This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier: fAGnrIhE2fFRBKA0krxMicFM8kIDRpJA9+Ll+fdkCjg=
Subject key identifier: 02:B2:37:D0:7D:B7:BE:BA:04:48:C5:2F:89:6F:77:72:2B:93:79:55
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 019B367BE653E9A5C405190540BCBFF9E675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number: 0F80
Signing time: Fri 19 Dec 2025 12:00:48 +0000
Manifest this update: Fri 19 Dec 2025 12:00:48 +0000
Manifest next update: Sat 20 Dec 2025 12:00:48 +0000
Files and hashes: 1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=)
2: 7d-V0wk7_LwQmv-CS7561oFEwSc.roa (hash: u5Et4u+PPH6ChiKIaXCULpF5f++8aJtXhJxY+hqA1C0=)
3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: gXFBNfoobbQiKe5sdUgHrvnh5RrOr1Wy6UywXh2mUPc=)
4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=)
5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=)
6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=)
7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=)
8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=)
9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=)
10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:7b:e6:53:e9:a5:c4:05:19:05:40:bc:bf:f9:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Dec 19 12:00:48 2025 GMT
Not After : Dec 20 12:00:48 2025 GMT
Subject: CN=02b237d07db7beba0448c52f896f77722b937955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:0e:a6:06:6e:de:53:01:d4:b5:02:62:07:
04:76:fc:c4:88:60:18:71:62:77:dc:f9:85:ab:aa:
05:3f:8c:c2:16:48:1a:83:f0:b0:04:c4:ff:74:d3:
54:d3:2e:38:7a:07:69:9e:50:f0:8d:d4:98:f8:20:
09:cf:19:44:39:4d:29:ba:c0:85:2a:85:c3:67:de:
bd:4f:0a:82:e9:e0:78:eb:5d:61:80:eb:2f:78:47:
81:6e:42:6e:28:1b:08:66:cf:b0:97:f5:5b:5e:36:
76:8f:41:5b:32:be:03:a9:fe:60:70:0d:fd:9d:74:
d8:22:31:b2:f3:1c:6d:3a:52:72:f4:5c:02:9b:34:
01:d3:8b:11:f5:7c:ed:04:84:43:dd:da:c5:3b:84:
24:d0:4a:57:6e:e8:fd:08:c6:75:d6:0a:76:11:0f:
c7:96:d8:79:74:2d:c7:e5:ab:23:9a:28:8b:71:2d:
4d:20:f6:b9:e6:12:38:01:4f:3e:f8:98:64:51:0b:
59:5e:bd:7c:dd:70:a2:1b:80:60:f4:6e:91:0c:f3:
dd:7f:92:8f:39:78:2e:5b:ea:48:5a:36:a2:cd:2f:
d2:b8:44:59:68:3f:0c:d7:fb:19:34:75:a0:1f:f9:
19:bc:ec:91:69:cd:5c:3c:f3:d2:c5:a3:b8:ea:af:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:37:D0:7D:B7:BE:BA:04:48:C5:2F:89:6F:77:72:2B:93:79:55
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:01:17:ad:99:ff:43:84:94:fe:dc:a6:da:41:59:a0:88:b4:
11:76:bd:d8:83:51:80:78:f8:07:af:f0:04:74:cc:27:7b:4b:
f1:95:2b:b7:7d:cb:35:83:e8:46:d1:88:64:98:2c:71:f4:a8:
86:bc:ba:94:f1:f1:bd:7f:65:b7:55:51:9c:0f:e9:ee:8f:dd:
64:99:4c:80:ee:71:ac:3b:c7:be:22:01:4b:60:2a:cc:eb:9e:
c6:d1:49:ee:f1:ab:7d:ea:6c:1b:12:21:ee:77:64:dd:ad:c6:
36:9b:6f:ae:8e:e8:a8:c8:f3:58:4a:21:9f:e8:9c:50:de:24:
4a:e3:7a:56:74:a0:01:7a:ed:5d:0e:5d:7e:fc:64:23:bb:7e:
a6:f3:f0:42:9c:b1:40:54:82:29:60:c1:a9:e3:c0:5d:2f:04:
76:bb:91:1b:5b:9e:0d:f0:2a:30:91:e2:fa:3d:f7:6c:40:4a:
fe:99:8e:9c:76:00:6b:42:25:55:0e:5f:d1:96:83:33:7c:c1:
65:c7:00:28:b1:3c:c3:1d:7f:eb:a9:51:2f:5e:1f:96:84:0c:
fe:31:0f:05:6a:a5:fa:83:93:86:c4:a9:a8:d5:19:b6:c7:ea:
56:b5:03:9a:ed:f3:27:bc:6d:76:d3:86:92:2a:b5:72:28:ab:
18:ff:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:47:00 2025 by rpki-client