This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File: 7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier: iIukJkrFvoSpQQViSHhzmRTdvOzPiYi3jJ1X8BMWg/E=
Subject key identifier: 6E:8F:B3:07:16:85:5B:72:A8:AE:FD:69:9E:25:38:A0:AA:50:BE:7A
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019B074782F073C01787D2C1AF2B59B35E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number: 176C
Signing time: Wed 10 Dec 2025 08:01:25 +0000
Manifest this update: Wed 10 Dec 2025 08:01:25 +0000
Manifest next update: Thu 11 Dec 2025 08:01:25 +0000
Files and hashes: 1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: XonzGddN7C4c7tklEP95ydgzJX572zSmGyzj+7l37TY=)
3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:47:82:f0:73:c0:17:87:d2:c1:af:2b:59:b3:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Dec 10 08:01:25 2025 GMT
Not After : Dec 11 08:01:25 2025 GMT
Subject: CN=6e8fb30716855b72a8aefd699e2538a0aa50be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:6a:d0:e3:4b:54:fb:21:93:60:c9:ce:de:
7d:8f:8e:7f:c5:63:3c:a0:3c:1e:f5:d6:80:85:63:
e1:6d:e8:e0:5f:41:ef:f3:db:a8:84:c0:b2:df:d8:
b0:72:f0:cc:09:0c:d8:b4:70:94:82:89:25:be:40:
2b:a3:5c:76:d9:43:09:93:ff:04:59:99:f9:dc:3d:
d3:d9:bb:44:bc:59:10:7d:7a:20:2d:52:96:33:2a:
16:c4:c9:5d:31:38:a4:c9:75:60:7b:9e:82:7d:0e:
7a:de:97:9e:a7:bc:cb:4b:35:19:07:c1:8c:a3:aa:
32:62:e5:4f:f6:b6:3e:84:41:73:23:a3:8e:41:23:
00:86:23:cf:bb:74:08:a2:0d:12:a9:43:93:e5:9e:
0e:f3:e9:50:6a:9a:2f:1c:7f:62:e3:f0:1d:50:c6:
aa:45:50:08:8d:bf:80:3d:63:66:15:d3:52:69:e0:
0b:64:4c:0b:5a:3d:9e:c7:cb:af:b0:b2:b2:22:16:
e1:e4:11:b6:79:6a:7f:43:fe:7c:63:cc:2c:c7:72:
5a:35:db:6e:b0:4c:f3:20:1b:a0:0a:09:d6:11:8c:
22:d8:3a:39:10:6f:52:d9:7b:40:c7:73:04:71:c3:
43:e7:52:7f:89:08:b0:e8:af:48:08:7e:e0:fa:a8:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8F:B3:07:16:85:5B:72:A8:AE:FD:69:9E:25:38:A0:AA:50:BE:7A
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:64:a8:c4:a9:bf:e7:c7:95:00:76:7f:38:f7:95:8c:5b:98:
c9:9c:09:3e:ce:4a:4d:ef:a1:e6:44:0c:84:f3:47:6f:fc:ff:
82:26:a8:37:43:1d:82:85:24:a9:c2:9c:b8:3e:ff:2b:f5:dd:
4e:30:0f:9e:14:14:f4:37:09:5c:20:5e:e9:ff:97:da:fc:13:
0e:f5:1a:95:cb:0b:3d:2f:f2:f0:32:84:6f:f0:a7:d2:08:38:
ee:9a:ae:22:99:87:ad:18:4b:6e:d0:81:35:53:1d:0d:45:c9:
ed:8d:ff:c2:ce:e2:65:ac:63:d2:67:96:b6:24:03:e6:7f:de:
9b:c8:9c:5f:9f:95:b1:1f:0a:6b:e8:b8:47:1c:05:99:5b:96:
5b:1f:d8:b0:bb:b8:61:0f:12:30:2f:9c:c5:c6:fe:26:cc:a1:
80:73:d0:09:59:1a:8d:0a:1b:6c:9a:91:e0:65:d2:b0:d1:37:
8d:b0:c9:b1:d8:c0:60:63:36:35:c2:f1:44:ff:c5:74:f6:38:
c1:a5:c1:7b:72:9c:86:ef:d0:40:21:2d:72:79:50:8d:d1:a9:
5f:b3:87:78:07:a2:03:ca:ad:3e:87:45:38:5d:1a:51:bf:b6:
cc:b3:a2:f3:66:fb:2d:a7:d6:87:ba:bf:fb:a1:7e:6e:9a:25:
1c:94:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 13:36:22 2025 by rpki-client