This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File: miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier: vyD+nDkVb2yz6x5FXJEcSFPyVvcCnFhppiPcl5KvUAs=
Subject key identifier: CF:1E:1E:8F:6B:E7:03:F6:9D:41:5B:69:13:98:36:00:80:86:8E:28
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 019B10135493ADCB66DDBE08D6191C979607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number: 0667
Signing time: Fri 12 Dec 2025 01:01:00 +0000
Manifest this update: Fri 12 Dec 2025 01:01:00 +0000
Manifest next update: Sat 13 Dec 2025 01:01:00 +0000
Files and hashes: 1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: iRXIBFDNQ9vfyryuqq10NoKizTkQaSA1Mqe0JJULOeM=)
6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:13:54:93:ad:cb:66:dd:be:08:d6:19:1c:97:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Dec 12 01:01:00 2025 GMT
Not After : Dec 13 01:01:00 2025 GMT
Subject: CN=cf1e1e8f6be703f69d415b691398360080868e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:f0:2d:7b:01:f8:a1:00:c0:4c:86:dc:6f:
38:fc:45:43:24:30:8e:28:69:a3:29:aa:a5:54:77:
8e:56:e9:4f:32:c3:4d:cb:32:99:f6:cf:2a:2e:9b:
22:f6:d3:2f:a0:eb:f1:29:da:15:f9:63:4c:36:ed:
51:23:3c:b1:7c:e6:dd:eb:1a:a5:af:b9:65:e7:cf:
dd:a5:9c:75:d0:2d:f0:a2:d7:40:3c:1c:1d:d6:83:
ef:63:86:61:09:9a:26:eb:1d:77:78:e4:4d:d9:de:
d1:4d:a4:b2:ca:66:ae:db:cb:a3:e2:b3:21:cf:c1:
ec:68:14:40:c5:5c:b7:ac:61:3f:81:89:0c:34:50:
72:e1:9d:74:d9:e6:6e:9a:4a:39:51:a4:b2:3a:be:
27:5b:5d:9e:0e:31:32:73:4e:d5:58:ab:05:be:f2:
84:2f:ac:b5:d1:f6:a9:ea:77:cd:06:72:4d:ee:21:
53:7c:99:ac:3d:70:b4:a0:0e:d3:07:20:31:a1:eb:
61:90:f8:23:2b:0c:e6:5c:13:e6:d5:cd:bd:7e:94:
0c:e6:65:a8:cb:b6:2c:cf:55:f7:47:c6:d2:85:cb:
86:28:3c:f9:cb:fd:d7:d4:06:81:94:30:9a:13:28:
bb:48:dd:5b:ba:a3:2a:28:1d:10:2f:21:51:f0:1d:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:1E:8F:6B:E7:03:F6:9D:41:5B:69:13:98:36:00:80:86:8E:28
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:22:cc:c1:6c:e1:7f:ad:16:98:25:8e:89:3a:d8:e1:4e:00:
ae:cf:8d:a9:2a:07:51:2f:91:33:50:78:11:15:2f:f3:cf:ea:
7a:7a:88:a1:13:92:e8:47:81:a7:b0:e2:e9:81:ba:4c:e1:5e:
15:f0:70:2c:aa:5e:6b:5f:9a:8a:6e:0c:72:fc:72:44:12:a0:
05:d7:86:6f:3f:44:c1:c6:e5:8f:ce:13:ca:ec:22:cf:2d:a7:
28:a5:90:c4:e5:5a:d0:99:3d:df:67:6d:73:79:69:e2:fd:f5:
a6:ab:85:0d:23:0d:0d:6a:93:69:d6:89:99:79:68:6c:7e:57:
2d:c1:df:33:5f:8e:51:5e:d6:f1:00:61:8e:08:28:17:cd:f9:
16:a9:df:df:59:ad:c0:d4:94:59:e2:91:cb:c9:b5:ed:a6:e6:
c8:78:a0:68:a1:6c:c5:a0:33:22:8e:6a:ae:f5:56:f7:d1:43:
65:a6:a1:35:4b:4c:6d:a5:89:43:26:74:d5:8e:f5:b4:70:c2:
21:9e:7e:de:8c:2c:36:e2:6f:5f:cb:51:3f:01:80:0f:ec:41:
d5:d7:f7:a1:e8:bd:6b:3d:54:73:94:8f:42:7a:73:b1:5b:14:
d6:e3:62:18:1c:86:ae:e7:87:89:0d:d5:69:0d:f1:6d:b4:77:
b6:b2:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:42:49 2025 by rpki-client