This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: TiMEvHOxpI84SWDpF7kFTEfotkX+V0LxGP4WmRM0/CU=
Subject key identifier: 66:C1:85:66:6E:DE:9E:29:20:54:8B:B1:11:65:A8:49:24:17:0C:42
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019B25F6C1AB05BE908DDF749D9B2B01377B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 178E
Signing time: Tue 16 Dec 2025 07:01:26 +0000
Manifest this update: Tue 16 Dec 2025 07:01:26 +0000
Manifest next update: Wed 17 Dec 2025 07:01:26 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: y3S+i9VF8/saoprok3FJteO4GWJChVPws1NovUdFkG4=)
3: 9ksiRwLGxasaFn_PBa_nWxdqjwM.roa (hash: iU0CGBVoj7MznTHpqczxH9QKsAVcN7PumbsdzFuKdeA=)
4: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
5: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:25:f6:c1:ab:05:be:90:8d:df:74:9d:9b:2b:01:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Dec 16 07:01:26 2025 GMT
Not After : Dec 17 07:01:26 2025 GMT
Subject: CN=66c185666ede9e2920548bb11165a84924170c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:33:37:1c:78:27:d3:41:64:86:62:dc:d6:
42:8f:8d:8c:d5:1c:08:63:d8:cb:7e:be:e1:30:29:
c2:85:a6:1e:dc:0d:76:cb:dd:f4:f0:76:a5:bb:ae:
4b:df:c0:72:e9:e1:5d:3f:96:86:e1:08:54:6b:92:
96:32:69:22:68:fd:f1:ee:8d:cd:93:3d:53:2a:72:
b2:4b:6b:2d:be:89:93:2e:f3:d9:a4:b1:2e:e2:6d:
b0:61:c7:d0:79:dd:68:fc:c7:da:f1:9c:41:e6:d4:
ba:fe:e7:77:19:9f:2e:a7:91:07:54:bc:f5:91:cd:
c1:e4:0d:e5:14:4b:5d:23:2f:17:7d:b0:46:a3:d8:
14:ef:16:a1:62:c1:6d:69:97:ac:7d:ce:ae:f2:77:
43:f2:d3:13:a4:5d:71:3d:28:ae:a6:71:c0:93:ce:
7a:fd:03:6b:7c:8e:c6:26:8c:3b:b8:4d:1e:e0:b2:
30:63:4d:2a:73:33:b9:bc:6e:8c:76:40:9e:d7:77:
ad:6c:ce:85:31:50:32:f5:8f:af:19:1e:37:28:10:
e9:d8:3a:31:f6:a4:36:cd:1c:dd:0e:90:ea:a8:ea:
c4:20:26:b6:90:b4:ec:0d:57:03:14:2a:72:56:df:
c5:2e:76:d0:20:7f:00:d8:b0:8c:8a:89:1b:dd:3e:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:85:66:6E:DE:9E:29:20:54:8B:B1:11:65:A8:49:24:17:0C:42
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:f1:f3:50:a8:78:f9:03:ba:ba:a4:89:fc:8e:80:d9:6a:
a8:e2:eb:70:06:80:e2:8c:5a:b7:11:e2:bd:da:72:eb:6b:d2:
cc:c1:3a:55:05:05:1a:1c:4f:65:f3:09:95:c6:5c:5a:ee:ce:
06:62:67:ae:68:27:2f:d7:a4:02:7d:cc:6c:00:ab:c9:07:9d:
3c:40:7d:68:fb:e9:55:d0:0e:fc:63:da:43:47:34:17:d4:ac:
0a:6d:c9:31:a4:5b:a8:c5:15:56:7f:38:23:bc:91:8b:25:3b:
11:eb:91:f9:a2:20:1b:72:bd:78:2a:17:d1:ef:c5:48:51:a0:
7c:b8:7c:dd:33:bf:5e:ad:fa:7f:a3:42:55:ed:a7:e5:d8:cf:
44:88:e9:0d:c8:81:a8:44:78:49:6e:ac:de:29:0c:2f:90:3b:
0b:fd:53:e9:46:c3:ea:c6:6e:68:cd:35:70:75:0c:bc:33:62:
51:39:b2:59:b3:be:10:9f:d9:02:a0:76:52:5e:ca:79:91:2d:
5a:4e:4f:43:f3:1b:e4:ba:71:5d:7a:ec:b3:b9:dc:57:3c:c9:
9c:70:9a:50:60:ce:c4:5f:93:c2:e5:bc:34:7f:87:c6:e2:d2:
60:f4:f4:73:5c:01:05:3f:32:0d:0e:ac:af:e3:cb:2c:c6:39:
47:0e:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:38:58 2025 by rpki-client