This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier: FmzhbXFmk35UjDxgmqPm9qkGocd9XEoN9tALlDeyILY=
Subject key identifier: 08:D2:9A:6E:D6:B7:56:77:88:EC:7D:04:08:DA:09:11:28:B6:39:DA
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019B0D80829C0FF129D18B36D1C2ED204AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number: 177E
Signing time: Thu 11 Dec 2025 13:01:24 +0000
Manifest this update: Thu 11 Dec 2025 13:01:24 +0000
Manifest next update: Fri 12 Dec 2025 13:01:24 +0000
Files and hashes: 1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: CJPF7USTNg9ypdFvC08rOkjA78QGuGw5PLxmzSsP4zA=)
2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:80:82:9c:0f:f1:29:d1:8b:36:d1:c2:ed:20:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Dec 11 13:01:24 2025 GMT
Not After : Dec 12 13:01:24 2025 GMT
Subject: CN=08d29a6ed6b7567788ec7d0408da091128b639da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:34:ca:13:e9:03:ee:a7:2a:f5:78:b1:de:
03:f6:bb:18:0f:95:24:94:78:76:cf:aa:a5:12:13:
10:56:4d:50:13:86:f6:14:6b:56:43:93:be:01:59:
5b:6f:c5:c9:92:83:de:a1:07:6e:6e:84:af:79:c9:
90:4a:b4:62:75:e7:f5:83:55:11:b6:4d:e3:41:b3:
8d:cc:dc:c8:e4:9e:e7:39:1c:73:8a:2f:9e:17:32:
6c:30:76:d2:27:52:e8:ad:4f:ca:de:fe:0f:06:97:
d3:e3:f9:d1:bc:a8:a9:5b:41:4c:67:7b:06:9b:b9:
d4:8f:9a:69:b6:03:7f:3e:61:68:f8:e7:e4:c0:b2:
95:48:02:a9:fb:33:28:b0:de:af:2e:73:9f:0f:0c:
8a:e1:f0:33:cd:08:4f:63:c4:1d:f8:2c:3d:2c:30:
43:0e:b3:a2:55:eb:1a:53:58:52:cb:ad:08:62:61:
d2:4e:bd:f1:ef:6e:e7:89:e8:8a:d7:95:31:c7:c9:
d2:bf:b6:4d:4b:99:3e:f5:ea:a8:dc:8d:c9:b4:1d:
f8:a3:0d:d1:2d:bf:6d:8d:af:4d:34:c8:47:86:3b:
20:19:3a:58:40:aa:5b:7e:57:a1:c4:03:47:0c:49:
6f:5b:8f:25:64:63:83:64:b8:cc:27:cc:43:68:87:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:9A:6E:D6:B7:56:77:88:EC:7D:04:08:DA:09:11:28:B6:39:DA
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:1c:13:cb:5b:8d:85:92:e1:e4:45:e1:02:fe:59:46:ce:
d8:c5:cc:82:ab:3a:42:7c:d5:6a:7e:6f:14:7f:34:56:f7:5a:
0a:13:87:7f:f3:ad:16:27:13:5f:02:54:1b:2f:12:47:d1:db:
a1:91:b3:be:38:00:35:f1:1e:e5:d4:0c:2f:cf:b9:99:25:19:
fd:7d:d8:81:c2:ba:2c:e1:13:d6:ff:06:c1:52:78:aa:61:69:
3e:cf:f8:e7:22:80:8c:01:ab:63:dd:e8:e5:7d:bf:d3:80:46:
b1:52:72:28:10:6f:16:48:1c:81:f1:48:17:69:bc:6f:8f:da:
df:33:b4:8c:d8:33:a2:5d:79:4a:ff:dd:4c:b6:a8:ae:99:f5:
5a:4f:be:69:b5:d3:2b:52:87:8b:c4:53:97:a3:85:22:af:bc:
45:63:75:8a:c6:ff:6c:69:56:ed:e4:01:93:c2:bc:66:2c:fa:
4b:ed:32:5f:dd:bf:b3:4b:18:2f:32:12:d9:49:f8:fb:4f:a0:
35:97:4f:36:ee:2d:3a:a3:1c:1d:19:5e:1c:c2:16:18:50:c4:
f5:36:57:59:95:f9:08:b9:92:9e:9f:05:e1:19:e4:c6:35:f3:
c8:31:97:88:f6:8f:d0:bd:e5:75:41:d9:8b:9c:d1:8c:43:5d:
7d:e6:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 19:26:39 2025 by rpki-client