This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: jRtsD8pYFO1ZcXaETKLAzQKqZmk50CKCataYLtyy0Os=
Subject key identifier: 32:8A:E9:59:68:E2:D9:14:03:52:2A:70:6B:FC:40:00:23:0F:D5:BA
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 019B4324C7E61EFA29C33360221522FB1B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 1218
Signing time: Sun 21 Dec 2025 23:00:42 +0000
Manifest this update: Sun 21 Dec 2025 23:00:42 +0000
Manifest next update: Mon 22 Dec 2025 23:00:42 +0000
Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: sFPofImVEogTDwHQtCH+9L3pMMLPKTWyBOw8oG+DBEs=)
5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:24:c7:e6:1e:fa:29:c3:33:60:22:15:22:fb:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Dec 21 23:00:42 2025 GMT
Not After : Dec 22 23:00:42 2025 GMT
Subject: CN=328ae95968e2d91403522a706bfc4000230fd5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:66:10:b2:1b:db:c6:04:04:98:bb:ab:b2:
bd:ea:8e:a9:e2:a9:13:28:b1:b3:08:25:79:61:91:
cc:cf:64:32:02:60:84:16:47:d4:54:d2:a1:3d:49:
b4:ea:6e:f4:8c:dd:10:1b:3d:0b:8a:68:7d:c1:e5:
23:20:d0:6b:7d:94:81:73:a1:4c:77:c0:40:b1:b2:
ef:f2:a2:6d:50:c3:15:22:37:92:d8:2d:ac:1b:5d:
d3:1e:92:38:7f:b9:8a:22:15:b7:d0:1d:b6:8a:19:
b3:c6:8d:be:c4:d3:62:2c:70:c9:ec:aa:17:3f:aa:
51:24:e8:4a:da:ae:88:27:ca:6f:08:5a:f9:97:07:
2a:2f:6a:4a:4c:4a:4c:6b:40:16:e9:f5:52:96:ee:
c5:f0:36:5d:b7:51:49:f9:68:d4:e0:aa:e3:d7:ae:
f2:cd:c5:ce:54:84:fd:6a:96:ad:0f:f8:81:cb:fb:
ac:10:43:33:80:72:59:0e:40:e7:63:88:87:fb:4c:
3e:e6:3d:ff:12:35:7c:fd:be:5c:18:2e:ea:6c:cd:
c6:bd:4e:92:cd:65:8e:78:a6:c9:7f:41:50:c0:75:
1f:56:89:28:68:60:67:5a:c7:0f:33:fb:7a:89:fc:
39:f2:ea:3d:41:8d:c3:cc:f0:32:7d:85:68:df:d0:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:E9:59:68:E2:D9:14:03:52:2A:70:6B:FC:40:00:23:0F:D5:BA
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:68:9f:1c:e0:6c:ab:ae:69:9b:92:02:be:a4:82:1c:a1:
d4:62:84:67:cb:39:62:04:97:d9:35:6f:47:f6:d3:65:22:cd:
d7:8b:b6:61:be:7b:28:7c:e7:8a:d7:31:ad:19:56:5d:29:ad:
34:5f:d9:e9:28:ec:85:88:20:64:13:27:f8:2f:55:54:a3:01:
f9:de:0b:f9:cd:c9:20:80:ad:dd:8e:79:42:fc:92:ae:7b:4e:
4e:f9:82:4c:cb:b7:b1:55:62:00:f4:13:a8:f3:9b:53:54:d7:
67:09:b1:9d:ee:3a:ef:4c:f8:80:3b:34:ee:b9:03:48:43:58:
71:b3:47:43:ee:04:0a:79:6f:1b:e3:a3:11:04:3d:74:c7:cb:
96:38:2c:90:0d:27:f0:c6:d2:ca:93:70:21:f5:c7:53:02:47:
8b:67:4a:4e:ba:9a:7a:fe:60:e0:d6:de:dd:21:c0:7f:60:69:
3d:83:63:24:cf:86:12:40:bf:9e:5b:55:21:dd:06:29:1b:82:
7d:9e:ca:6f:54:d2:5a:0f:13:21:d3:34:99:a2:90:20:48:a7:
f8:56:b6:46:f9:70:46:96:da:14:b9:b1:80:86:29:e9:81:e4:
f6:45:65:93:3c:5d:34:53:e2:1c:a1:c5:b8:ac:f7:79:66:bc:
bf:46:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:19:09 2025 by rpki-client