This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier: JrSxIdE6/qTu/uSV9S/3aI7Tp2NAAw6Wscx7OxX1dtk=
Subject key identifier: ED:14:6A:97:3B:82:CD:E1:3B:6B:6A:BC:7E:5E:FA:A5:FC:B7:9C:F2
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 019B3A8F963B7A237AC5866FB11DF8B7A53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number: 179C
Signing time: Sat 20 Dec 2025 07:00:47 +0000
Manifest this update: Sat 20 Dec 2025 07:00:47 +0000
Manifest next update: Sun 21 Dec 2025 07:00:47 +0000
Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: B8ODnmZ2gwehdpDb+Ko4X87lCKoJAv7sd8h7cRcT86E=)
2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=)
3: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=)
4: rkMUgmhsqbXXRN9oFUiXQpZDv8U.roa (hash: qJePBEGYHTN0gemfII7b2mdoR3N62f9upxA2WFELbiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:8f:96:3b:7a:23:7a:c5:86:6f:b1:1d:f8:b7:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Dec 20 07:00:47 2025 GMT
Not After : Dec 21 07:00:47 2025 GMT
Subject: CN=ed146a973b82cde13b6b6abc7e5efaa5fcb79cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:05:a4:0d:b9:b5:77:ba:0c:00:45:53:cd:
a5:76:63:89:c6:f2:53:4b:25:90:40:89:2c:6b:70:
39:9d:3a:b7:38:b7:e2:f9:3a:0e:e8:11:8b:b5:d4:
61:01:5e:9d:6e:c9:ec:b5:ec:0a:d3:54:1d:ee:62:
89:8b:43:ef:0c:5b:8c:ab:6c:63:f4:9e:24:2b:13:
d3:84:d6:da:93:d1:d0:ae:64:eb:32:27:21:55:e4:
ca:04:28:96:98:c8:4e:9d:a6:b2:dc:7a:d1:03:57:
5c:fc:b2:bb:05:33:5d:24:19:56:d2:09:c7:47:22:
21:79:2f:41:0a:68:64:44:fd:d2:b6:ff:18:94:c9:
1f:71:d1:a6:be:c2:e8:8d:26:9a:77:13:10:b9:f8:
4e:d4:a6:05:68:ea:f5:2c:a3:f9:b3:d1:00:d3:2c:
84:5c:de:ef:25:49:1a:6a:f1:94:0c:5f:92:bd:38:
ea:7b:08:67:1c:28:e1:ba:d2:c8:9a:1e:84:be:9e:
ff:a3:ba:d5:e6:e9:8a:b7:93:22:74:29:f3:3f:45:
80:1b:5e:f0:50:81:d2:27:b3:b7:4b:35:c4:56:e8:
01:98:2a:48:56:db:4a:6e:b0:91:1d:0c:16:46:f8:
ee:3e:99:89:7e:16:dc:7e:ad:5d:6b:21:21:43:5b:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:14:6A:97:3B:82:CD:E1:3B:6B:6A:BC:7E:5E:FA:A5:FC:B7:9C:F2
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:57:7e:2d:a5:df:cf:83:62:f3:d0:52:6c:93:37:67:92:36:
9e:30:7a:4c:16:0d:99:a9:66:4c:ad:f2:81:3a:10:30:de:70:
ee:8b:99:9f:d7:48:b6:4c:69:0e:ed:aa:89:9e:41:d7:da:2d:
1d:2d:ce:28:29:e0:48:a6:3d:39:a0:e6:c0:4d:8c:38:b7:3d:
19:b3:19:8d:0d:c7:f3:9b:8a:c7:dd:d3:34:00:0a:fa:a7:39:
fa:46:43:5c:7c:71:9d:8b:f5:ac:6a:21:0f:72:12:50:cf:72:
3c:4f:30:f2:cf:69:c5:a7:93:21:6b:b9:05:a4:9d:e3:ca:fd:
e8:4b:6a:75:6b:4e:e3:f8:2a:0a:7f:56:3e:d9:07:2c:94:de:
cd:54:24:82:ba:08:bc:c1:a7:5d:14:d6:57:f5:b5:39:03:c8:
02:03:59:83:94:ff:b1:57:a8:de:85:44:2d:9f:17:19:66:25:
b0:23:89:fd:be:09:f5:b8:e1:cf:2f:73:19:7c:49:e5:ff:da:
45:b5:ac:8a:8b:de:ea:60:02:0d:7d:fa:87:28:82:77:72:c8:
6f:2d:bb:ce:44:d0:b4:f5:62:07:16:90:dd:dc:b1:03:0e:5c:
55:c5:5d:8e:85:42:de:b1:9a:22:ea:78:cb:7d:4c:b0:01:ce:
ff:e2:60:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6j5Y7eiN6xYZvsR34t6U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw
Y2Q1NmYwHhcNMjUxMjIwMDcwMDQ3WhcNMjUxMjIxMDcwMDQ3WjAzMTEwLwYDVQQD
EyhlZDE0NmE5NzNiODJjZGUxM2I2YjZhYmM3ZTVlZmFhNWZjYjc5Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+IFpA25tXe6DABFU82ldmOJxvJT
SyWQQIksa3A5nTq3OLfi+ToO6BGLtdRhAV6dbsnstewK01Qd7mKJi0PvDFuMq2xj
9J4kKxPThNbak9HQrmTrMichVeTKBCiWmMhOnaay3HrRA1dc/LK7BTNdJBlW0gnH
RyIheS9BCmhkRP3Stv8YlMkfcdGmvsLojSaadxMQufhO1KYFaOr1LKP5s9EA0yyE
XN7vJUkaavGUDF+SvTjqewhnHCjhutLImh6Evp7/o7rV5umKt5MidCnzP0WAG17w
UIHSJ7O3SzXEVugBmCpIVttKbrCRHQwWRvjuPpmJfhbcfq1dayEhQ1v6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0Uapc7gs3hO2tqvH5e+qX8t5zyMB8GA1UdIwQY
MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct
ZDBjODJhM2NmNGI2LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2
LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFd+LaXf
z4Ni89BSbJM3Z5I2njB6TBYNmalmTK3ygToQMN5w7ouZn9dItkxpDu2qiZ5B19ot
HS3OKCngSKY9OaDmwE2MOLc9GbMZjQ3H85uKx93TNAAK+qc5+kZDXHxxnYv1rGoh
D3ISUM9yPE8w8s9pxaeTIWu5BaSd48r96EtqdWtO4/gqCn9WPtkHLJTezVQkgroI
vMGnXRTWV/W1OQPIAgNZg5T/sVeo3oVELZ8XGWYlsCOJ/b4J9bjhzy9zGXxJ5f/a
RbWsiove6mACDX36hyiCd3LIby27zkTQtPViBxaQ3dyxAw5cVcVdjoVC3rGaIup4
y31MsAHO/+JgUQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:16:07 2025 by rpki-client