This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: A2JbaqvCFAVFWFEKjayQAYYFh8HpTJxhKpJHmuN1UQQ=
Subject key identifier: B5:35:6D:88:B2:C3:A5:77:97:0E:82:22:7A:A6:86:96:16:CD:95:A4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B601D298B4420A84DD4AA8AEC7B19B22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 17E0
Signing time: Sat 27 Dec 2025 14:01:22 +0000
Manifest this update: Sat 27 Dec 2025 14:01:22 +0000
Manifest next update: Sun 28 Dec 2025 14:01:22 +0000
Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dWJUvVW/uGRmCLxTHwfRnklAAc+CnEsi1ujUa5qmi44=)
5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=)
6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=)
7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:60:1d:29:8b:44:20:a8:4d:d4:aa:8a:ec:7b:19:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Dec 27 14:01:22 2025 GMT
Not After : Dec 28 14:01:22 2025 GMT
Subject: CN=b5356d88b2c3a577970e82227aa6869616cd95a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:d4:21:00:27:80:6d:2e:16:c2:68:dc:9a:
55:55:d9:1c:46:a9:03:e1:e9:3c:20:ca:ed:bb:bd:
92:5c:52:5a:26:fd:c4:9b:9c:4a:9a:3f:0e:5f:31:
a7:11:f9:23:e3:cf:04:f9:46:90:6f:71:10:e2:8b:
ff:43:aa:c4:62:9e:06:18:df:87:e4:45:7b:8e:04:
68:2b:cf:57:1a:4e:c8:5b:16:31:16:9d:ab:26:a4:
45:65:d7:82:06:b2:d2:e2:20:a0:25:c2:fa:bd:d6:
72:70:99:9d:29:db:08:49:d2:14:73:64:f1:c0:e2:
8e:46:ad:99:28:90:ce:b0:53:ac:59:33:6d:c1:41:
a2:3f:00:a0:c2:99:94:30:d0:fb:76:58:8d:a8:32:
f7:26:d7:28:c4:04:5d:c4:3f:20:45:79:5a:cd:39:
0d:a4:bb:aa:5e:bd:91:60:56:87:0a:d0:2e:db:cf:
a5:2b:71:33:85:28:6e:9b:8f:40:c9:29:ce:7d:a4:
48:19:ae:e9:8e:6e:47:b2:40:34:b5:2f:c8:23:60:
bb:56:1e:51:d4:9a:91:fe:90:a7:b9:81:f8:0b:fe:
ed:d3:8a:ac:9e:55:19:28:19:05:fc:bd:a1:46:a4:
fd:53:bb:51:1b:e5:7e:a9:dd:3a:8d:7c:2a:98:2e:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:6D:88:B2:C3:A5:77:97:0E:82:22:7A:A6:86:96:16:CD:95:A4
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:73:32:8a:68:29:9e:49:2f:2f:fa:9c:07:84:6a:22:7a:
9a:1e:44:a1:48:66:fc:93:e2:ea:d6:8a:0a:5a:05:44:fa:38:
88:02:a1:70:f4:76:23:94:9d:01:9a:dc:c5:42:59:ae:18:0c:
00:d8:94:36:82:28:a9:3d:15:ba:42:75:b7:77:e4:28:2b:82:
9f:f2:92:bb:a4:0d:a3:db:a6:e0:8b:71:35:70:fe:4a:ad:8f:
13:0f:03:3a:63:3c:fa:e7:e5:d8:6b:f4:c1:3a:a3:0e:e8:81:
69:57:1d:e7:97:e3:9d:cf:35:db:7e:a8:0a:31:99:fc:b6:d6:
c0:fe:38:43:48:33:df:11:31:d0:71:c7:4d:e3:47:5b:83:ed:
73:23:f1:cf:36:e8:2e:53:3b:14:99:3c:00:49:3e:16:55:9e:
b9:dc:fc:38:88:15:04:9a:a5:87:4b:a3:49:6c:e1:ed:e1:08:
c7:40:4a:1c:d5:7b:5c:3f:2f:fb:ce:a3:3b:df:92:ea:3e:8c:
49:eb:52:c1:91:ab:cb:b7:5e:91:b1:1f:84:e9:95:a9:c6:58:
2d:33:a3:90:02:4c:e1:98:88:a5:59:ce:65:4d:5c:06:09:7c:
28:16:4b:ff:83:69:9d:9a:cf:1d:d6:64:c6:ad:d9:25:de:c3:
f6:d6:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 22:33:55 2025 by rpki-client