This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier: O823DELts74k2enkcNjjd+kJ3MMSW491u7/89cwoV+4=
Subject key identifier: C9:BD:57:EE:D6:2C:49:E7:CA:BE:87:CC:96:58:29:EC:A9:4B:87:8C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019AF8790579C8850F7A2BBAF47F71206179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number: 182A
Signing time: Sun 07 Dec 2025 11:01:12 +0000
Manifest this update: Sun 07 Dec 2025 11:01:12 +0000
Manifest next update: Mon 08 Dec 2025 11:01:12 +0000
Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: naa3piamzFD1TydsVl6XSzigyBLqjiuNBMah/S6K/fM=)
2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=)
3: 51SUNS4NzE-NFlYbOxa6dVSJlJg.roa (hash: pz2zCbZpIM5OE18+MtuDbYpRKziF5XB+qaDVBI26k5U=)
4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=)
5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
7: PKx0bsHKaxWX-4t6b4C2oQj6ZdA.roa (hash: A8fByKFvsFqD6jsKpJ3oefFEQhPGUAvgn7emwJzwq9M=)
8: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=)
9: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
10: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
11: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=)
12: nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa (hash: WWP6Qvn5sb0v16R7y7lOMfY54UvOgjr7TyOI6hQ1twA=)
13: p-NLwsw4XZb2x84j5S8WR2nP2QY.roa (hash: dy84ZCh6OBzC5pABeBNPTTlXjsQiBBFHY7p7FUFXzcQ=)
14: rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa (hash: B0jP1n50rUzyEhb8sNQfRdBvFRnGYSNgdCNKMzpwhpA=)
15: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
16: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
17: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f8:79:05:79:c8:85:0f:7a:2b:ba:f4:7f:71:20:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Dec 7 11:01:12 2025 GMT
Not After : Dec 8 11:01:12 2025 GMT
Subject: CN=c9bd57eed62c49e7cabe87cc965829eca94b878c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:f1:97:b5:95:ae:59:4c:22:29:b0:00:d9:
35:81:a0:f7:7f:2f:0b:8b:ee:46:bd:fa:b4:3d:ef:
8c:6e:4a:2f:34:f3:b4:7f:f0:96:c9:f5:3b:4b:61:
87:cc:0c:62:0c:bc:9d:ee:76:fb:23:54:9a:35:92:
3e:0a:63:53:19:f9:2c:0e:e7:30:22:79:89:d9:f6:
e7:46:dd:30:61:d9:76:b5:16:db:72:32:f1:50:e4:
02:ea:c9:05:89:3f:09:19:03:13:53:33:45:71:5a:
53:d5:c4:52:8f:8c:ba:c1:79:18:c0:fd:04:b6:70:
8d:8a:18:95:29:0a:fe:1f:e9:e9:25:15:c6:91:04:
03:fe:04:28:96:7e:0f:c4:09:56:0b:95:5c:e0:35:
20:ef:70:64:18:2c:2a:68:74:57:28:e8:6d:c4:34:
b3:f9:6b:df:2f:d3:20:c6:45:be:3f:10:e8:53:9d:
75:80:92:32:ef:24:c2:d2:1c:44:a3:1f:de:50:18:
09:bf:d3:59:55:16:b3:01:fc:88:41:5d:42:b1:44:
a1:de:89:06:bb:e0:cd:f3:79:ac:70:b8:77:69:81:
75:0e:65:b5:c7:ca:3d:72:50:1b:e3:10:5a:0f:89:
63:46:a6:a6:5d:b6:d8:13:93:33:1b:aa:17:ec:ac:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:57:EE:D6:2C:49:E7:CA:BE:87:CC:96:58:29:EC:A9:4B:87:8C
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:73:b1:75:cd:ec:4d:14:e4:e6:22:de:47:67:8f:e9:67:45:
66:f6:a3:33:27:e4:24:0d:22:15:b9:06:1c:1d:2b:0c:e6:af:
c4:6e:41:cf:d4:52:df:9f:b1:68:07:51:8d:0e:37:67:59:41:
1c:c6:7b:22:dc:88:b5:1e:d6:87:ab:0c:ad:1f:f7:ba:99:6e:
dd:fe:fc:8c:b6:9a:9b:4f:67:33:d4:1a:81:aa:15:5c:b7:8a:
8d:94:a7:18:e9:5c:23:18:df:b0:73:95:05:4a:ad:e6:82:38:
36:47:82:33:bf:a6:e1:65:62:73:e8:09:c0:c5:ba:1e:c3:0e:
e8:cb:31:b0:2a:92:a8:19:73:f5:45:55:1b:3a:33:2d:b9:89:
c5:35:e3:0a:8b:7f:cc:72:a1:f7:2f:a6:18:ec:4b:ca:09:83:
2e:f5:5a:08:53:2a:ac:8f:f5:15:6f:01:0c:fa:cd:87:59:99:
11:c7:1a:24:f2:9f:53:c5:69:a2:c5:1b:36:8b:ab:cb:ee:93:
22:6a:cf:9b:7b:7f:9f:d6:05:1c:62:f3:c7:c4:50:ba:a1:b2:
5b:00:10:b7:96:4f:2c:c5:74:32:8d:0c:c9:47:86:db:65:b2:
b1:22:c7:ea:f9:ca:cb:2d:3c:a8:82:ab:e1:47:ea:6d:64:80:
13:32:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:36 2025 by rpki-client