This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier: 8GoVEibbqk4Fka9d7mMnJttK/yMwXOos0bpqrAK7/0k=
Subject key identifier: 1D:59:31:AD:74:41:6E:9A:58:DE:C6:DE:18:D6:D5:C2:45:87:7F:8C
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019B37214FA2968A7A63A85838743572D65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number: 0848
Signing time: Fri 19 Dec 2025 15:01:28 +0000
Manifest this update: Fri 19 Dec 2025 15:01:28 +0000
Manifest next update: Sat 20 Dec 2025 15:01:28 +0000
Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: 92zSB0i16cKNZ0J90ZQSYrX+MReDWZ2R2E898OGgXc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:21:4f:a2:96:8a:7a:63:a8:58:38:74:35:72:d6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 19 15:01:28 2025 GMT
Not After : Dec 20 15:01:28 2025 GMT
Subject: CN=1d5931ad74416e9a58dec6de18d6d5c245877f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:28:86:8a:70:12:74:58:ee:0a:88:18:ea:
7b:c5:f0:26:49:67:5e:b3:cd:d3:83:fd:79:57:17:
58:a9:23:b6:77:29:f6:55:01:53:9c:3c:57:aa:62:
2c:c1:80:5c:c0:ba:40:2f:f6:20:08:77:af:ab:fc:
7a:f5:9a:66:19:85:86:e6:9c:50:b2:84:75:79:eb:
fe:11:90:85:90:b8:0e:68:90:63:28:94:d0:e4:8c:
80:99:58:1b:6d:e9:59:ef:e4:cf:35:61:48:ff:15:
89:05:e4:0c:4c:8c:79:22:25:be:f9:25:e9:bf:db:
cd:e4:c2:e9:32:74:4b:c3:a6:d1:f6:d3:10:31:b4:
52:85:19:61:4b:1d:52:a6:e3:29:51:00:2d:5a:af:
62:77:ec:5e:07:24:a8:b4:f5:63:8c:2a:d1:3e:c2:
2f:40:cc:a5:15:24:92:90:7a:6b:1f:4e:71:e0:bf:
0e:08:74:1b:c9:d1:bf:cc:b5:57:52:92:1e:e6:84:
9c:7c:aa:97:e5:11:56:73:8a:f7:45:aa:c3:f8:2a:
d4:f5:93:cc:8e:29:29:3e:1e:04:cd:43:b2:8a:6a:
87:5b:7e:5e:ab:f6:d4:ec:f9:42:7b:da:db:39:dc:
ee:e0:0f:cc:d9:eb:51:ad:0d:7c:77:c9:be:e9:df:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:31:AD:74:41:6E:9A:58:DE:C6:DE:18:D6:D5:C2:45:87:7F:8C
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a2:c9:bd:07:bb:72:f7:c6:6c:70:c2:28:c0:d2:4a:d1:80:
04:85:47:bc:5a:14:3f:79:b3:2c:48:21:5f:98:03:c7:b4:f7:
e1:3b:96:4b:da:c6:17:be:9d:7d:fc:0d:69:e7:3e:4f:cc:6e:
bb:1e:ac:76:68:ae:4f:38:c1:70:16:37:d2:85:ae:fa:8c:9b:
34:ce:2d:5c:6f:64:c1:fc:94:aa:ef:0e:f2:89:ed:8b:c6:9d:
c7:a9:b9:96:f2:58:2d:ea:9c:5d:57:2e:12:f4:ed:4d:c4:58:
1e:a7:84:a8:96:ea:17:b5:e8:ad:e0:21:52:3c:bf:0d:09:b0:
61:cb:2d:a6:1c:3f:ac:48:2b:5d:93:e1:50:15:c9:42:44:4b:
b9:3e:f0:05:bb:0a:57:cf:90:b8:19:d2:22:f3:67:a4:df:49:
b9:38:bf:37:58:c0:44:13:08:95:de:0e:e8:fe:72:48:a7:1c:
d8:4a:6b:d5:15:0d:49:f9:12:f4:77:c4:e4:7e:be:ca:f0:45:
d9:b5:c2:bd:1f:36:5a:48:54:4f:93:e1:dd:e7:48:0d:da:9c:
17:4a:cd:9f:42:9a:cf:fc:9f:d7:cb:8d:28:90:76:8b:17:73:
03:d9:45:45:09:b6:d5:1b:7a:55:5e:7c:3a:67:1e:46:e3:c9:
1f:6c:71:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3IU+ilop6Y6hYOHQ1ctZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjUxMjE5MTUwMTI4WhcNMjUxMjIwMTUwMTI4WjAzMTEwLwYDVQQD
EygxZDU5MzFhZDc0NDE2ZTlhNThkZWM2ZGUxOGQ2ZDVjMjQ1ODc3ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TIohopwEnRY7gqIGOp7xfAmSWde
s83Tg/15VxdYqSO2dyn2VQFTnDxXqmIswYBcwLpAL/YgCHevq/x69ZpmGYWG5pxQ
soR1eev+EZCFkLgOaJBjKJTQ5IyAmVgbbelZ7+TPNWFI/xWJBeQMTIx5IiW++SXp
v9vN5MLpMnRLw6bR9tMQMbRShRlhSx1SpuMpUQAtWq9id+xeBySotPVjjCrRPsIv
QMylFSSSkHprH05x4L8OCHQbydG/zLVXUpIe5oScfKqX5RFWc4r3RarD+CrU9ZPM
jikpPh4EzUOyimqHW35eq/bU7PlCe9rbOdzu4A/M2etRrQ18d8m+6d8KFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1ZMa10QW6aWN7G3hjW1cJFh3+MMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaLJvQe7
cvfGbHDCKMDSStGABIVHvFoUP3mzLEghX5gDx7T34TuWS9rGF76dffwNaec+T8xu
ux6sdmiuTzjBcBY30oWu+oybNM4tXG9kwfyUqu8O8onti8adx6m5lvJYLeqcXVcu
EvTtTcRYHqeEqJbqF7XoreAhUjy/DQmwYcstphw/rEgrXZPhUBXJQkRLuT7wBbsK
V8+QuBnSIvNnpN9JuTi/N1jARBMIld4O6P5ySKcc2Epr1RUNSfkS9HfE5H6+yvBF
2bXCvR82WkhUT5Ph3edIDdqcF0rNn0Kaz/yf18uNKJB2ixdzA9lFRQm21Rt6VV58
OmceRuPJH2xxGA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:08 2025 by rpki-client