This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: Jjs4aO3JxtswkpHGtqaQz+au9JsozT76HIEJqmkPU+o=
Subject key identifier: 57:71:93:14:C7:67:9D:35:7E:6C:18:BB:47:70:0D:78:1F:9B:FD:0A
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019B533CEDFA9A1A63A3AB17979A632C31CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0B46
Signing time: Thu 25 Dec 2025 02:01:00 +0000
Manifest this update: Thu 25 Dec 2025 02:01:00 +0000
Manifest next update: Fri 26 Dec 2025 02:01:00 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: IFBc0ywwPHJy4pbKjZ4A7B1VAnDg0UXfOrupZAQ5bAY=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 01:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:53:3c:ed:fa:9a:1a:63:a3:ab:17:97:9a:63:2c:31:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Dec 25 02:01:00 2025 GMT
Not After : Dec 26 02:01:00 2025 GMT
Subject: CN=57719314c7679d357e6c18bb47700d781f9bfd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:89:c7:29:a7:7b:b3:8d:19:d5:56:e8:fe:
7e:79:31:d9:7a:2e:e1:52:f0:99:1e:e5:45:a0:1d:
6a:14:19:9f:a2:f4:ba:27:bf:a5:10:5d:59:3f:c4:
3e:3b:2a:bd:da:2f:bc:81:7e:dc:52:b0:2c:db:12:
cd:4c:40:6e:c7:85:7b:62:53:15:72:32:c5:20:f7:
59:7c:45:36:fe:b5:12:5a:bf:02:9e:fb:0a:f1:54:
46:4e:32:0e:99:ad:79:8f:2e:67:36:46:57:88:55:
94:f6:18:f5:b8:2b:db:37:36:da:00:5f:f5:aa:dd:
e7:ec:6e:9b:63:ab:97:9f:5d:69:8b:65:c2:91:fd:
e9:ca:e3:6f:45:09:cb:b3:c0:df:9c:0e:79:24:2e:
2b:01:dc:32:ba:c8:b7:52:e1:be:79:25:87:97:8b:
e1:07:24:54:a9:95:70:92:d3:d8:c4:b2:ba:39:3f:
23:a4:89:84:62:b6:44:d6:aa:63:1f:95:01:e3:35:
75:45:0d:8b:20:94:77:4b:74:f5:48:5d:10:5f:fe:
fb:7a:81:40:a0:1e:41:fd:ad:7b:58:e8:0b:8b:e7:
9e:10:fd:e6:b5:22:d0:1a:f3:b5:a0:58:61:e7:0c:
b0:17:07:5d:e4:81:d3:53:5f:71:94:cb:d0:64:07:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:93:14:C7:67:9D:35:7E:6C:18:BB:47:70:0D:78:1F:9B:FD:0A
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4f:46:b2:dc:19:22:3d:ec:48:b8:e1:18:a8:7c:b8:c4:83:
48:1f:98:77:0b:6b:38:2c:e4:08:8b:b6:d4:29:00:81:fc:01:
83:da:34:d6:37:df:f5:4c:97:e5:16:f1:84:b7:c4:b9:78:2f:
11:f1:f8:b5:2f:bc:53:f5:06:5d:56:2e:b9:84:ef:ad:7f:77:
a8:aa:35:0d:95:1a:2f:8d:06:5e:05:93:87:76:38:6b:f3:ac:
49:c9:99:bf:f6:16:25:c4:eb:3a:af:82:ec:a5:45:5f:e9:a9:
ea:de:0b:d6:a5:6c:a9:13:7c:a8:e3:1a:c4:64:38:69:bc:a2:
08:75:04:7d:35:9c:bf:8a:75:a7:dd:9d:c6:51:8b:99:ce:b2:
72:22:ec:7e:cf:98:19:50:e6:72:93:d4:e7:4a:c5:a1:f7:02:
f8:0f:4e:d6:bc:3b:11:18:66:ff:7e:41:5e:d9:38:bd:4e:02:
49:a4:de:60:2b:ec:25:00:30:0c:cc:6e:cc:37:28:f8:0c:30:
00:40:10:cf:53:2b:d4:6d:f0:81:a7:47:64:73:7a:69:f8:dc:
4e:6e:e5:fe:c1:51:5f:00:8f:67:ac:0c:4e:f4:2c:9d:29:d5:
33:ce:d4:8a:2a:47:dd:b1:0c:ca:45:ed:35:81:fa:cf:2f:cf:
69:9d:e4:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtTPO36mhpjo6sXl5pjLDHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmVkY2UwOWYxMTJhYjJkM2ZmYWY0Y2IyYTM4ZWFmMWMx
YWY5MmUwHhcNMjUxMjI1MDIwMTAwWhcNMjUxMjI2MDIwMTAwWjAzMTEwLwYDVQQD
Eyg1NzcxOTMxNGM3Njc5ZDM1N2U2YzE4YmI0NzcwMGQ3ODFmOWJmZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSaJxymne7ONGdVW6P5+eTHZei7h
UvCZHuVFoB1qFBmfovS6J7+lEF1ZP8Q+Oyq92i+8gX7cUrAs2xLNTEBux4V7YlMV
cjLFIPdZfEU2/rUSWr8CnvsK8VRGTjIOma15jy5nNkZXiFWU9hj1uCvbNzbaAF/1
qt3n7G6bY6uXn11pi2XCkf3pyuNvRQnLs8DfnA55JC4rAdwyusi3UuG+eSWHl4vh
ByRUqZVwktPYxLK6OT8jpImEYrZE1qpjH5UB4zV1RQ2LIJR3S3T1SF0QX/77eoFA
oB5B/a17WOgLi+eeEP3mtSLQGvO1oFhh5wywFwdd5IHTU19xlMvQZAdxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdxkxTHZ501fmwYu0dwDXgfm/0KMB8GA1UdIwQY
MBaAFCku3OCfESqy0/+vTLKjjq8cGvkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xMjI3NGUtMzE2Yi00ZjNjLThlNmMt
ZGNmZWIzZjEwYzg2LzEvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xMjI3NGUtMzE2Yi00ZjNjLThlNmMtZGNmZWIzZjEwYzg2
LzEvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH09GstwZ
Ij3sSLjhGKh8uMSDSB+YdwtrOCzkCIu21CkAgfwBg9o01jff9UyX5RbxhLfEuXgv
EfH4tS+8U/UGXVYuuYTvrX93qKo1DZUaL40GXgWTh3Y4a/OsScmZv/YWJcTrOq+C
7KVFX+mp6t4L1qVsqRN8qOMaxGQ4abyiCHUEfTWcv4p1p92dxlGLmc6yciLsfs+Y
GVDmcpPU50rFofcC+A9O1rw7ERhm/35BXtk4vU4CSaTeYCvsJQAwDMxuzDco+Aww
AEAQz1Mr1G3wgadHZHN6afjcTm7l/sFRXwCPZ6wMTvQsnSnVM87UiipH3bEMykXt
NYH6zy/PaZ3kCg==
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:07:12 2025 by rpki-client