This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File: 29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier: 0+GAEAd3Pz8S8IkkLrGqUUTSaBOYcvOxp5vasxbmq04=
Subject key identifier: 21:22:F4:78:0C:E7:6F:AB:74:90:2A:0F:EC:F6:82:DB:B1:8A:74:AC
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 019B3946768ED0160F405B70D259C0BB26F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number: 1795
Signing time: Sat 20 Dec 2025 01:01:17 +0000
Manifest this update: Sat 20 Dec 2025 01:01:17 +0000
Manifest next update: Sun 21 Dec 2025 01:01:17 +0000
Files and hashes: 1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: MgTXYsrUQ9DMWPQy5EM99OzDkfnrdH3pcL/eFH4acCA=)
2: Bx5AqFrmCEvvpg5PP6G3iYi6cm8.roa (hash: nv+50RjE0P7RZsHAtUfv4vKeiING47CC1niIjtZ9NmE=)
3: EjiEhqCQfFeJxheh78DjOW0HnX8.roa (hash: xMjHQVoybWNabo3SxaU+I1LoAYBSZrLhM+vfUEw6Ma8=)
4: gmpsE3gYpq4JCSohIVHDm3a0vAc.roa (hash: UIxgMbyZxswMhLzYSeqRYLHgjf+FlKpy5d7Je9K3bz8=)
5: hsQv-_pPjXxEs3KS3Yli7KkGY8s.roa (hash: hNWKluVfWlyL1Lj4BF60xi3YP+tHJFMq6o5hVtlALzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:46:76:8e:d0:16:0f:40:5b:70:d2:59:c0:bb:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Dec 20 01:01:17 2025 GMT
Not After : Dec 21 01:01:17 2025 GMT
Subject: CN=2122f4780ce76fab74902a0fecf682dbb18a74ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:41:bb:54:6c:71:e8:28:21:9e:aa:29:c0:
4e:89:bb:fc:07:86:91:3e:04:ae:26:c5:ae:60:78:
c9:83:6f:b4:14:96:58:ed:8a:0e:96:d1:98:fc:22:
a1:31:c8:46:66:b4:f5:89:3c:e9:3a:35:f3:db:06:
87:cf:54:4d:01:2d:73:84:ad:d4:d4:f2:86:4d:7e:
60:db:76:47:9a:cb:e4:2f:2e:db:09:10:11:53:5a:
d3:02:b6:b5:4a:8e:23:9f:07:ce:ae:8e:19:ce:02:
32:49:35:a8:cd:7e:40:40:8a:48:2e:80:90:96:ff:
02:0f:9c:da:f7:5b:e0:1d:58:7c:53:f3:f0:5d:a8:
72:d9:7d:c9:94:b9:5a:e0:59:2f:c4:e2:aa:d5:25:
f6:a3:31:d4:4a:03:70:85:c7:99:d1:d7:70:e9:04:
17:a1:24:c2:56:5d:5c:2d:23:89:8c:4f:51:45:13:
1b:d0:7e:75:99:9d:42:d2:2a:c2:d8:ca:cb:ed:02:
42:4a:ef:d1:f6:f6:f1:ba:44:45:92:73:34:b0:c7:
1a:e3:45:31:47:8c:01:de:1d:dd:55:ce:89:0d:71:
01:da:8d:b8:e4:da:d1:44:9f:14:c4:09:8c:80:e1:
4d:86:48:c3:f8:bc:0e:d6:b7:08:77:d7:59:9b:c9:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:F4:78:0C:E7:6F:AB:74:90:2A:0F:EC:F6:82:DB:B1:8A:74:AC
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:78:00:58:2c:ad:d8:86:d7:43:04:15:af:7a:e9:ee:b9:97:
f1:01:b1:42:66:f7:69:3e:ec:a3:58:ff:e5:41:de:26:8d:2e:
26:f0:dd:93:8a:7a:ff:58:8c:c7:21:34:44:79:12:55:41:71:
5b:33:b4:e1:79:21:1e:c1:58:8c:2d:46:02:ad:ed:6e:4c:fc:
64:d5:1a:2b:78:93:50:a6:d7:10:a9:39:9f:54:ec:86:43:e5:
2c:81:ab:d0:b4:18:a1:9a:8a:35:06:83:51:42:f8:5a:de:1b:
5d:d7:f0:24:5a:f5:c8:02:f0:bf:69:cf:b4:6e:d6:23:f2:8b:
43:45:fe:cc:d6:00:bf:d7:11:d4:ea:a8:d9:f8:d6:75:1a:2f:
c2:a3:1c:78:ab:db:f7:9c:13:5a:fd:94:0c:af:a0:83:d5:c7:
11:45:82:0e:a2:a4:90:78:98:c5:00:1a:9c:8f:bf:40:73:25:
36:77:a0:86:43:c8:dd:76:68:33:35:b8:72:06:49:ea:d6:c6:
26:a1:7f:f6:34:08:cf:39:c8:20:93:9d:f4:82:e0:83:1b:39:
6d:5b:50:e8:ce:88:1b:47:87:9a:7d:94:45:f1:2c:0e:99:4b:
3f:3e:a6:29:c2:0d:52:0c:1a:c9:1f:07:ac:5a:bb:96:c4:a4:
bd:9a:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:15:07 2025 by rpki-client