This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: eBr7+3lVWk5zrcmKpCR0Dk5TqOIYc0FGiNKdxErzfyY=
Subject key identifier: F0:B1:0D:1E:B7:91:64:13:22:F4:DF:B2:55:F8:9A:81:8D:6E:75:D3
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019B439309D48B0EF4C2E464D1C625BFA2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 06CB
Signing time: Mon 22 Dec 2025 01:01:08 +0000
Manifest this update: Mon 22 Dec 2025 01:01:08 +0000
Manifest next update: Tue 23 Dec 2025 01:01:08 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: Ko8SdsTqyMQ65IEgVfWijIhnV/MmKT60CYDY0/Y/W2o=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:93:09:d4:8b:0e:f4:c2:e4:64:d1:c6:25:bf:a2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Dec 22 01:01:08 2025 GMT
Not After : Dec 23 01:01:08 2025 GMT
Subject: CN=f0b10d1eb791641322f4dfb255f89a818d6e75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:68:aa:c9:c3:42:eb:d7:fd:07:14:d4:4f:
83:cc:f7:47:b7:5c:2b:86:80:93:c7:8f:d1:c7:e6:
71:84:a7:84:17:02:86:82:6a:76:f0:4f:1b:c1:c1:
4b:0c:28:0d:b2:a2:35:2a:78:0d:c6:67:18:97:70:
2e:f0:d5:8f:bd:c4:86:60:1c:1c:cf:f1:0f:af:92:
6e:75:0d:9c:e4:0b:ac:12:f1:ba:94:e4:46:90:66:
d3:d5:e0:04:c0:42:61:2b:4f:96:1c:d8:ed:73:05:
c4:a4:16:75:2c:0d:1f:63:2c:fa:c7:79:21:eb:9d:
ee:fe:10:d6:4b:fc:4f:5b:9c:8b:26:d3:df:d7:03:
48:38:c6:e9:b7:37:10:8e:1c:bd:45:ff:15:cd:52:
4f:4a:3a:16:9d:d4:97:a6:28:5d:6b:1d:30:dc:93:
c8:7e:a6:71:62:65:da:91:c8:ba:cf:5e:79:99:9d:
8a:48:15:95:58:79:bb:cc:26:22:71:80:14:9c:7e:
ce:4e:a4:a6:c6:36:b0:78:24:66:12:09:89:cc:b5:
f6:48:12:c3:d7:1d:35:b5:f3:5f:b1:9b:1b:dd:85:
4b:b1:cf:93:29:b0:c2:1d:92:7a:0d:dc:cc:b1:76:
25:c1:b4:dd:d8:bc:af:cc:d6:0a:f4:fe:04:14:a5:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B1:0D:1E:B7:91:64:13:22:F4:DF:B2:55:F8:9A:81:8D:6E:75:D3
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ab:56:5a:1d:80:d1:f2:c6:0f:40:d7:6b:5f:45:d7:a0:59:
c2:cd:1b:73:60:d8:2a:ed:2e:b5:41:60:08:b6:78:3d:35:e2:
4d:6a:22:df:90:b0:8a:ff:33:72:e7:d2:f7:74:c5:34:27:ed:
8a:ea:fd:69:8f:b4:82:af:d7:7d:44:5e:33:84:41:3e:ec:8a:
a8:74:dc:0b:ba:8b:2a:c8:2c:da:cb:5d:59:38:ac:1c:68:94:
25:64:2d:75:5c:35:45:ea:fe:cd:6c:51:f3:e3:b5:0d:37:f2:
b1:ef:cf:df:04:2c:59:ab:d1:cb:64:dd:d5:c5:bc:92:a6:ba:
30:4e:fd:1c:25:9b:da:f4:37:eb:29:d9:75:ce:a1:68:62:fd:
3e:b5:48:5b:fa:bd:08:bc:ba:68:f5:49:53:31:f6:45:b0:08:
d8:c2:67:e1:d9:97:0c:33:0f:9d:75:db:65:4b:d0:62:d9:89:
ff:03:d1:1d:72:0b:46:15:10:3a:6a:7a:af:e0:8a:c7:66:9d:
31:d5:b7:f5:e8:f1:96:17:a9:02:dc:d7:82:0b:48:88:a0:76:
33:88:36:f4:54:3a:85:e2:62:2b:eb:29:5c:f1:54:47:0b:55:
d5:80:b3:47:2f:f1:50:58:40:3a:10:cc:ca:90:9e:85:08:d9:
10:d8:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:48:43 2025 by rpki-client