This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: vWSw6qASQmDtZOj4LRM+SaaM7r7iBpYuJXlIEbbxJzw=
Subject key identifier: 32:E8:FF:C2:5E:B2:77:D8:56:EC:49:3C:37:74:D7:C8:18:0C:86:27
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 019B11CA77DD0E5FAC8A6A4B4F7D06937237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 1777
Signing time: Fri 12 Dec 2025 09:00:40 +0000
Manifest this update: Fri 12 Dec 2025 09:00:40 +0000
Manifest next update: Sat 13 Dec 2025 09:00:40 +0000
Files and hashes: 1: 0JqunmMBjEmd1A-HgkE4JsYwvvg.roa (hash: S7pQ47ggIC3jlvfHhUSFNbRX+v6ZCpTaVmICGgx3JLA=)
2: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: uxPZMoxcZvAK1aKeGp+pPflROyqcT+TXuonM1Mj+IGc=)
4: vd2pBoJBZhf5P4J8dtMG91g6Jt4.roa (hash: rtCqRJvAHr3CK7C32hUZPO+hSIBq5AQ/a8C+367rDXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:ca:77:dd:0e:5f:ac:8a:6a:4b:4f:7d:06:93:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Dec 12 09:00:40 2025 GMT
Not After : Dec 13 09:00:40 2025 GMT
Subject: CN=32e8ffc25eb277d856ec493c3774d7c8180c8627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:3a:60:f3:c9:a4:90:9e:0f:7e:7f:e1:c9:
88:20:5e:6b:79:4c:63:d2:4f:b6:62:8f:5c:ca:57:
44:40:8b:9a:5a:59:ae:78:e8:bf:bf:7f:ec:6d:84:
71:e1:da:48:8e:b6:46:8d:28:db:bc:b1:b9:45:2a:
e8:2e:7b:2f:a1:c4:17:a4:7f:d6:eb:7c:30:46:6e:
23:62:c8:01:3e:1b:50:6d:df:61:27:3a:c3:af:d7:
e7:ef:ea:f3:4e:74:48:8d:97:3d:14:2f:06:43:d8:
9b:a6:f9:85:20:7e:2f:35:57:40:1b:55:3a:60:3f:
03:b2:86:d3:94:01:2a:02:c0:f1:1e:be:85:40:a6:
00:8d:e6:b1:65:27:ae:c9:a9:0f:40:9e:7b:40:d0:
15:36:40:83:e9:fc:6a:0a:82:47:66:0a:84:a2:e7:
91:62:75:d3:af:02:26:f5:cb:05:17:87:b7:5d:22:
f3:5f:f3:2d:57:8d:a1:17:ea:4f:b6:18:d7:f4:d0:
65:84:53:d7:16:af:d3:3b:61:3d:48:cb:6c:d2:85:
2c:3f:5a:1c:b6:42:41:13:bd:18:9e:87:71:f7:18:
55:9a:6a:1b:ed:df:3f:4f:25:07:3c:de:a7:a3:08:
61:55:33:c3:07:8d:bc:4c:a9:a7:d7:da:5e:03:54:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:FF:C2:5E:B2:77:D8:56:EC:49:3C:37:74:D7:C8:18:0C:86:27
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c2:d0:2b:77:ac:4c:0d:bc:35:a7:5e:e1:23:1f:ea:fa:cd:
cd:bc:f6:36:23:39:2c:6e:94:cc:d0:c2:a9:12:8b:ab:4e:0f:
5f:b3:06:ab:47:cc:cf:af:78:ca:bc:a9:f0:5b:8e:4d:11:4b:
aa:1c:6c:19:c1:a6:72:89:27:d8:87:64:c0:4c:15:52:31:e9:
ed:23:a6:93:6b:62:99:dd:ee:21:d9:f8:a4:3d:33:bc:26:54:
2d:96:ef:b1:7a:8c:87:dc:85:16:51:ea:f9:03:4c:3f:37:e1:
45:67:ee:24:5f:7c:09:d0:32:5e:59:62:ab:f6:7a:72:b0:b5:
66:10:cc:79:99:e9:52:46:53:4c:fb:c3:d3:94:23:4f:6c:f8:
6b:73:06:2e:c5:2a:0a:15:fb:a0:f3:80:1e:e1:ed:be:6c:ba:
cb:96:0f:ee:67:53:bb:a5:99:f3:8c:6c:cc:0b:78:a8:58:b4:
f1:3a:22:b8:aa:52:ab:f7:ba:9c:88:db:d8:e4:b9:0c:0f:25:
cf:bb:f0:b4:d0:c6:31:e2:a4:de:96:d3:6c:75:92:66:a7:73:
72:24:f2:ca:8a:8a:eb:cb:95:3a:dc:45:87:5f:7d:01:d7:04:
b9:6a:c7:eb:57:55:ad:1f:01:21:ba:f2:6e:60:61:91:85:a0:
ff:8a:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:11:17 2025 by rpki-client