This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: YJ93cVs4wkblzRmHPJCT/KnOnvweTmdqT0xdKz2d9TY=
Subject key identifier: 8B:59:8E:0F:3A:B4:7B:C7:F1:C1:B6:F9:8E:F0:34:38:D5:39:DA:EE
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019B0AECBE6CBCA7810F8D89FE414BA55977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 116A
Signing time: Thu 11 Dec 2025 01:00:45 +0000
Manifest this update: Thu 11 Dec 2025 01:00:45 +0000
Manifest next update: Fri 12 Dec 2025 01:00:45 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: TjpJjcuyANtrBUwpt-ltVjypyq0.roa (hash: 6I0zwsgf60E7cL93x6R+EuPe6JdbwhpcovM4vLNnw1A=)
5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: 1jWoHOKllLT9SGpi5Pl+HiPLURqf7x9oc1lqzjX6e80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0a:ec:be:6c:bc:a7:81:0f:8d:89:fe:41:4b:a5:59:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Dec 11 01:00:45 2025 GMT
Not After : Dec 12 01:00:45 2025 GMT
Subject: CN=8b598e0f3ab47bc7f1c1b6f98ef03438d539daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:21:fc:f3:70:36:1a:13:ef:50:cd:89:12:
43:a9:e3:38:7f:aa:2a:7f:5e:f4:d8:8c:9c:36:7e:
ff:c7:94:e5:f8:bd:48:8b:a6:d8:82:17:cb:aa:ed:
35:d5:9e:a0:3e:5b:92:a7:51:40:5f:93:4d:a2:9e:
c0:23:3a:a4:03:dd:f9:a0:a2:bd:4b:5c:e2:05:df:
d8:61:19:26:08:ef:3c:a7:2e:63:3f:dd:a0:b4:0a:
9c:84:19:b9:8e:3a:aa:22:25:fc:21:76:56:c2:ee:
69:4e:01:3f:be:34:c0:2e:6f:58:60:7e:e6:6a:f8:
3e:32:24:be:c3:f4:10:11:1d:ae:b5:3b:02:f9:69:
60:0a:52:c6:37:90:28:98:82:bd:23:6f:18:30:84:
a3:92:79:38:23:16:33:b2:22:87:6f:9c:9b:39:ef:
74:7b:f6:a4:a5:f5:85:48:b5:7f:e7:36:76:bd:33:
3b:e8:46:26:18:36:c3:8c:8c:b7:9d:9c:74:a7:03:
2b:03:f5:0d:a9:ec:b8:a8:71:6f:28:06:d4:68:ca:
b1:a6:b3:8c:da:94:6d:f8:3b:c9:db:d5:ca:da:81:
22:a9:f9:03:8e:17:77:45:3e:38:50:dc:55:03:c1:
29:0c:b6:4d:93:7c:4d:35:cb:11:2c:c3:9c:7c:d3:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:59:8E:0F:3A:B4:7B:C7:F1:C1:B6:F9:8E:F0:34:38:D5:39:DA:EE
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:56:dc:85:4d:5e:dc:35:be:40:0f:e5:d7:ab:ad:de:72:8c:
58:3f:f0:6d:d4:47:67:6b:9e:1f:cf:4b:86:fb:cf:06:5a:53:
07:7e:12:b1:ef:f5:08:3a:e0:6f:b2:86:6b:62:f2:05:17:8a:
29:19:59:df:46:a6:08:21:66:cd:97:f8:ee:d2:ea:e8:61:d8:
9b:0f:21:4e:d1:20:8b:37:02:50:0c:4c:4d:2b:ba:15:42:33:
79:53:e9:f5:d8:f8:7a:78:b9:ef:e6:bc:29:25:da:63:3f:77:
b8:c5:ac:df:57:25:e7:cf:15:39:ba:06:5e:d5:d5:c4:46:10:
16:34:ba:9a:87:e8:6f:b9:24:d8:c7:45:79:2c:cd:b2:df:2b:
5c:9b:95:e6:4b:99:5f:42:18:cc:ce:35:10:b6:d4:28:7c:da:
75:41:9d:27:e9:8f:16:a1:27:18:24:f0:96:a8:22:3a:ec:db:
a1:d0:e6:01:df:cd:9d:ac:52:1c:af:a7:c9:65:70:6c:07:39:
f7:a3:ae:58:31:22:73:94:48:4f:fc:0f:03:20:f7:33:79:2e:
fa:f4:a8:0c:f6:9a:d1:a3:c2:e8:ff:39:3b:72:4a:c4:0c:94:
51:61:44:26:a7:07:c8:ec:70:09:54:c7:e0:c1:0f:52:58:7d:
f2:90:6c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsK7L5svKeBD42J/kFLpVl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUxMjExMDEwMDQ1WhcNMjUxMjEyMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg4YjU5OGUwZjNhYjQ3YmM3ZjFjMWI2Zjk4ZWYwMzQzOGQ1MzlkYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTIh/PNwNhoT71DNiRJDqeM4f6oq
f1702IycNn7/x5Tl+L1Ii6bYghfLqu011Z6gPluSp1FAX5NNop7AIzqkA935oKK9
S1ziBd/YYRkmCO88py5jP92gtAqchBm5jjqqIiX8IXZWwu5pTgE/vjTALm9YYH7m
avg+MiS+w/QQER2utTsC+WlgClLGN5AomIK9I28YMISjknk4IxYzsiKHb5ybOe90
e/akpfWFSLV/5zZ2vTM76EYmGDbDjIy3nZx0pwMrA/UNqey4qHFvKAbUaMqxprOM
2pRt+DvJ29XK2oEiqfkDjhd3RT44UNxVA8EpDLZNk3xNNcsRLMOcfNNRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItZjg86tHvH8cG2+Y7wNDjVOdruMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1bchU1e
3DW+QA/l16ut3nKMWD/wbdRHZ2ueH89LhvvPBlpTB34Sse/1CDrgb7KGa2LyBReK
KRlZ30amCCFmzZf47tLq6GHYmw8hTtEgizcCUAxMTSu6FUIzeVPp9dj4eni57+a8
KSXaYz93uMWs31cl588VOboGXtXVxEYQFjS6mofob7kk2MdFeSzNst8rXJuV5kuZ
X0IYzM41ELbUKHzadUGdJ+mPFqEnGCTwlqgiOuzbodDmAd/NnaxSHK+nyWVwbAc5
96OuWDEic5RIT/wPAyD3M3ku+vSoDPaa0aPC6P85O3JKxAyUUWFEJqcHyOxwCVTH
4MEPUlh98pBs0w==
-----END CERTIFICATE-----
Generated at Thu Dec 11 05:18:56 2025 by rpki-client