This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File: 7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier: maeFN6hxRPqwqFg8HIQNJ/SFXdiJc4mV/BnvW58OLEA=
Subject key identifier: 3F:EB:02:62:2B:E7:CD:63:E0:72:5C:C9:97:DC:5B:BC:A9:4E:5C:16
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019B5907F6ECEA90D7ABB013032DA63AA66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number: 0D74
Signing time: Fri 26 Dec 2025 05:00:52 +0000
Manifest this update: Fri 26 Dec 2025 05:00:52 +0000
Manifest next update: Sat 27 Dec 2025 05:00:52 +0000
Files and hashes: 1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: UwUtewHaSz1EOS3nfC/vH4QCi73Lm0oRA+JU4WnqgUc=)
2: Xc0IWZbMmju7pbBifzTAy_VFZls.roa (hash: ieHjZYyTowrkAjtUXCZ6gebps3wJnEiAbxYcxuJzbhs=)
3: gRffKuEX0czsrnlZBP9RuWOhUxc.roa (hash: ZNpwDIB3C/ZPnj8Whylo5eGsxYBRndXhcd3COmk7erw=)
4: yxisVf5RbQd_iyu5bjOm2uTCJqY.roa (hash: TlTPbndQ3fvJ6HctsZUhUZG2cQbNIxMU2U4IlG98W/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:07:f6:ec:ea:90:d7:ab:b0:13:03:2d:a6:3a:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Dec 26 05:00:52 2025 GMT
Not After : Dec 27 05:00:52 2025 GMT
Subject: CN=3feb02622be7cd63e0725cc997dc5bbca94e5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:0a:60:4d:18:ec:b8:4c:1c:b6:20:56:47:
87:a1:30:7d:d7:36:b0:c3:39:d7:c6:e6:b7:c0:db:
ee:df:fe:b4:ea:28:46:07:b7:ce:41:a3:26:cd:84:
4d:36:18:90:10:e0:a9:4e:4c:2f:74:09:7a:9c:64:
03:ae:23:fb:49:7c:27:f4:c1:9c:ef:ef:7a:36:fb:
65:87:97:2f:e2:9f:1b:1a:f1:3c:17:c2:75:98:5e:
1b:36:12:41:09:8f:f2:9d:fd:60:a5:ef:b7:15:18:
89:68:55:38:b6:34:e9:85:9e:2e:ac:dc:70:d4:c0:
b6:7a:1f:45:5b:8e:10:e3:7b:99:1e:6c:e5:05:88:
99:a4:34:0c:65:1e:37:cd:ec:25:44:99:7b:d8:80:
ed:84:56:76:0e:b0:bf:69:c9:a5:c8:77:3a:3f:80:
1a:c4:af:b8:09:2e:6e:49:6e:d6:eb:b5:17:aa:ff:
39:73:2b:f3:c6:ea:3c:d8:85:12:4e:94:ec:43:40:
9f:30:17:4a:9a:ef:2f:b2:6e:e9:73:58:1a:ab:88:
41:90:91:1b:69:19:c3:8f:29:b5:f4:4f:8f:37:d5:
94:91:cc:49:17:eb:48:21:61:44:23:cc:be:b2:25:
f3:f7:11:0b:8a:26:84:77:3e:ab:62:c4:ac:80:d3:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:02:62:2B:E7:CD:63:E0:72:5C:C9:97:DC:5B:BC:A9:4E:5C:16
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:21:92:90:42:84:80:69:b7:31:a8:cb:cb:c8:22:69:29:66:
20:24:a6:38:7c:13:dd:06:31:0d:3e:9c:b9:4b:54:4d:53:00:
d4:9a:96:77:70:ad:bc:3d:90:ed:35:36:bc:de:a4:57:14:6f:
f2:98:d7:8c:05:96:df:84:4a:de:0f:0c:09:f6:94:dd:1b:c8:
bc:e1:49:5c:47:ac:36:dc:8e:30:df:0e:01:db:f3:fb:fa:67:
3e:fa:fb:7f:37:c3:be:e4:3b:65:4d:67:14:27:9d:d9:86:a1:
2d:a1:31:7e:23:f1:92:4e:22:c9:99:38:d7:c1:3a:ea:24:a1:
c1:25:e7:99:50:ca:31:4d:36:26:60:1c:6b:8e:a6:65:f0:bf:
3e:cc:3d:82:52:90:e3:43:62:1d:50:e3:e1:fd:ee:96:b3:1a:
eb:51:f7:fb:72:a7:29:b3:68:8e:88:cb:8c:a3:aa:7d:c8:d3:
62:db:1d:4b:4f:8e:3b:13:a9:00:3d:b8:5e:63:4a:15:cb:51:
2f:2a:9d:d0:81:d8:53:08:d9:6c:83:6e:9b:4f:cc:84:c2:e3:
f6:a4:b0:e3:26:4f:22:8b:b3:97:3f:b7:90:e4:07:dc:37:6c:
e8:37:2b:d4:09:a8:d6:f1:45:eb:37:c4:f7:12:3e:cb:b7:2c:
e2:6a:47:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtZB/bs6pDXq7ATAy2mOqZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjUxMjI2MDUwMDUyWhcNMjUxMjI3MDUwMDUyWjAzMTEwLwYDVQQD
EygzZmViMDI2MjJiZTdjZDYzZTA3MjVjYzk5N2RjNWJiY2E5NGU1YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJUKYE0Y7LhMHLYgVkeHoTB91zaw
wznXxua3wNvu3/606ihGB7fOQaMmzYRNNhiQEOCpTkwvdAl6nGQDriP7SXwn9MGc
7+96Nvtlh5cv4p8bGvE8F8J1mF4bNhJBCY/ynf1gpe+3FRiJaFU4tjTphZ4urNxw
1MC2eh9FW44Q43uZHmzlBYiZpDQMZR43zewlRJl72IDthFZ2DrC/acmlyHc6P4Aa
xK+4CS5uSW7W67UXqv85cyvzxuo82IUSTpTsQ0CfMBdKmu8vsm7pc1gaq4hBkJEb
aRnDjym19E+PN9WUkcxJF+tIIWFEI8y+siXz9xELiiaEdz6rYsSsgNNeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/rAmIr581j4HJcyZfcW7ypTlwWMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyGSkEKE
gGm3MajLy8giaSlmICSmOHwT3QYxDT6cuUtUTVMA1JqWd3CtvD2Q7TU2vN6kVxRv
8pjXjAWW34RK3g8MCfaU3RvIvOFJXEesNtyOMN8OAdvz+/pnPvr7fzfDvuQ7ZU1n
FCed2YahLaExfiPxkk4iyZk418E66iShwSXnmVDKMU02JmAca46mZfC/Psw9glKQ
40NiHVDj4f3ulrMa61H3+3KnKbNojojLjKOqfcjTYtsdS0+OOxOpAD24XmNKFctR
Lyqd0IHYUwjZbINum0/MhMLj9qSw4yZPIouzlz+3kOQH3Dds6Dcr1Amo1vFF6zfE
9xI+y7cs4mpHcQ==
-----END CERTIFICATE-----
Generated at Fri Dec 26 14:05:53 2025 by rpki-client