This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: f6lVSjYFKFvLD0thfvKllcWJfYpGhEP2sAIgvrFSssE=
Subject key identifier: B7:17:1C:BF:C6:69:B2:7D:A3:23:DC:86:87:03:B2:F0:32:29:14:F7
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019B597675F9D5FE39621F79BAD612E53F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 172B
Signing time: Fri 26 Dec 2025 07:01:34 +0000
Manifest this update: Fri 26 Dec 2025 07:01:34 +0000
Manifest next update: Sat 27 Dec 2025 07:01:34 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: qulg6Liww/SKKBSBxvvXKkUAmByEDC+DgVO9KxxcX7g=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:76:75:f9:d5:fe:39:62:1f:79:ba:d6:12:e5:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Dec 26 07:01:34 2025 GMT
Not After : Dec 27 07:01:34 2025 GMT
Subject: CN=b7171cbfc669b27da323dc868703b2f0322914f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:88:26:32:18:e7:b2:6b:f5:a9:b7:be:57:
1e:0b:f2:8c:19:1a:f2:bc:0e:c4:94:c9:4a:80:fe:
21:0b:fa:55:a3:27:3d:d9:96:84:a5:5f:9a:3d:bb:
44:38:11:a2:58:2d:aa:de:6b:ad:51:8c:db:bf:db:
3a:f0:fe:4b:39:f5:10:1b:dc:0f:fd:48:19:e6:48:
be:90:22:85:3f:d9:8e:db:2c:ba:19:9a:bf:32:09:
82:be:33:58:3c:3d:0b:19:75:fe:a8:dd:a8:b1:8b:
45:51:fe:31:cd:bb:12:e7:a6:13:98:28:5b:43:21:
1b:0d:ae:de:7b:17:a1:26:9b:14:3a:b2:8a:6c:d3:
61:01:12:33:66:c7:17:5d:85:c7:f6:1c:30:01:54:
96:4a:92:89:65:72:1f:dd:f0:8e:d6:e2:38:5f:94:
8e:5c:23:22:a7:5e:d1:65:b8:52:e4:94:d4:09:ab:
d3:30:d4:30:86:32:cc:66:57:fd:ca:c7:56:7f:a0:
ee:08:a9:b7:70:54:b0:31:8c:e0:d7:16:dc:8f:ad:
0e:a9:a7:67:aa:40:83:16:d7:c1:ef:9a:3b:10:f4:
4a:5f:24:ee:f3:aa:a0:4b:07:67:ed:85:ab:cc:36:
0e:a4:c9:bd:8c:b5:76:32:a9:7f:df:42:97:ac:8c:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:1C:BF:C6:69:B2:7D:A3:23:DC:86:87:03:B2:F0:32:29:14:F7
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:fd:85:dc:5c:67:d9:4e:82:eb:24:e9:a6:33:c8:4d:b6:
67:88:b5:60:32:03:98:f5:20:c7:bf:2d:94:26:47:0c:d3:ef:
4d:ee:7d:1f:fa:5a:7c:fb:51:c3:1d:82:fa:9c:42:cc:27:4d:
a4:25:fa:bf:42:75:34:bc:da:cd:eb:95:52:38:6a:a8:f5:4a:
c9:15:f8:47:2a:fd:56:d2:28:b0:94:fc:b2:3b:03:00:1d:e1:
84:5b:82:a4:ab:d5:0f:c5:74:e0:88:78:30:75:6e:da:58:2e:
c9:84:ab:fb:02:38:3e:7a:5d:29:e0:83:e7:45:92:a4:bb:20:
ba:6a:6c:5c:09:b2:da:ca:36:80:44:60:a5:eb:d8:2f:a6:d2:
c6:18:74:f7:5f:91:59:88:bd:0d:e4:87:f1:81:4d:68:6a:19:
22:34:b8:bb:ca:d9:94:10:57:8a:50:74:48:76:3d:cb:62:7f:
3d:af:73:08:71:21:af:63:10:42:2d:c0:cf:57:a3:96:2c:b5:
76:db:c6:be:76:df:16:98:67:ef:d6:15:c8:5b:b5:0d:5d:cc:
80:ce:ee:d7:97:8d:c6:bf:21:67:1c:9e:0b:ff:e6:c5:de:83:
91:3e:d0:8c:cb:53:51:d1:16:91:ee:30:05:5e:1e:26:ec:23:
6e:07:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:57:16 2025 by rpki-client