This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File: 34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier: ZFI2g3S55z2m3GIgMmod8ItwI4r/4z++GfYgGm190Wo=
Subject key identifier: 3F:8F:FE:8D:DA:13:6F:DF:8B:3F:91:E5:F8:12:AE:5E:E2:BE:8C:FA
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 019B34C483956D428FB2E54FB09598F7462E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number: 158D
Signing time: Fri 19 Dec 2025 04:00:52 +0000
Manifest this update: Fri 19 Dec 2025 04:00:52 +0000
Manifest next update: Sat 20 Dec 2025 04:00:52 +0000
Files and hashes: 1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: JiM0l7RmZbXzkS9TRCT4IUV6ytPABBMfp5BgKUm8INY=)
3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:c4:83:95:6d:42:8f:b2:e5:4f:b0:95:98:f7:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Dec 19 04:00:52 2025 GMT
Not After : Dec 20 04:00:52 2025 GMT
Subject: CN=3f8ffe8dda136fdf8b3f91e5f812ae5ee2be8cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:4c:f9:ba:10:c4:29:63:38:22:03:89:c1:
df:b1:35:bc:d9:fd:6c:cd:26:c0:96:31:17:d5:df:
71:f7:06:00:e5:63:e0:90:d4:91:a3:9e:0e:33:08:
a3:e5:85:2e:e5:bd:e6:12:44:45:5b:8d:84:58:0b:
81:9a:3d:80:2c:fe:ac:45:db:21:3f:63:fb:dc:70:
d4:f2:27:1d:81:43:57:88:da:1c:8f:6c:06:4b:77:
46:49:d7:79:35:64:ff:22:5a:0a:28:32:b5:32:b5:
26:3c:9e:bd:da:b2:52:0f:cd:bc:7d:1c:45:eb:a0:
61:42:b8:d8:71:ba:5f:92:c0:e3:7f:f3:69:92:2a:
c9:97:ea:69:c1:31:8f:77:b2:4b:01:29:52:0b:b4:
56:3f:ef:d7:5d:35:9d:08:38:4b:6a:fe:3d:d7:a1:
8d:54:94:3e:03:27:a2:28:e6:12:ed:48:ea:0c:d1:
48:ea:01:97:34:0d:30:40:28:16:df:5b:c1:c6:42:
29:10:5b:03:a1:4e:3d:e9:29:b1:67:af:73:7a:66:
19:a8:5b:7e:5e:40:4c:a0:ed:f6:78:9d:d1:99:8f:
91:08:34:49:1f:0f:3a:ae:8a:96:bf:11:72:dc:9e:
f5:ac:3c:86:ad:85:9e:a3:9c:8e:a5:84:df:ed:b2:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:FE:8D:DA:13:6F:DF:8B:3F:91:E5:F8:12:AE:5E:E2:BE:8C:FA
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d8:75:5b:32:01:c7:44:59:d9:a7:6a:2f:61:63:af:18:94:
00:54:b7:68:2c:79:89:a8:52:8c:b9:bb:7b:af:e5:02:c7:84:
4b:62:fd:d1:70:1c:ed:d0:e2:d2:db:9c:fd:3e:79:f9:93:d3:
aa:81:f3:30:df:3c:92:af:e4:42:05:35:2a:10:26:94:74:35:
39:7e:80:0f:ae:c1:25:b6:ba:64:19:ba:cf:37:9d:87:21:2a:
c5:be:6f:a7:dd:07:17:4b:1a:4f:16:64:71:cf:c9:a4:73:39:
65:43:58:3a:ae:63:40:61:65:e0:cd:d6:56:02:e8:e7:65:79:
c1:01:e0:4f:31:a7:01:1f:bd:d5:d2:cc:63:c9:0e:d5:ca:b3:
97:de:fe:80:b9:e8:d6:4c:63:b3:af:8a:61:5f:6c:73:95:8b:
80:26:66:9c:05:68:85:f7:9f:b0:59:ac:55:6a:e4:9f:6f:6e:
b7:45:95:96:3a:64:05:7e:84:75:04:bb:59:b4:35:3d:8b:a1:
06:e8:a8:67:17:83:c4:6e:06:4c:17:fd:74:31:7c:f4:4f:0c:
68:23:40:3a:51:96:46:84:70:c7:54:42:04:1f:2f:3f:35:49:
37:97:d7:b9:21:64:59:44:60:19:de:24:74:a1:42:62:07:16:
67:e6:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:17:08 2025 by rpki-client