7b:9d:a3:0f:df:57:9e:e8:a1:47:a0:95:fa:d1:
35:bf:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:10:57 2025 by rpki-client