This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: rxfDNmUNTiHFwO6cIlcuyBvIkjQpGI0vijGdfOrQCvY=
Subject key identifier: 41:8C:36:0F:53:8D:51:07:BB:5F:88:11:49:D7:F6:F4:DE:85:4E:59
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019B1983F424EF8E5DA37E09CC0FCE6DAF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 177D
Signing time: Sat 13 Dec 2025 21:00:36 +0000
Manifest this update: Sat 13 Dec 2025 21:00:36 +0000
Manifest next update: Sun 14 Dec 2025 21:00:36 +0000
Files and hashes: 1: CU0pD-qyopGrF2gG1g9vsUEj3PE.roa (hash: 0vq62FNq9PmPpi5DYpzPDW7Ij6TgGimr0Wq2pd7Z3Os=)
2: ZWlEyMmdqJGSNqxwfiZSm70MebY.roa (hash: J3jPxKXZF3DeIN3lfslH24QMc9DgqTN2xea7MsxjKgg=)
3: ZwlANAaAmvWFJg4oN0Kigut0u8A.roa (hash: xCGLRl7E5Z55wWdT0lqlDrtOMIU0KHDV+L6PHOcX4k0=)
4: eQwhkUJDD3fHnBNUmTCO1wm_-Mo.roa (hash: BapbGy+3qttaGIgQRgRll0fuWWSygKB9RzxksoJwcro=)
5: la7bz71ihLeyogVuoQIY1GT3314.roa (hash: 5hafRGGQbIP56cRQdMYLUdF59or9sDzUcmPM82jh51E=)
6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: A1VyNXQURlfMUhoO1+lHZUuD3MudpcQhVT7RC8tRDqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:19:83:f4:24:ef:8e:5d:a3:7e:09:cc:0f:ce:6d:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Dec 13 21:00:36 2025 GMT
Not After : Dec 14 21:00:36 2025 GMT
Subject: CN=418c360f538d5107bb5f881149d7f6f4de854e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:9c:d7:44:cc:fd:6e:1b:d4:3e:91:57:7b:
69:0f:1a:6a:87:0f:ad:e4:8f:b9:53:70:23:e3:ad:
c1:d0:b9:a6:2c:44:95:5f:2a:22:56:60:94:95:06:
25:92:5d:fa:14:38:26:35:f6:86:f6:7e:ed:4c:93:
16:41:df:05:cc:bd:d5:2b:e1:11:2d:19:c1:d5:b9:
21:99:f5:e3:fe:53:30:78:4a:99:ec:dc:32:ee:49:
d0:05:dd:3e:da:f2:bc:84:e9:c2:ff:38:b9:91:ef:
d9:02:a9:f4:02:b0:48:c8:36:e5:16:b7:ed:c1:01:
7d:aa:3d:dd:e3:ea:59:00:d3:d4:20:e5:44:40:34:
b2:e0:ba:6f:1d:d3:e4:c4:32:80:28:77:5b:53:ee:
b9:0f:83:f9:87:a4:ca:01:2e:4f:0a:00:31:1c:13:
93:05:9c:1c:1a:d2:de:70:4b:8c:a4:ae:c1:54:61:
4b:75:80:f2:47:2a:b2:24:71:6b:a3:97:b5:90:76:
e1:22:2d:49:fa:99:34:a2:76:ae:3d:60:3a:d1:01:
cb:84:f6:e5:fd:24:c6:4b:67:55:61:64:1b:a9:0a:
b4:6f:4b:fd:43:e4:3d:e2:30:11:1b:8d:dc:9c:a1:
05:1f:be:80:83:fb:f6:57:19:91:b1:b2:7d:ec:0e:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:36:0F:53:8D:51:07:BB:5F:88:11:49:D7:F6:F4:DE:85:4E:59
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:23:fd:41:7c:9d:32:b4:ef:29:a0:fe:ba:b4:c2:5d:38:4e:
ca:10:eb:2c:b7:8a:2c:e9:e4:5e:55:72:c6:2d:34:e5:6b:31:
77:1f:25:2f:01:89:7f:bd:b3:a9:96:86:ba:6d:47:dc:81:f6:
df:29:1a:92:f5:7f:cb:d1:bb:a1:37:f1:07:b1:53:9b:02:89:
21:93:5c:19:6e:24:7f:6b:cc:db:a5:d2:b8:46:4e:7d:49:3e:
85:d3:c0:5b:e7:0f:b1:b4:6c:7e:37:59:de:0d:6f:d1:6f:6e:
1e:63:8c:f4:36:ab:75:b8:11:da:2c:3f:e4:d4:b5:d2:9a:26:
61:b6:53:5e:50:bd:1d:7e:47:3f:d0:c9:43:68:0e:36:3d:99:
ed:40:50:0d:ec:cc:1b:b4:c2:80:a1:57:6d:07:0c:36:e3:5c:
fe:30:f0:9c:12:c4:b3:8a:3a:9d:c0:51:4f:97:da:fc:8d:13:
c2:64:7c:ea:39:e3:18:a0:30:82:07:aa:b4:cf:a2:ee:a0:b1:
5d:61:45:57:5c:90:08:5f:d7:1a:89:66:44:42:46:f6:3a:53:
2c:35:55:c0:58:2c:58:37:5b:03:f6:55:fb:bc:f9:0b:2d:0f:
55:08:a8:5e:3f:3f:4f:a1:a4:5e:33:e6:a2:db:92:eb:24:6d:
67:31:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:56:13 2025 by rpki-client