This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: ADEttOLRZhiB8frKgVcTfI4KuZKs9dU3Rp8aENu9VUw=
Subject key identifier: 14:E9:62:69:55:48:3F:E4:33:70:55:A7:ED:DF:D9:5D:77:C7:9A:A8
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019B5B2D44F45D7F4BA2F5987C36AAB35D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 179D
Signing time: Fri 26 Dec 2025 15:00:51 +0000
Manifest this update: Fri 26 Dec 2025 15:00:51 +0000
Manifest next update: Sat 27 Dec 2025 15:00:51 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: E9LjgRS3tyIxsztj73so4GV/3yJUGM1XA2OQtrQrj+U=)
2: jtLIKZheIJbw9TwyWl-fpzVLvnE.roa (hash: IhEUym2kurgLTl3Vw4ZlxqTomcA/YLaDzPHSwrVgpmI=)
3: pIC-whUriXBZUStrVpAYvl470Dw.roa (hash: P8U8HyziEmzl2lHRrN+KrJgIgKMcwZzkigHQuPfUZ+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 11:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5b:2d:44:f4:5d:7f:4b:a2:f5:98:7c:36:aa:b3:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Dec 26 15:00:51 2025 GMT
Not After : Dec 27 15:00:51 2025 GMT
Subject: CN=14e9626955483fe4337055a7eddfd95d77c79aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:97:d8:72:18:25:bd:7b:ea:6a:e0:91:d2:
cc:c6:4a:04:f4:cb:8c:ab:42:77:88:af:b6:75:5b:
b5:4c:f2:ed:a1:98:8c:af:a9:da:c7:f3:e1:36:55:
3b:40:1f:25:9b:e8:16:53:fa:c8:02:27:bc:ec:f9:
0b:26:ce:fd:6d:5c:e0:61:98:ed:a7:ab:65:21:63:
32:27:8e:bb:75:85:03:d7:f1:f5:a9:0c:13:5e:58:
7c:6f:2b:ad:43:1e:ca:bd:69:f9:b0:c0:50:4a:4c:
a6:12:a9:15:cd:a7:a7:a0:23:0f:fe:b4:37:d2:c9:
87:29:f1:e3:db:f6:90:48:9c:d6:eb:15:15:a2:0b:
f4:1a:e0:fd:cf:fd:c9:62:8c:ea:68:f8:e6:2b:26:
c4:67:fb:66:9c:0b:3b:f7:fd:8c:1c:71:66:8a:ee:
c7:e3:29:7c:60:93:2e:bd:e8:0a:66:1b:95:ab:ce:
30:76:80:f1:27:20:5c:50:78:4d:1c:5d:cd:62:24:
bf:4d:dc:40:81:78:5e:7e:55:f3:3f:f2:f4:b0:6c:
60:ad:10:7c:95:11:a5:0f:57:23:79:18:6e:ac:f5:
38:d0:56:12:4a:f9:4a:c0:bf:ef:55:b6:fd:22:60:
64:84:d3:39:b6:b3:d1:e5:c8:4a:ae:75:5b:b3:5a:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:62:69:55:48:3F:E4:33:70:55:A7:ED:DF:D9:5D:77:C7:9A:A8
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:5f:d5:24:e2:6c:15:42:2d:af:a7:60:24:fc:2d:61:5a:
bc:3f:cc:74:bf:13:92:ed:51:56:76:83:3d:cd:6a:d5:99:14:
e9:85:8d:04:75:8f:8b:e7:98:5b:a6:c1:93:fb:05:3b:b7:89:
34:1f:db:53:67:09:34:e6:6c:84:9b:bd:a6:4f:8f:3d:02:d3:
6c:89:57:eb:ea:8d:9b:38:be:c6:a2:93:d4:de:29:1c:05:ad:
80:e4:4b:3d:c4:e8:18:48:11:6b:61:2d:57:6d:5b:64:8a:7b:
89:c0:78:94:dc:e4:d7:32:50:1d:a3:5b:5f:6b:5d:0a:b4:67:
4e:ec:b9:8e:4b:5f:ec:53:dd:47:aa:9d:90:56:13:ef:55:3d:
01:55:4f:ac:a9:84:20:79:3e:23:3d:1c:3d:fc:71:fe:84:fe:
61:f7:44:ad:35:3c:3c:26:14:49:09:cf:47:1a:72:61:c6:74:
19:74:20:99:5c:08:99:ad:6f:fc:d4:c6:cd:d4:b9:b9:c4:85:
d6:e7:13:5b:ef:f1:ef:7b:14:da:de:51:9b:0d:89:be:5c:41:
6c:8a:c4:12:94:2f:c9:6f:b4:82:99:b7:00:cc:da:1d:10:8d:
02:a3:2c:58:f6:ca:dc:35:7f:63:ca:7e:51:54:14:af:7c:a3:
13:3d:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:44:14 2025 by rpki-client