This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: Df0lzdfut17AOpyCupOdO7E+UwcvV+2StXn1cnG28R8=
Subject key identifier: 4F:61:2D:1C:64:5B:18:C8:18:3B:F2:DA:79:7A:18:4C:86:C0:89:F7
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 019B0D8064AD16C39247914270930A291E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 177D
Signing time: Thu 11 Dec 2025 13:01:16 +0000
Manifest this update: Thu 11 Dec 2025 13:01:16 +0000
Manifest next update: Fri 12 Dec 2025 13:01:16 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: DgN6OY1ovOdn8e6HYMk3jTZErwlyzK5PiK+mlr3v6uU=)
2: LOmlB_bYvUhvImzOEpyfmmb13tA.roa (hash: HMIbD2TeO88jNncglQPQEr9MPZGx95F03Z4iEkE8RIQ=)
3: owMuSAzaSSpr7jsUSC0mWrVKDU4.roa (hash: XKmvqtHVDmpyZyY4yBF/VjW7n8WfcDAr9Yhc2CLZYr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:80:64:ad:16:c3:92:47:91:42:70:93:0a:29:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Dec 11 13:01:16 2025 GMT
Not After : Dec 12 13:01:16 2025 GMT
Subject: CN=4f612d1c645b18c8183bf2da797a184c86c089f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:dd:93:f7:e4:a5:62:4b:1b:47:17:d4:fb:
7e:08:aa:d9:ab:d5:d2:ad:6a:8e:3a:b2:51:5f:bc:
55:2c:2d:29:59:79:79:5f:11:56:a5:1d:78:8b:69:
17:93:3d:d3:38:6b:eb:29:ad:cc:1e:16:8a:38:07:
1f:2c:21:aa:f3:92:4b:10:ad:96:07:fb:90:6a:92:
e5:c7:e9:0d:6d:9f:a1:63:76:85:ee:19:21:83:3e:
91:e3:37:4a:da:e6:30:82:28:f3:ef:0d:ce:9e:b2:
80:5d:c2:dd:f0:06:d9:68:e3:07:8d:e6:b2:31:a1:
b2:1d:3c:f6:c2:9e:d4:df:11:92:b8:aa:09:87:5f:
a5:16:10:3c:fa:f5:1f:59:1f:37:4f:71:5b:90:ed:
e7:32:36:1d:2c:25:7c:94:f5:0d:c4:1e:db:2b:be:
8f:58:98:8a:21:23:2f:9f:b7:ca:6a:01:e3:72:72:
af:d4:33:ff:f4:92:d8:4c:3f:6e:6f:03:99:be:55:
63:7e:d4:7b:d0:1d:5f:f0:f0:47:73:a6:02:1f:58:
ee:8e:3c:e0:a0:1a:cf:23:6c:23:30:e6:9e:ef:e8:
e8:5e:c3:4d:9a:c4:1c:d9:ed:cd:58:c9:b8:b4:d0:
a3:2a:09:39:c7:98:63:fb:e3:57:cc:9f:8f:6d:2a:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:2D:1C:64:5B:18:C8:18:3B:F2:DA:79:7A:18:4C:86:C0:89:F7
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:71:74:5b:a8:02:19:3a:35:2a:07:57:2e:f0:6d:b2:3c:11:
3b:01:14:fe:39:1e:a8:b2:4f:c5:ab:ae:f9:c1:ea:84:cc:d0:
92:44:9d:cc:a2:e9:c7:b2:c9:c3:65:f0:d6:bc:5f:e6:eb:f2:
94:58:be:d4:7d:df:0a:13:37:96:07:dc:1a:ad:13:a4:9c:df:
79:04:4a:c9:44:9a:56:59:67:15:2c:31:97:49:3a:a1:91:b9:
28:ec:bf:8b:0a:63:ac:09:81:a4:b4:57:5e:fa:67:6f:de:58:
37:5f:44:40:23:ad:59:8e:6f:0c:77:94:73:e8:e0:2e:50:d3:
7e:10:58:dc:3e:d9:87:ce:80:43:8d:2b:6a:31:a3:6f:33:06:
4d:f3:fb:92:32:fe:90:5c:72:20:70:1a:ec:2e:87:21:09:0a:
36:7f:2c:d6:1f:98:89:c5:cd:96:99:0a:ad:73:58:21:eb:a5:
f7:79:5d:57:53:8e:85:f9:f3:87:57:91:5c:d2:79:87:42:7a:
d7:ac:99:c4:bd:45:3b:26:63:3f:d2:ed:32:6c:5d:0e:8f:3f:
96:a7:2e:f0:a6:50:5c:69:1d:71:b8:07:d5:29:cc:43:13:cb:
19:19:24:b4:af:e0:ae:c3:3f:13:24:a7:55:47:82:6e:5b:8e:
0e:c0:44:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsNgGStFsOSR5FCcJMKKR4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWQ3NjNiNDllMDI0YTdiNmExOWVhZjdkZmI5ODkxMWE5
Yzk0YzgwHhcNMjUxMjExMTMwMTE2WhcNMjUxMjEyMTMwMTE2WjAzMTEwLwYDVQQD
Eyg0ZjYxMmQxYzY0NWIxOGM4MTgzYmYyZGE3OTdhMTg0Yzg2YzA4OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ/dk/fkpWJLG0cX1Pt+CKrZq9XS
rWqOOrJRX7xVLC0pWXl5XxFWpR14i2kXkz3TOGvrKa3MHhaKOAcfLCGq85JLEK2W
B/uQapLlx+kNbZ+hY3aF7hkhgz6R4zdK2uYwgijz7w3OnrKAXcLd8AbZaOMHjeay
MaGyHTz2wp7U3xGSuKoJh1+lFhA8+vUfWR83T3FbkO3nMjYdLCV8lPUNxB7bK76P
WJiKISMvn7fKagHjcnKv1DP/9JLYTD9ubwOZvlVjftR70B1f8PBHc6YCH1jujjzg
oBrPI2wjMOae7+joXsNNmsQc2e3NWMm4tNCjKgk5x5hj++NXzJ+PbSoRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9hLRxkWxjIGDvy2nl6GEyGwIn3MB8GA1UdIwQY
MBaAFO+ddjtJ4CSntqGer337mJEanJTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzct
MDg3MGU2NTk2NDViLzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzctMDg3MGU2NTk2NDVi
LzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3F0W6gC
GTo1KgdXLvBtsjwROwEU/jkeqLJPxauu+cHqhMzQkkSdzKLpx7LJw2Xw1rxf5uvy
lFi+1H3fChM3lgfcGq0TpJzfeQRKyUSaVllnFSwxl0k6oZG5KOy/iwpjrAmBpLRX
Xvpnb95YN19EQCOtWY5vDHeUc+jgLlDTfhBY3D7Zh86AQ40rajGjbzMGTfP7kjL+
kFxyIHAa7C6HIQkKNn8s1h+YicXNlpkKrXNYIeul93ldV1OOhfnzh1eRXNJ5h0J6
16yZxL1FOyZjP9LtMmxdDo8/lqcu8KZQXGkdcbgH1SnMQxPLGRkktK/grsM/EySn
VUeCbluODsBEKQ==
-----END CERTIFICATE-----
Generated at Thu Dec 11 23:58:06 2025 by rpki-client