This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier: m9XSR78PIJcqjNKOyOFaiiHw92DY0xH7ZD3GWF0VL1E=
Subject key identifier: EB:00:B7:B9:C9:47:65:70:D2:C0:4A:B0:01:A6:AB:8C:46:F8:68:06
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019B07B55E77E96225ADAF9A625A96B6B5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number: 179F
Signing time: Wed 10 Dec 2025 10:01:25 +0000
Manifest this update: Wed 10 Dec 2025 10:01:25 +0000
Manifest next update: Thu 11 Dec 2025 10:01:25 +0000
Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: uG5VpBS0Eo0ifpnnHm1TDErepWx8VOV20gpMdGllwKw=)
2: 2Q7Citj0p3OdcVl7uqhsISED7cM.roa (hash: E8M0IO3Gnci/Jg+ekOq1tdi+rV0u7bvfLxQV6E+5KVA=)
3: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=)
4: 4LD3RBJhF1EFVJ9oGeuCVHP_8UE.roa (hash: +FGSXfetsw90djLhX8M4w7oZH7rHAR6iFD1Yl6CL8z8=)
5: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=)
6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=)
7: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=)
8: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=)
9: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=)
10: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=)
11: rY3YaEfNR8aK_Auk0z3q4MtQKGY.roa (hash: n8nvB0B+rc4j1I8LugdLmK4QQWr+nH8/CQl43jdxd20=)
12: y5m_rHh94hm7s_roT6tgjV0bYFM.roa (hash: 4v/VMYzi1Xi6KW+Q8k5KPuzBpu8zE8jLazu2ptlLL50=)
13: yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa (hash: R6sSwar2+yL3t8+JjWS9YzWsgxd6mJctsAx8UQoEU1U=)
14: ysUfI3GWZpaKyJEKnCEamSfyZE0.roa (hash: xIeKQUYqxB/N59SOlkm9vtcrQRRy7G3fg//ycDeAy7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:b5:5e:77:e9:62:25:ad:af:9a:62:5a:96:b6:b5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Dec 10 10:01:25 2025 GMT
Not After : Dec 11 10:01:25 2025 GMT
Subject: CN=eb00b7b9c9476570d2c04ab001a6ab8c46f86806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:05:f5:c8:4a:d0:f6:9d:2b:40:05:93:0b:
69:f1:d7:ec:2a:61:da:37:12:d4:b4:a9:ec:11:09:
e8:90:5d:fe:e3:5d:a5:71:7b:e3:3b:6d:1f:8e:96:
84:d1:78:64:f1:7c:2f:df:21:cf:c5:f7:03:4b:83:
8f:44:cd:18:4f:a5:84:4e:2a:00:d6:04:90:09:99:
e3:d8:12:a8:fb:b1:9f:39:ab:92:b6:35:62:08:d8:
3c:a7:da:4f:e0:4e:c6:fd:85:eb:2c:b4:c7:97:60:
06:48:3d:13:75:26:6f:db:5f:65:68:24:7e:d7:f1:
e7:c2:c5:39:a5:c2:c8:c9:46:80:c5:0d:60:cc:0f:
ab:3c:a9:d8:39:4d:b1:22:86:40:68:a9:6b:c1:9e:
ce:2c:07:bb:60:23:fa:f3:0e:9f:ce:ea:3b:a4:05:
a9:ad:70:20:a3:f0:2d:ad:b9:75:4c:69:31:7a:01:
