This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: MOZ4PEDA/5m2KqL2rjBn+C8dguFhme5Ryx1edjfu5o4=
Subject key identifier: 15:EE:78:80:D7:54:2A:41:AF:2D:05:7B:8E:7D:0E:32:50:D1:95:AE
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019B0E25DBB82CB2C6DC3F8E29C6287AF1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0B96
Signing time: Thu 11 Dec 2025 16:02:00 +0000
Manifest this update: Thu 11 Dec 2025 16:02:00 +0000
Manifest next update: Fri 12 Dec 2025 16:02:00 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: mtKNhL/+wVfaW/yzw8qDBsq2zLCNTMDudPodyylbDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:25:db:b8:2c:b2:c6:dc:3f:8e:29:c6:28:7a:f1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Dec 11 16:02:00 2025 GMT
Not After : Dec 12 16:02:00 2025 GMT
Subject: CN=15ee7880d7542a41af2d057b8e7d0e3250d195ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:7c:62:67:19:81:50:f3:65:63:3b:88:37:
d0:dc:92:e2:54:ba:9d:37:5c:31:d6:4f:15:b8:dd:
75:23:a2:45:f3:cf:96:2b:8b:1d:cb:5c:bc:6b:fe:
eb:38:e2:3a:56:2a:8a:54:1a:4d:3f:69:43:59:08:
51:ae:71:2d:62:09:a9:fb:a4:8f:79:bc:8b:cd:6e:
1e:77:d9:0e:25:59:f3:99:5c:a7:33:ab:a9:62:6a:
34:25:78:ad:b6:67:9b:d4:3f:ed:84:ef:03:44:e7:
66:3e:f4:79:ae:94:fd:1b:fb:37:5a:58:4a:e3:79:
65:63:a8:7e:46:7e:ac:20:42:fe:12:eb:f4:51:41:
df:84:a5:82:7e:d3:d2:98:d3:22:c6:70:d7:83:a3:
d7:f5:51:d7:d5:d2:0f:52:a6:43:0c:3d:63:21:0d:
41:47:27:c9:8f:40:5b:51:f0:df:d7:96:6d:d3:5a:
d8:8f:8b:44:31:ed:b7:84:b0:f1:09:3c:8d:97:f7:
a6:37:7f:dd:d0:44:0b:ff:dc:38:13:25:f1:12:e6:
7b:97:05:b3:07:1d:ae:27:ca:d4:cf:b7:9f:46:dd:
e2:c8:2f:aa:95:ad:d4:d8:26:31:04:20:29:40:34:
a9:77:90:3f:c7:99:2d:73:1b:e9:61:2d:73:68:b4:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:78:80:D7:54:2A:41:AF:2D:05:7B:8E:7D:0E:32:50:D1:95:AE
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fa:1b:d3:5f:eb:fa:36:7f:e7:2c:2d:9e:c9:b2:6b:33:3d:
53:e6:b6:2e:dd:b0:cd:c2:06:ca:3b:d5:8b:c0:6d:cb:86:5d:
df:2c:93:4e:63:b9:34:93:a1:a4:94:4e:7d:5c:b3:bc:e6:c3:
c7:cb:71:ac:b4:86:7a:f3:55:98:b4:13:75:26:95:67:11:cc:
7b:16:4b:fd:23:56:54:5a:ab:82:1d:8b:ed:ba:0b:78:91:e4:
32:82:06:ad:d3:fe:e9:9c:2e:5b:41:9c:2c:dd:19:ea:b0:be:
61:00:34:e5:a1:1a:d3:9e:b3:f3:63:af:0c:e2:c7:ed:0d:4f:
1e:64:f6:f4:13:af:ca:1c:d3:34:e6:15:f9:b8:08:fe:bc:6b:
f7:64:ec:59:23:71:c8:e9:2d:75:b4:9c:e0:8e:a9:b0:75:c6:
13:33:91:62:c6:73:32:5c:1d:18:c7:57:b6:49:bd:f3:ea:9c:
c7:0b:81:c1:fe:2f:fe:62:52:7b:68:c2:03:2e:c5:cf:93:50:
9a:c9:5d:65:7b:7e:5d:16:2a:e3:64:ca:8c:b8:39:3c:1a:4f:
23:ad:66:92:db:19:86:f7:a4:53:5b:9c:f5:42:36:e6:e0:b4:
05:d7:b5:8b:2c:6c:ad:e5:e4:0e:7c:59:a0:91:73:66:93:b7:
70:bb:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:57:56 2025 by rpki-client