This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: Yy7gIierhcVh4xGggV/B6i942XcfdSIMlOPkSw6uw0A=
Subject key identifier: 7D:25:13:CB:88:CF:1A:2F:4C:D8:17:FE:F2:2F:E1:36:00:DE:45:75
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B6F900D40BE177529F41C21BDA9B92CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 17E8
Signing time: Tue 30 Dec 2025 14:01:09 +0000
Manifest this update: Tue 30 Dec 2025 14:01:09 +0000
Manifest next update: Wed 31 Dec 2025 14:01:09 +0000
Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: LnVXrBuPxMD3O8D+32eAxYLnZvNuQGWbOq0Q26a8fXU=)
5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=)
6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=)
7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6f:90:0d:40:be:17:75:29:f4:1c:21:bd:a9:b9:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Dec 30 14:01:09 2025 GMT
Not After : Dec 31 14:01:09 2025 GMT
Subject: CN=7d2513cb88cf1a2f4cd817fef22fe13600de4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:72:e1:be:b9:b9:a2:e4:3a:b4:19:26:1a:
bc:f0:19:d9:a0:c4:d7:90:ff:b3:3c:a3:f1:f0:a4:
97:42:2c:fb:61:f8:9f:f5:75:82:cc:fe:2b:9b:9f:
8c:d4:0a:29:47:89:8f:b4:27:f7:c5:80:6e:7a:09:
05:42:73:03:43:dd:c2:d6:7c:66:d0:05:da:24:f4:
ad:12:35:a2:68:30:77:d1:d6:6d:e9:f1:21:5e:66:
95:f2:2e:9a:01:18:97:b8:1a:79:2a:f0:44:49:d6:
23:d6:19:d1:b8:2e:6f:04:67:92:af:29:7e:23:0f:
42:38:a9:67:9a:ed:5f:1f:21:b8:30:24:fc:65:99:
7b:92:56:57:e4:ed:5f:b9:09:fb:b3:ed:a4:b1:59:
57:41:d5:56:00:1e:4b:2b:25:82:00:8f:ea:ba:a7:
ba:d1:98:ea:36:9f:86:2f:92:68:70:23:84:8e:8f:
b8:dd:93:20:c0:4b:ea:ee:bb:96:4b:3f:69:22:a5:
72:b5:52:0c:52:21:4d:69:72:44:ad:2d:3f:e9:c0:
74:0e:f2:3b:96:53:7c:a6:cd:94:2b:d9:99:ec:ab:
69:90:79:2d:ef:c0:9c:4c:b3:64:2c:b8:ee:e3:23:
9e:8b:cb:82:ec:c3:e6:84:5c:b3:0b:73:44:04:ab:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:13:CB:88:CF:1A:2F:4C:D8:17:FE:F2:2F:E1:36:00:DE:45:75
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:26:57:d3:ac:b1:19:0d:5e:40:d7:7b:02:d5:31:7f:76:
ae:66:9e:ad:07:60:4e:8a:8d:47:eb:38:79:28:fd:d7:d0:11:
13:6e:36:6b:f4:e6:e2:d8:d9:7c:34:c9:d6:47:86:90:0f:ff:
74:42:b1:06:1e:de:03:5f:43:fd:a6:d2:ee:a4:69:ca:b1:be:
f1:e1:52:64:61:1f:8e:ef:15:70:88:fa:b7:63:15:69:96:e4:
d3:1a:ba:18:98:d7:fc:1d:04:1f:fe:79:6c:cc:71:2d:29:af:
4d:bf:2d:e2:5f:db:c9:16:e0:ab:3e:1e:f0:c5:8e:67:a2:39:
06:15:8d:1d:78:3e:23:23:e2:4c:00:f9:e8:85:ba:32:91:c6:
d2:58:5b:3a:0c:0e:66:70:6c:84:cb:ae:23:68:c9:65:29:f7:
f8:d2:23:bc:3f:02:f3:09:56:93:86:36:fa:71:7e:17:66:04:
e9:bf:8f:bc:03:db:b5:3b:5e:5d:f1:fc:bd:de:68:70:9f:a3:
3b:91:7e:c2:7b:12:6c:ab:7f:e5:c4:8e:1e:bb:53:84:31:af:
62:09:dc:bd:23:68:0e:a8:b3:d8:fd:5e:c5:20:51:88:97:a3:
fc:90:c1:f9:3c:7c:e6:82:9e:e7:04:50:3a:a2:5c:6f:97:79:
91:8e:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 23:27:59 2025 by rpki-client