32:e5:41:c0:46:61:d4:d1:5a:be:41:58:3c:9f:e0:
de:86:3b:49:40:9e:ea:eb:d4:8e:8b:9a:99:8d:6c:
41:47:f1:8a:f1:a2:c3:5a:2b:ae:d2:e7:68:2a:e4:
16:f5:03:87:12:b4:85:39:70:c4:74:16:b6:8c:a0:
cc:2f:ab:5e:0e:62:e7:f8:f7:f1:a8:93:50:00:78:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:B7:B9:C9:47:65:70:D2:C0:4A:B0:01:A6:AB:8C:46:F8:68:06
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:25:eb:dd:e0:eb:7e:97:fd:28:32:e2:b6:3d:55:27:1c:
3f:5c:1e:a4:99:35:bd:7f:e5:1e:68:45:a3:d6:e1:fc:ea:62:
d7:d1:34:c7:c8:15:7d:4e:fd:62:00:f4:92:42:8a:94:37:16:
2d:2f:7d:0a:2d:31:59:73:59:b2:80:12:be:44:8b:7e:db:d1:
19:c1:de:66:f3:10:28:a6:de:03:53:ef:c6:a9:35:7d:ab:c0:
6c:7b:14:9f:ff:dd:34:44:aa:db:5e:a4:c1:1d:79:42:84:b7:
b0:b6:34:c8:b4:ce:27:6b:06:28:08:d7:17:ec:87:94:47:a3:
7c:c8:52:76:1b:1c:0d:ca:7b:94:be:d0:27:d4:99:1c:5a:52:
71:87:c8:3d:0c:85:4f:17:da:43:bd:0b:ae:95:89:29:74:eb:
aa:6b:e2:70:eb:21:87:2b:d5:67:6c:17:4b:c6:f6:c2:07:d6:
86:d2:70:b8:31:96:c0:ab:f9:f1:96:07:75:13:c4:22:4a:ef:
56:04:a9:c6:12:b8:b0:43:82:14:fc:15:9c:b0:5f:7c:02:21:
2b:01:5c:9d:23:5a:df:02:87:f2:04:3a:12:ee:7d:51:94:51:
aa:34:93:2d:4f:27:5f:01:30:7d:60:73:4e:19:83:1a:cc:44:
a0:1f:85:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZsHtV536WIlra+aYlqWtrWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjUxMjEwMTAwMTI1WhcNMjUxMjExMTAwMTI1WjAzMTEwLwYDVQQD
EyhlYjAwYjdiOWM5NDc2NTcwZDJjMDRhYjAwMWE2YWI4YzQ2Zjg2ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNgF9chK0PadK0AFkwtp8dfsKmHa
NxLUtKnsEQnokF3+412lcXvjO20fjpaE0Xhk8Xwv3yHPxfcDS4OPRM0YT6WETioA
1gSQCZnj2BKo+7GfOauStjViCNg8p9pP4E7G/YXrLLTHl2AGSD0TdSZv219laCR+
1/HnwsU5pcLIyUaAxQ1gzA+rPKnYOU2xIoZAaKlrwZ7OLAe7YCP68w6fzuo7pAWp
rXAgo/Atrbl1TGkxegEy5UHARmHU0Vq+QVg8n+DehjtJQJ7q69SOi5qZjWxBR/GK
8aLDWiuu0udoKuQW9QOHErSFOXDEdBa2jKDML6teDmLn+PfxqJNQAHiZOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOsAt7nJR2Vw0sBKsAGmq4xG+GgGMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx
NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4kl
693g636X/Sgy4rY9VSccP1wepJk1vX/lHmhFo9bh/Opi19E0x8gVfU79YgD0kkKK
lDcWLS99Ci0xWXNZsoASvkSLftvRGcHeZvMQKKbeA1Pvxqk1favAbHsUn//dNESq
216kwR15QoS3sLY0yLTOJ2sGKAjXF+yHlEejfMhSdhscDcp7lL7QJ9SZHFpScYfI
PQyFTxfaQ70LrpWJKXTrqmvicOshhyvVZ2wXS8b2wgfWhtJwuDGWwKv58ZYHdRPE
IkrvVgSpxhK4sEOCFPwVnLBffAIhKwFcnSNa3wKH8gQ6Eu59UZRRqjSTLU8nXwEw
fWBzThmDGsxEoB+Fmw==
-----END CERTIFICATE-----
Generated at Wed Dec 10 11:52:41 2025 by rpki-client