This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: E7cEiKtfQhbJcD9o7/TfRelQpghyDTsVmYkS6zEM7A0=
Subject key identifier: 7E:EC:DE:77:EF:87:40:65:8A:18:3F:E3:B2:72:45:F5:1E:E2:38:97
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019B3532C1B8F2E345F0E2B7570F5D6C8238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 12C9
Signing time: Fri 19 Dec 2025 06:01:17 +0000
Manifest this update: Fri 19 Dec 2025 06:01:17 +0000
Manifest next update: Sat 20 Dec 2025 06:01:17 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: jQ8zoWobjOJ/+ThN/RTQNJsyM8dzhyLJRRcbgUQdr08=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:32:c1:b8:f2:e3:45:f0:e2:b7:57:0f:5d:6c:82:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Dec 19 06:01:17 2025 GMT
Not After : Dec 20 06:01:17 2025 GMT
Subject: CN=7eecde77ef8740658a183fe3b27245f51ee23897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:3f:4e:0c:d2:08:6e:28:34:b0:47:db:a2:
53:31:0d:21:5b:d7:cc:1d:1f:bd:63:6c:99:22:5f:
cc:ca:e8:9a:90:06:1c:b1:c4:96:dc:c2:0a:92:ff:
e2:fa:e5:65:ba:0e:ff:21:24:bf:4d:6a:ef:cc:2a:
d9:90:23:46:d5:cc:61:59:a7:69:e6:1a:1c:e2:3e:
bb:fb:62:1c:fd:0a:80:56:c2:c7:50:93:11:fa:92:
56:bd:42:0b:8c:59:bb:60:cf:37:ed:7a:eb:2b:3c:
73:00:84:0d:fe:3b:99:95:35:a4:99:c9:ff:d7:f2:
87:23:92:d3:4e:0e:59:f8:a5:18:c2:34:ef:81:de:
52:d5:3b:3c:c2:3c:86:87:62:6f:a3:90:d8:8d:b5:
3e:10:1d:5d:3e:56:d0:0a:7b:6f:28:02:49:99:36:
f0:04:f1:86:ea:28:ba:da:23:bc:b5:c0:d6:6f:7f:
ee:33:00:8c:81:95:ae:77:7c:ce:ad:f2:f7:63:e3:
fd:7b:61:d5:23:85:53:85:88:f8:29:37:dd:e2:ba:
83:2c:53:ae:ed:78:6b:ca:12:fb:7a:80:7b:f9:a5:
0c:96:6a:ee:f9:e8:32:d4:9e:38:59:86:17:fa:dd:
d0:3f:e5:bd:ac:26:f8:59:cc:15:ef:f7:bc:64:e1:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:DE:77:EF:87:40:65:8A:18:3F:E3:B2:72:45:F5:1E:E2:38:97
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:08:f1:00:05:5b:c6:4c:14:20:11:c9:08:a3:34:1f:a6:79:
a0:25:9d:d5:f8:65:14:50:99:1b:96:62:73:f5:6c:73:79:d8:
95:62:c2:bf:41:ef:5a:8d:f9:9d:bc:e7:be:f3:c5:42:2c:c2:
8a:d9:e9:e1:cd:dc:b2:cf:6a:35:61:63:7d:f9:63:26:cc:3d:
fb:ad:e4:c7:a7:03:d3:9b:36:4b:cc:7c:bd:9a:59:aa:41:04:
16:5e:e7:5e:76:f3:f9:97:a9:7a:73:38:46:8a:92:71:c1:44:
76:53:75:a7:e4:e1:0b:e0:d6:01:07:cd:10:1e:0d:71:0d:01:
8f:5c:ab:a2:5b:ef:58:7f:2d:97:bc:c5:60:58:f2:ca:3b:21:
af:67:ee:66:9b:c3:4d:7a:af:b1:f8:9e:0d:5a:7f:1b:2b:a6:
ce:e2:cf:22:46:8a:30:d7:b3:d0:e9:06:28:08:a3:f1:aa:18:
7c:d4:c5:17:39:8a:79:24:32:72:d3:ec:71:e0:da:a9:8f:50:
d0:4e:02:9a:5a:a8:18:d6:02:4f:1a:bb:38:ca:8c:c5:98:82:
34:a0:9c:9b:e1:ba:9d:53:2f:e8:90:5e:97:c4:43:55:a3:e1:
db:58:f0:36:9f:4d:1c:10:98:c3:a9:a3:2b:a5:2f:ba:e7:03:
7b:3b:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:13:18 2025 by rpki-client