This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File: F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier: xyZKLjQ2prqQFn1Wr1H2tMre8SzP1/74k1Zj3p/SWx8=
Subject key identifier: 01:35:A1:0E:1B:3D:48:DC:18:B6:CE:EE:89:79:68:94:42:16:10:B6
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 019B0E25A12BA3614178978B39C47D110B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number: 12AF
Signing time: Thu 11 Dec 2025 16:01:45 +0000
Manifest this update: Thu 11 Dec 2025 16:01:45 +0000
Manifest next update: Fri 12 Dec 2025 16:01:45 +0000
Files and hashes: 1: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: Q5TryKpOwpja43mJYPNab5jKvAY7XfFQhwrdphUYKGU=)
2: HBsNTRQXWcPQbzWUzkWwFIJ-NiY.roa (hash: 8k01+u0bD23piBX5SKFalRiJFYskfuHtxEUxOGIwUkM=)
3: fGbepzb9A-L4azmxjWxp1naTF6A.roa (hash: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=)
4: i5Z-UkQ8_GCMdTDvdRVzZJd1s3E.roa (hash: hFp0HQZXTf6e9rwGzdmb+2RH6Ma6X1h19nbiCrFmx6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:25:a1:2b:a3:61:41:78:97:8b:39:c4:7d:11:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Dec 11 16:01:45 2025 GMT
Not After : Dec 12 16:01:45 2025 GMT
Subject: CN=0135a10e1b3d48dc18b6ceee89796894421610b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:a8:f8:bf:37:4c:e3:2f:bd:91:dd:79:a9:
b0:d1:76:d7:88:59:21:6d:41:b9:e6:d8:00:b0:86:
67:92:ee:95:63:93:b5:ec:a8:b0:21:47:72:e2:25:
d6:29:ae:4c:33:2f:e0:47:5d:d4:0a:24:16:b2:ad:
40:00:94:a0:69:72:05:cd:a3:24:22:54:1c:69:46:
a8:4c:27:c5:59:75:ea:e7:6d:99:74:31:2e:66:cd:
e1:cc:82:3d:af:4f:8f:e5:16:36:e7:cf:70:d2:e5:
bb:70:4a:29:f5:6b:66:c5:7b:ae:ad:d1:f1:c4:35:
19:06:92:46:7c:5c:b6:66:16:8d:cf:9d:a5:85:3d:
4a:e6:fb:dd:d6:b6:4b:fd:d6:4d:bb:8b:e0:f4:20:
b0:40:e7:06:16:85:eb:d8:2b:2c:50:02:68:d2:70:
87:4f:41:e6:f9:ee:94:ef:ef:11:f2:d5:b6:a1:b9:
06:6e:5f:1a:68:e2:6c:bd:29:e0:0d:6d:12:89:63:
2d:8e:c5:f7:80:e1:5d:a3:92:25:e4:72:40:c6:4e:
c6:36:65:a9:f9:01:a0:95:28:31:e6:9c:99:1d:cb:
f0:41:22:22:7c:fc:39:a6:b6:62:e7:d5:e9:d5:16:
06:cf:94:ff:86:dd:bc:b7:56:03:66:bb:8d:8a:70:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:A1:0E:1B:3D:48:DC:18:B6:CE:EE:89:79:68:94:42:16:10:B6
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b1:24:cd:f4:8f:32:43:0c:76:a6:8c:b0:ee:5e:8e:85:c0:
65:48:85:88:60:19:da:34:aa:db:a2:8c:89:72:67:2c:7f:26:
37:1f:38:42:4c:c6:c1:b1:30:b4:ec:39:d0:2a:4d:3d:ed:f0:
42:d1:5d:57:d4:86:63:94:78:25:1f:55:0d:4c:5a:87:88:82:
10:8d:3a:a7:2f:d0:94:3e:c7:83:79:5f:fe:75:12:46:49:2b:
30:e6:51:d1:be:f9:b4:3e:f4:df:e3:1d:f0:a6:a5:1b:1b:04:
ec:68:c8:3e:04:a4:f4:2d:a1:dd:cb:44:fd:49:21:6b:9c:ad:
fb:a5:aa:8b:db:9f:0d:57:3e:25:f9:6c:78:e6:cb:5e:93:28:
3b:95:ad:e6:a0:9a:a8:c9:df:00:36:11:c0:4c:2c:c2:4a:02:
12:30:7d:88:de:f2:36:39:c4:90:d4:69:0e:7a:bd:25:21:eb:
ba:68:9f:25:1d:aa:a8:ec:06:9e:c1:56:12:1d:a4:14:68:1d:
67:3b:4e:48:bf:cc:5d:48:61:27:62:f7:8c:ed:f5:bf:4e:2f:
1c:a4:c6:d7:04:5b:c7:b9:b8:d8:6c:5b:b1:3a:ea:ca:02:67:
45:1a:ec:b2:6a:c1:42:11:2c:0f:99:f7:26:23:6f:4e:a1:c8:
07:d6:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:28:48 2025 by rpki-client