This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier: OzGeoV9L/9tKs+J8B/Bo0JwOxuTuxW+UHrYee1DRc5A=
Subject key identifier: AC:0D:12:92:4A:EC:2C:E4:BB:32:CD:8C:4D:74:F2:8A:75:90:BC:C4
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019AEFAD163D99D4D89575620E5684F959D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number: 0574
Signing time: Fri 05 Dec 2025 18:01:29 +0000
Manifest this update: Fri 05 Dec 2025 18:01:29 +0000
Manifest next update: Sat 06 Dec 2025 18:01:29 +0000
Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
3: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (hash: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=)
4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: wt8kxw0IrEPWmSkRRiVCDjBo2vuw5CHi47e+ghD6WMY=)
6: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (hash: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ef:ad:16:3d:99:d4:d8:95:75:62:0e:56:84:f9:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Dec 5 18:01:29 2025 GMT
Not After : Dec 6 18:01:29 2025 GMT
Subject: CN=ac0d12924aec2ce4bb32cd8c4d74f28a7590bcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:9c:43:0c:62:1b:bc:b6:7d:3a:ff:eb:b0:
4e:c5:46:71:28:da:a8:ab:af:c6:2f:1e:23:88:d2:
0a:e6:56:77:91:29:e2:a2:c4:50:0a:79:42:b4:45:
3c:37:fc:37:b4:f6:61:2d:47:b9:be:4d:17:ae:14:
2e:a5:95:0b:7d:60:cb:0c:72:cb:4b:ea:a6:bc:dc:
da:2d:a1:45:e8:5f:2d:a5:49:87:66:3e:be:3e:bf:
6c:83:cc:30:56:c7:e9:9e:31:a7:d1:65:06:f6:0b:
d4:4f:71:24:aa:a1:bd:24:ee:57:89:56:d5:a5:1c:
51:4b:a9:8a:14:21:66:b5:1e:8e:cd:11:17:f3:e4:
c0:b5:87:b4:40:1f:0e:70:67:2d:60:a3:0e:e9:77:
73:48:47:fc:03:67:7e:de:92:c3:fe:a6:b0:27:a2:
d4:ef:9e:c3:77:5e:34:c2:f7:b7:f3:cf:e8:ef:7a:
04:37:f9:77:a5:6e:3d:10:53:8c:93:d7:22:74:83:
55:e5:eb:be:e9:e6:d6:66:c6:58:33:c1:6c:dc:77:
aa:a9:81:8f:30:4b:cd:59:f7:d4:50:5e:f3:7e:3b:
f5:97:4f:39:db:ab:a0:9b:50:d0:fe:02:d7:ad:20:
01:a8:f8:d7:f4:f5:78:02:12:00:a8:4f:d6:fb:38:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:12:92:4A:EC:2C:E4:BB:32:CD:8C:4D:74:F2:8A:75:90:BC:C4
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:1e:95:06:b0:5b:85:7f:97:7a:f4:34:b6:b8:43:87:77:
83:1d:9b:dd:d2:f4:c8:98:e2:19:fb:38:a2:8e:4d:66:d7:43:
8f:90:59:21:dc:ed:70:d8:b6:c4:c6:a7:37:c2:f5:6e:00:4b:
9c:5e:c0:18:18:bc:34:54:49:5a:0f:92:e2:2d:21:5d:1d:97:
5f:c3:1a:50:8a:40:b0:c1:f1:10:0e:a9:02:90:3a:52:35:48:
09:21:a4:c4:45:63:32:ed:e1:14:bb:e0:67:38:93:40:e2:b8:
cf:27:fb:2d:65:c0:30:30:9b:81:ca:0c:fe:95:5f:d6:40:cd:
af:ff:90:ac:27:03:dc:a8:c8:06:bc:9e:9c:6b:76:5f:95:5d:
0c:00:93:12:c3:92:62:3e:b3:dd:6a:ba:22:cd:ce:90:2b:be:
b9:b4:47:a1:0a:5c:7b:7e:53:d8:c1:d6:99:d3:8e:e7:bc:69:
14:3d:b6:ab:a1:52:53:8c:3b:f2:2a:ff:e2:f9:d6:c4:c4:b3:
69:6f:d6:36:b5:6f:36:46:ce:6c:35:87:fe:c2:58:55:b6:09:
a9:15:bb:2a:04:31:df:1e:44:bb:43:75:18:f1:84:80:21:38:
8c:fe:ba:b0:5c:9b:e8:6e:d2:c7:3d:80:b9:c6:14:fb:7d:0a:
a2:7b:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:14:42 2025 by rpki-client