This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: pltEDpycqXVfBWnnG44ak4HMKM+z6IfC2Nu8JEM9uyM=
Subject key identifier: 6B:9C:B7:44:0C:E1:53:FB:E2:2E:68:E6:FA:8F:13:29:A9:EC:6C:B9
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 019B342003FDE311C980E97822F38D95B447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 178C
Signing time: Fri 19 Dec 2025 01:01:11 +0000
Manifest this update: Fri 19 Dec 2025 01:01:11 +0000
Manifest next update: Sat 20 Dec 2025 01:01:11 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: VjbBaSSJt6UTCUo385xHerDaTc6OPaP8i3WStEmg/ho=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:20:03:fd:e3:11:c9:80:e9:78:22:f3:8d:95:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Dec 19 01:01:11 2025 GMT
Not After : Dec 20 01:01:11 2025 GMT
Subject: CN=6b9cb7440ce153fbe22e68e6fa8f1329a9ec6cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:f4:d9:24:75:fd:ae:fe:dc:fe:a2:73:4f:
09:26:37:4e:b7:c7:26:d2:a1:15:41:21:ae:4d:0c:
09:82:57:5b:04:e6:64:15:72:6e:b6:3a:b4:ab:ec:
89:fa:f6:fd:4a:07:d0:65:2e:93:e4:c8:d9:d1:8a:
81:2f:d5:e1:fb:a7:b2:b7:70:4e:85:fb:38:22:16:
4a:5c:4d:d4:81:17:5a:cd:77:2a:f4:c8:9f:e6:04:
78:d1:77:bc:69:e2:87:e3:4f:4a:ed:48:2b:79:1b:
d3:6d:f1:41:17:ea:65:1f:e3:84:53:86:07:9c:a8:
59:61:a8:45:3c:cc:cf:4a:a8:f0:41:24:2d:c9:f6:
2e:47:19:c0:00:5f:54:24:6c:f0:a6:6a:9f:16:a5:
3b:ff:36:d8:55:78:54:4e:68:01:1f:8e:a6:b6:73:
99:3e:b7:f5:c9:08:9e:ea:71:48:6c:fe:26:41:39:
a7:60:56:7b:fc:08:fc:fb:6c:b9:9b:6d:34:bd:6f:
d2:48:38:5f:81:b6:27:cf:c6:e5:2b:0c:ad:f7:5c:
de:a6:ce:d5:97:17:85:ae:65:8c:9a:6a:9f:2e:27:
7a:99:de:b7:fb:49:13:63:d4:ca:ba:bd:9f:ba:ad:
fc:49:f9:fb:85:77:7e:2d:aa:36:f7:3b:b6:52:b3:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:B7:44:0C:E1:53:FB:E2:2E:68:E6:FA:8F:13:29:A9:EC:6C:B9
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:b5:6d:97:a1:32:d3:8f:d5:58:9a:4e:53:d3:c4:24:35:
28:42:5c:44:be:83:82:32:e4:a0:25:f0:70:bc:6f:78:0c:4e:
fb:b3:9e:9f:ba:d6:97:69:e9:51:81:a3:a6:2d:b6:d7:01:e0:
c4:66:07:63:4e:77:db:60:d0:c3:58:c4:f6:dd:f4:89:4e:37:
cc:ef:fa:aa:89:40:c3:b9:42:83:07:0b:dd:f6:21:cd:50:8c:
ec:9e:f5:b3:97:f5:32:1d:b1:41:4d:fa:17:6c:b8:8b:b0:ee:
ac:8b:01:62:68:6c:1c:d4:7a:65:b0:29:2c:9c:28:9a:52:8d:
f4:17:ef:da:ad:7b:23:3b:a9:f2:6d:83:d8:2c:17:5e:08:87:
ad:94:54:cf:f2:72:02:29:2f:6f:c3:e5:a9:c9:c8:1c:99:93:
6a:54:90:63:68:df:a6:0f:6d:e8:c7:27:5b:c3:e9:41:70:f5:
0c:f9:26:8c:d0:b3:4b:1b:3f:45:71:25:7a:54:ae:66:5d:db:
bc:ec:09:d4:e2:bd:88:41:d6:f5:b3:67:e0:da:4f:b9:f8:f2:
56:bd:ce:54:09:2b:74:72:0a:32:ae:3b:91:90:33:21:fb:c7:
0e:04:c6:2f:df:f2:b5:78:2f:ec:77:f1:e0:22:2a:82:45:30:
30:c2:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:56:11 2025 by rpki-client