This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: 53jtIVYj10C9u+Njt71QX/eNRjoa5IrLIxfb1JC1M1E=
Subject key identifier: 89:D2:D0:20:99:75:4A:C5:27:55:4A:56:2D:B5:FD:08:3F:8F:5B:22
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019B5A1AD88E1747DD75F3F202E222C0B9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1682
Signing time: Fri 26 Dec 2025 10:01:07 +0000
Manifest this update: Fri 26 Dec 2025 10:01:07 +0000
Manifest next update: Sat 27 Dec 2025 10:01:07 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: vpSR38rQstoFIct+c5FuRMkZdwKAm3/O8sLgdxDNR9A=)
3: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:1a:d8:8e:17:47:dd:75:f3:f2:02:e2:22:c0:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Dec 26 10:01:07 2025 GMT
Not After : Dec 27 10:01:07 2025 GMT
Subject: CN=89d2d02099754ac527554a562db5fd083f8f5b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:a5:83:15:76:d3:e9:bb:c7:ce:c2:3f:8a:
49:7f:43:b8:b5:6d:8e:c2:07:c6:d0:9f:43:ae:9c:
44:e5:39:63:f1:80:ed:58:c1:bb:db:aa:b3:c2:d6:
ce:d7:7e:f1:db:1a:d3:4b:e8:2b:23:6e:04:c0:0f:
74:8e:2a:e0:cf:a9:d7:e5:12:3a:03:33:97:7b:14:
9c:dd:82:df:21:3c:2d:85:5a:4e:c4:5a:db:5a:73:
ab:40:f5:4d:bd:a3:b1:11:15:24:26:2a:07:21:82:
57:23:b4:47:29:28:2f:3f:44:40:17:1c:f6:89:4c:
50:0c:3d:6f:51:9e:c6:51:ed:96:9b:ff:25:08:fb:
f2:c7:f6:d2:39:08:98:26:d1:6d:18:72:58:5a:ee:
59:56:9d:fd:fd:57:82:a5:34:ec:2a:da:4a:67:60:
1a:42:85:1f:ea:cf:a1:24:0d:17:96:86:96:ca:3e:
da:5f:e9:55:7b:50:1a:cf:6b:99:0d:24:33:fd:dd:
b4:3d:ff:4b:98:b3:a9:8f:45:f8:75:e3:20:00:0c:
bc:7f:07:ac:c4:b4:5e:39:05:be:0d:be:30:bb:28:
b0:ef:22:b5:8c:c9:83:5f:59:78:5c:81:f9:c8:1c:
6d:71:27:8d:09:76:1a:94:40:ab:17:b4:81:d7:e7:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:D0:20:99:75:4A:C5:27:55:4A:56:2D:B5:FD:08:3F:8F:5B:22
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:0a:38:7a:65:26:2b:69:e7:92:58:57:65:b4:f4:b7:1b:
0a:48:01:33:b0:c5:6c:d4:92:2d:30:16:13:5d:bb:e0:9d:ab:
e8:e2:03:87:4e:d0:24:1d:18:b4:7c:45:61:60:f2:d5:68:25:
f4:90:39:49:ec:a5:5a:b5:d7:49:e4:65:c9:9b:0f:25:3a:b1:
ba:e2:5d:87:a9:b1:0e:0a:0b:52:48:de:c2:4d:40:35:5c:51:
ad:4e:ef:48:5c:15:fb:ae:9d:f2:83:bd:9f:bc:c9:c4:3f:b1:
08:d5:22:34:92:90:df:d9:50:90:e0:fe:60:48:c2:cb:2e:50:
42:c7:a0:2c:b6:d1:c7:57:76:69:2c:46:6b:d6:bd:34:a1:c5:
cf:00:29:b6:e5:9f:54:2d:89:2b:13:3a:1d:e7:3d:cc:13:57:
60:04:e9:e7:70:99:0e:97:64:b5:89:92:7c:f9:6d:ed:a5:1e:
b8:ad:b1:c4:2e:8d:a9:d0:2a:5e:07:da:d9:bc:13:49:a0:1a:
8e:f4:ed:99:58:a4:20:ee:57:0d:65:26:7b:6a:f2:8a:b1:85:
21:26:b1:1d:56:96:af:32:ab:60:13:53:7a:81:fe:cc:18:26:
16:2e:3a:4c:38:0c:35:97:98:fb:a6:1a:07:b9:f5:88:82:15:
69:6a:8f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtaGtiOF0fddfPyAuIiwLnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz
MzlhN2UwHhcNMjUxMjI2MTAwMTA3WhcNMjUxMjI3MTAwMTA3WjAzMTEwLwYDVQQD
Eyg4OWQyZDAyMDk5NzU0YWM1Mjc1NTRhNTYyZGI1ZmQwODNmOGY1YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpmlgxV20+m7x87CP4pJf0O4tW2O
wgfG0J9DrpxE5Tlj8YDtWMG726qzwtbO137x2xrTS+grI24EwA90jirgz6nX5RI6
AzOXexSc3YLfITwthVpOxFrbWnOrQPVNvaOxERUkJioHIYJXI7RHKSgvP0RAFxz2
iUxQDD1vUZ7GUe2Wm/8lCPvyx/bSOQiYJtFtGHJYWu5ZVp39/VeCpTTsKtpKZ2Aa
QoUf6s+hJA0XloaWyj7aX+lVe1Aaz2uZDSQz/d20Pf9LmLOpj0X4deMgAAy8fwes
xLReOQW+Db4wuyiw7yK1jMmDX1l4XIH5yBxtcSeNCXYalECrF7SB1+fNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInS0CCZdUrFJ1VKVi21/Qg/j1siMB8GA1UdIwQY
MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct
NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk
LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/IKOHpl
Jitp55JYV2W09LcbCkgBM7DFbNSSLTAWE1274J2r6OIDh07QJB0YtHxFYWDy1Wgl
9JA5SeylWrXXSeRlyZsPJTqxuuJdh6mxDgoLUkjewk1ANVxRrU7vSFwV+66d8oO9
n7zJxD+xCNUiNJKQ39lQkOD+YEjCyy5QQsegLLbRx1d2aSxGa9a9NKHFzwAptuWf
VC2JKxM6Hec9zBNXYATp53CZDpdktYmSfPlt7aUeuK2xxC6NqdAqXgfa2bwTSaAa
jvTtmVikIO5XDWUme2ryirGFISaxHVaWrzKrYBNTeoH+zBgmFi46TDgMNZeY+6Ya
B7n1iIIVaWqPDQ==
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:44:19 2025 by rpki-client