This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: uIpaJYOy1qFDo8fp2TnOwjXEU1fzmt3dLgxG6DSj4ng=
Subject key identifier: F0:FD:31:32:77:15:C3:C4:C9:EE:FF:FB:77:BE:89:7E:87:E5:41:47
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 019B5976F7F66F07C23E22E9C6C45F2CEF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 179C
Signing time: Fri 26 Dec 2025 07:02:07 +0000
Manifest this update: Fri 26 Dec 2025 07:02:07 +0000
Manifest next update: Sat 27 Dec 2025 07:02:07 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: 7xN4w3pifAxRYbVcEl6N+bjI1s0azwQPlFzoO7DEJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:76:f7:f6:6f:07:c2:3e:22:e9:c6:c4:5f:2c:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Dec 26 07:02:07 2025 GMT
Not After : Dec 27 07:02:07 2025 GMT
Subject: CN=f0fd31327715c3c4c9eefffb77be897e87e54147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:cd:7d:ea:8f:6d:7e:fb:55:00:29:2f:e7:
c2:19:b3:1d:86:17:ea:90:1a:56:57:88:62:29:2e:
83:02:1c:e5:c3:45:74:d9:5d:9a:6d:f5:00:a9:65:
e8:f5:8b:8f:aa:5c:08:15:39:17:a9:12:d1:08:4b:
76:05:b6:d6:0e:58:5a:0d:53:d6:a4:dc:a5:ed:44:
6d:3b:a0:f1:ae:bd:46:70:cd:28:98:c3:70:42:0e:
69:fa:01:31:67:63:33:87:f3:5d:ef:58:3b:38:9c:
42:3c:c0:01:a1:d0:1d:52:26:1c:19:ff:50:df:ef:
38:c7:a2:51:ad:9c:bf:56:25:06:ef:48:a7:c1:02:
b4:7c:33:1c:12:ec:ca:48:52:ab:d5:95:51:9d:69:
33:ed:1f:34:ed:91:d2:ee:eb:70:51:ab:74:ff:be:
a7:8b:13:80:86:fc:da:b2:f5:a0:7a:47:e1:ef:34:
51:03:7f:24:ca:8d:8d:70:36:62:b3:67:18:95:0f:
0e:fa:ac:23:7b:7f:6c:92:ae:d1:41:18:b4:14:1e:
a5:d3:cc:17:92:5c:04:27:47:52:de:3b:d9:78:04:
a7:c9:7f:65:3a:3c:41:04:41:c2:d5:52:d6:b6:e0:
30:e5:dc:1a:db:b4:02:04:73:fc:86:9a:6a:a3:7d:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FD:31:32:77:15:C3:C4:C9:EE:FF:FB:77:BE:89:7E:87:E5:41:47
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:b5:6c:8b:dd:f8:90:c0:bc:f3:f9:8e:8c:73:de:99:17:
c8:55:03:1c:39:a5:55:91:9f:a1:35:fe:99:9a:bf:cc:76:60:
5f:a8:08:fa:56:08:09:e2:c9:79:93:54:4e:dd:ac:97:45:41:
7b:7a:20:05:fa:8b:25:ee:3e:da:09:2d:a5:34:1c:a0:ce:49:
28:67:26:da:2d:8b:0d:7b:a0:04:91:1d:51:1c:8b:01:c8:a4:
27:0c:26:5c:36:fb:04:11:cf:e9:91:4e:87:f4:00:d4:2a:f8:
56:ff:5c:77:51:36:b9:ac:71:9f:6c:39:94:f4:16:5c:9a:71:
d7:29:c6:fa:bd:0f:a5:c4:a2:ee:c9:e1:cc:2f:20:7d:26:6c:
14:c0:a6:46:3b:27:db:80:5d:56:ab:db:35:46:56:b9:5f:b4:
f2:cd:af:e1:f1:e4:1b:b7:60:1e:10:7d:f7:96:0a:13:0a:a6:
b5:0f:ff:e4:4e:9b:14:1f:91:8c:ec:13:63:6e:25:ef:88:0d:
31:a7:da:2a:c8:85:3f:42:e5:1b:ad:b1:70:74:2e:62:b5:04:
b8:91:6c:32:9e:b0:39:ad:42:57:3a:ab:a8:48:55:e4:7c:55:
26:57:b8:e5:e5:cc:ba:d1:13:0c:64:18:35:fd:77:6e:ea:2c:
ce:b2:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:47:26 2025 by rpki-client