This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: C38Jr1x/NYQJK/Xgd1CkGLrD3E5K6KzRJToMJlCRoWU=
Subject key identifier: 23:08:EF:F5:20:DD:F0:F7:DB:37:F1:EB:E1:3E:AE:53:51:CE:F9:D4
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 019B1B0531BDC642B8F90723C18185B71B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 12B9
Signing time: Sun 14 Dec 2025 04:01:23 +0000
Manifest this update: Sun 14 Dec 2025 04:01:23 +0000
Manifest next update: Mon 15 Dec 2025 04:01:23 +0000
Files and hashes: 1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=)
2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: EZBNy6iYDvP59ethSpij88Isd3vS9KdJEcpWo8TA9bo=)
4: O--ohDSHb3_cgUUA6fEd67yI0qE.roa (hash: ZeZLP6PWTPODtcpDZvxrQiDQ91HF+onUP31S24SY2QI=)
5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:05:31:bd:c6:42:b8:f9:07:23:c1:81:85:b7:1b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Dec 14 04:01:23 2025 GMT
Not After : Dec 15 04:01:23 2025 GMT
Subject: CN=2308eff520ddf0f7db37f1ebe13eae5351cef9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:ee:de:03:f5:c1:90:52:6c:bd:d3:14:82:
59:60:83:8f:ea:ce:db:5b:c3:37:a1:0f:bd:0e:95:
90:1d:07:15:bc:f6:2e:4d:3f:6a:34:58:a9:0a:53:
e1:f2:cf:89:64:d6:b7:20:a0:64:9e:0a:ab:6b:28:
82:2d:9a:13:6f:2e:e6:71:52:f4:11:a2:9b:ba:dc:
3c:16:c2:54:43:6f:47:42:d4:b5:ee:61:da:68:67:
8e:9b:aa:fe:cc:07:a7:ce:af:c6:6b:22:de:e3:03:
41:66:9b:e2:a2:fa:49:4b:60:6e:21:4b:e3:50:c3:
02:ed:58:83:2e:97:b5:8e:7b:e8:f8:77:00:f1:7f:
e0:64:a0:69:e9:0f:98:c7:63:42:57:94:51:e4:4a:
37:d5:b5:1c:1d:3a:9c:5c:38:93:26:3b:b6:87:ef:
22:cd:a2:cc:74:0f:41:eb:c2:08:da:b8:db:41:99:
aa:00:59:51:3f:ea:02:60:b9:be:02:45:ba:0d:3a:
68:5c:b7:94:c8:78:64:30:23:17:ce:fc:28:50:c0:
bd:2c:de:04:23:25:98:29:30:5b:84:27:4d:78:43:
b5:47:83:ef:e9:ad:81:5b:f0:c2:33:09:6e:4d:22:
7e:66:bd:2d:4f:3b:39:6b:76:60:27:8f:39:41:4d:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:EF:F5:20:DD:F0:F7:DB:37:F1:EB:E1:3E:AE:53:51:CE:F9:D4
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:49:f0:f2:50:5f:2d:49:d7:33:43:fd:7e:06:17:d0:0d:
42:85:b0:7a:0d:49:e8:ed:24:5b:15:f2:2a:1c:65:5c:50:5b:
9e:13:1a:c5:c0:76:01:e7:4d:de:0e:05:4a:d4:72:af:99:a2:
96:fc:d4:e5:bc:6e:2f:cf:c5:e9:83:d8:dd:36:8e:bd:9f:2e:
78:de:79:6c:93:ce:e4:be:37:40:5e:2a:5f:5b:22:f5:f3:ad:
34:96:e1:0c:a9:2a:05:38:4f:b0:e1:c8:14:f6:a3:e2:37:d7:
95:0c:87:ed:78:aa:4e:27:bc:0a:d3:68:57:5b:02:fc:44:e2:
49:36:f2:ba:2a:6b:16:a2:14:9b:3c:f1:28:6a:8b:ee:30:69:
0c:78:b3:20:b0:50:3b:72:53:49:9c:8d:19:9a:03:5a:07:8d:
5e:ba:e3:e8:dd:1c:b6:12:5f:58:69:ae:9c:91:60:62:ed:3c:
af:b2:72:d1:8c:61:c0:16:83:0f:a5:5b:45:49:2d:ad:20:a5:
ad:c2:c3:e5:a5:0c:58:78:45:b4:51:7f:f6:ff:27:15:7b:ab:
07:fb:a4:69:17:67:65:27:00:40:d3:67:57:cf:d3:17:b1:7e:
90:6b:a3:10:f1:27:63:74:3e:6c:6b:3f:1b:d9:8a:f3:ac:c8:
51:0c:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:48:20 2025 by rpki-client