This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: Sb6wSu0LJnfIPDw+aCA2jlLq+7mnOARgZRPj5aKaso0=
Subject key identifier: AB:70:8C:C7:5A:97:9C:CF:94:13:31:16:9D:C7:B6:73:37:91:91:D4
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019B040EFFF3A33720C6E30D8728A9CB7E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 13E5
Signing time: Tue 09 Dec 2025 17:00:50 +0000
Manifest this update: Tue 09 Dec 2025 17:00:50 +0000
Manifest next update: Wed 10 Dec 2025 17:00:50 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: B437J5e7dV0ygev4921UAnyXkicOHKMjxtuPISyvL68=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 16:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:04:0e:ff:f3:a3:37:20:c6:e3:0d:87:28:a9:cb:7e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Dec 9 17:00:50 2025 GMT
Not After : Dec 10 17:00:50 2025 GMT
Subject: CN=ab708cc75a979ccf941331169dc7b673379191d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:ce:4a:bf:d4:9b:5a:84:d0:64:80:5d:cb:
d5:19:bd:cf:76:62:8b:99:b7:14:b7:fc:0b:78:21:
3e:48:05:d2:48:c0:e1:47:ab:95:c5:6e:7a:9c:7c:
60:8f:95:ed:18:8d:6e:64:c1:a1:c2:3e:ec:14:67:
31:71:2b:f2:62:fa:bd:c0:74:a5:6f:1b:48:e3:74:
31:84:db:a2:8f:2e:4b:2d:d1:de:a1:58:46:47:af:
a5:9c:52:ed:c8:e3:63:b4:e3:43:95:54:59:8b:88:
3c:58:76:e0:22:21:ad:c9:a1:93:2f:f2:11:2e:aa:
c8:fe:1f:69:ca:4f:c3:9e:c0:71:bd:c9:a3:6a:90:
f9:36:3e:93:52:af:67:aa:0f:ef:39:20:43:f2:0a:
c0:f0:79:be:a5:f6:8c:f7:aa:7e:da:25:df:f9:7b:
19:f2:cf:d1:fa:35:85:a2:46:6f:d7:ea:4b:82:9a:
3a:52:ef:f7:41:9e:11:01:96:2f:57:86:9f:cc:5f:
a6:21:72:e2:f8:73:ce:e2:41:f6:7f:e3:e7:0a:14:
d4:41:cc:83:ec:05:5c:b1:a0:e0:c6:40:ce:8e:8b:
15:cb:e9:11:c2:4c:42:18:f5:d4:5e:7b:3a:ad:95:
7e:93:68:a5:b8:09:5c:3d:84:d0:4a:ae:1e:11:5e:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:8C:C7:5A:97:9C:CF:94:13:31:16:9D:C7:B6:73:37:91:91:D4
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:11:a1:7b:1d:86:b5:9c:a0:d8:4c:26:1b:09:f9:07:12:
4a:49:d2:aa:1d:84:93:51:35:8f:34:ca:be:89:b2:25:e9:ad:
fd:8c:0d:86:09:19:37:eb:2b:e5:b9:df:24:a8:da:86:91:a1:
4d:7a:44:17:ed:6f:7e:8a:46:08:b1:ab:4f:47:1f:45:c6:86:
64:d0:4e:63:b5:6c:c0:a0:15:6b:d5:b3:8a:59:8d:f9:20:ec:
ec:9e:f4:78:72:aa:89:11:57:e7:56:1a:3b:e4:f9:95:54:2d:
5e:e6:40:a5:b6:a4:c0:25:b6:08:8e:03:2c:b1:44:b9:79:c9:
a7:73:bd:2b:92:17:a5:c2:a1:0b:0c:36:5d:dd:fd:f4:f8:ca:
4f:5a:48:0e:b9:9a:60:53:f5:f1:87:05:8c:22:2f:7b:83:94:
5b:4c:37:02:ec:45:1b:d5:7a:12:e6:f2:47:16:e0:3f:c1:11:
39:2a:e7:69:34:7f:f1:83:a0:ab:f6:f6:5e:ae:c2:96:1c:72:
3c:ac:c0:f1:5f:dd:fa:6e:e7:85:fb:3e:8b:33:2d:63:6e:db:
94:51:5d:c6:b7:4c:2c:d6:75:91:b8:30:da:85:33:46:b1:06:
ef:38:90:c1:b4:c6:ad:f0:a4:f4:69:8a:c5:21:df:ef:1c:0a:
f2:85:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 02:30:20 2025 by rpki-client