This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier: GvOoRRYP1TXH67wOpyNhqD60vA+CgjfBg9mE7bHqDT4=
Subject key identifier: 4D:FC:7A:FB:46:2E:CF:C7:C0:1B:88:E4:51:44:A0:C5:17:8C:01:73
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 019B11944E9106B781F58E19093732CE5D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number: 174E
Signing time: Fri 12 Dec 2025 08:01:30 +0000
Manifest this update: Fri 12 Dec 2025 08:01:30 +0000
Manifest next update: Sat 13 Dec 2025 08:01:30 +0000
Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=)
2: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (hash: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=)
3: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=)
4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=)
5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=)
6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=)
7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=)
8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=)
9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 1M0aX+T1L7wsXbXjTHvH1MNAdMo77k8e+lgzBtVn8/8=)
10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=)
11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=)
12: icM0VycNV4mt0pTY2afMrLkCQiI.roa (hash: xbGX02cLUgEU+Jz8UpLSB42bp7e4VbRHxCBGvzWAyic=)
13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:94:4e:91:06:b7:81:f5:8e:19:09:37:32:ce:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 12 08:01:30 2025 GMT
Not After : Dec 13 08:01:30 2025 GMT
Subject: CN=4dfc7afb462ecfc7c01b88e45144a0c5178c0173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:2f:d8:a7:28:68:ee:ed:a3:d4:8a:34:08:
0c:e2:a0:e2:f5:14:07:be:38:f9:80:18:ed:4d:9b:
f9:39:12:f0:c7:e3:fe:8c:8b:d6:4a:00:10:1a:58:
28:8d:ce:55:3c:4c:6f:fb:e5:b8:49:2f:1f:76:55:
dc:9c:09:77:a7:87:4c:70:b1:51:70:40:aa:c2:9d:
70:4c:4c:e2:e0:e4:30:1b:75:00:8b:ef:35:0f:12:
eb:d9:76:bb:b6:e2:f4:26:bd:f8:51:49:50:5a:94:
c0:e0:d2:fd:d5:4d:84:ba:aa:23:e9:0f:09:cf:5c:
ff:9b:b4:50:be:d1:98:07:4b:20:7f:c7:f2:ab:5c:
97:11:55:74:16:cc:7c:ab:02:62:19:0b:fc:0b:41:
f7:f3:38:94:ac:2e:5d:4a:21:50:ee:9f:fe:6a:d6:
f7:bb:a5:a2:4e:96:23:5c:05:dd:37:4e:dc:55:8d:
bb:44:5a:ab:5d:b9:a5:03:44:0d:ee:0e:5d:5e:27:
58:46:76:4e:92:fa:cd:80:23:bb:b9:87:9a:76:a6:
44:ac:9f:f6:8d:97:3c:32:28:47:bd:43:7d:e6:f0:
82:86:86:fa:a7:a3:a3:75:69:86:e9:67:65:b2:8c:
e5:9c:50:fb:dd:e9:49:8d:91:92:98:ec:2f:f1:76:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:7A:FB:46:2E:CF:C7:C0:1B:88:E4:51:44:A0:C5:17:8C:01:73
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:29:d8:e0:bd:3c:b5:1b:d1:f4:af:06:f9:ce:f8:f9:a2:
f3:b3:14:44:f1:54:a1:39:fe:61:21:08:ef:54:c4:4a:28:55:
3a:50:95:86:65:35:65:c4:a4:b5:8b:c7:ea:b3:71:e8:50:a4:
8a:25:b3:e4:06:a6:a5:fd:b9:b9:a5:8b:f1:88:fa:70:9e:c5:
2b:1a:ea:f1:3b:4b:dd:c7:e0:93:78:8f:11:f7:8e:c6:11:f9:
ba:c8:1a:20:ce:cd:a4:7c:42:2b:6a:b3:7b:95:5e:77:5b:95:
38:63:c7:ce:29:bf:35:dd:78:9f:5b:44:b3:57:34:cc:ef:ed:
10:1e:7b:e4:df:11:54:ce:72:23:13:a0:46:94:91:57:a1:e8:
d0:6b:38:ee:d0:36:ec:e9:a9:85:12:a8:16:c7:e2:d4:5c:cc:
45:d1:36:97:56:f1:22:0b:4e:bb:36:2c:b2:82:72:9d:25:c9:
bd:ee:73:a6:b0:dd:09:f1:6b:a3:36:ac:6c:03:1d:ab:5b:7a:
3c:43:09:95:e9:6c:38:2c:73:2e:10:21:5d:5c:2a:c2:15:64:
a6:7c:da:8a:20:81:5f:bc:33:bf:4a:dc:66:32:69:a0:3e:f3:
4c:6e:72:46:45:8e:4f:81:ba:8e:79:fe:f0:63:eb:40:2e:11:
94:86:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:19:01 2025 by rpki-client