This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File: GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier: pLIIW800f6IM2tuBuDCN6XJFvNYPz8f+djxjBVgW7kI=
Subject key identifier: CD:F0:81:8D:49:BD:CF:4F:67:F7:CB:67:3A:F1:BF:59:1D:DD:3E:11
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 019ABC9AB474355437903C68B8309D0CCBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number: 1746
Signing time: Tue 25 Nov 2025 20:00:46 +0000
Manifest this update: Tue 25 Nov 2025 20:00:46 +0000
Manifest next update: Wed 26 Nov 2025 20:00:46 +0000
Files and hashes: 1: BEsMLWTZET1iCxcF6Yr9DbU-sOY.roa (hash: lrX59TnlMsRdeVpivsyzgLMhZv4xei7A/LZNbKN1beE=)
2: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: C3EO6ZtQQOI0dyjKep4OS0zfrnXX26Xfmv9c4KvzLqE=)
3: Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa (hash: IEPnmuJHaBFNEPjVzbbu0LZ28Z15YinFb5L8V+9myGI=)
4: tSQQLL0kf6kwJJyAahpRS-4QjTQ.roa (hash: ROWhC0CwWY3GF+PkYJD3Eyf1AgXDuZrPy+fBil3clUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Nov 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:bc:9a:b4:74:35:54:37:90:3c:68:b8:30:9d:0c:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Nov 25 20:00:46 2025 GMT
Not After : Nov 26 20:00:46 2025 GMT
Subject: CN=cdf0818d49bdcf4f67f7cb673af1bf591ddd3e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:2f:69:6d:06:c5:b4:94:8b:af:b8:0d:85:
10:bd:2a:66:4f:ce:36:4d:9a:c9:85:24:09:30:0f:
16:89:53:d4:40:3c:ee:44:44:2c:19:04:22:fd:d3:
3c:a7:ab:0a:bf:7d:05:50:30:28:52:8d:88:6f:e3:
4b:1a:e1:e6:b5:27:2b:58:a1:bc:a1:5f:c2:f9:71:
63:14:93:a2:a2:1a:ff:2d:b2:86:13:f9:7f:73:48:
60:1a:b9:63:d2:36:fb:39:f9:2a:3b:ee:0e:99:79:
db:04:85:74:16:ac:f1:28:51:f2:4d:a8:5b:15:41:
25:7d:51:33:7d:37:97:b2:09:f7:2a:88:3a:2a:fb:
c8:72:92:b4:de:dc:25:c9:44:e4:ef:b2:9c:f2:05:
d8:bf:7e:81:4e:6c:63:41:cc:43:f4:f6:6d:fc:fe:
c4:f9:f8:03:42:25:e6:a7:e1:22:21:3b:07:77:ff:
24:8e:f2:9c:2b:06:f4:60:c9:a2:23:23:7a:b6:2d:
56:31:78:13:d2:78:f4:ba:05:96:40:fa:98:de:75:
89:7e:b4:1a:14:75:a2:d6:68:bb:e3:80:09:77:24:
b2:17:bf:ff:83:53:9a:b0:83:8c:84:1d:3f:46:9b:
a6:65:11:c9:ec:26:d9:75:76:df:df:ac:6a:80:61:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:81:8D:49:BD:CF:4F:67:F7:CB:67:3A:F1:BF:59:1D:DD:3E:11
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:26:28:89:6a:90:55:79:ac:c6:ea:ed:40:aa:26:5b:29:db:
d6:a1:ab:c8:2d:f5:ee:87:98:33:fb:76:c4:f8:5a:1b:70:42:
8b:11:72:fd:fe:e2:20:8c:2d:3a:7d:bd:56:b5:f0:ad:cc:62:
b2:a1:32:3c:7b:74:e2:5f:91:e7:e2:d5:6e:06:db:1e:4f:7a:
eb:e4:60:f4:08:5d:ed:d0:a5:42:08:e7:d2:14:30:fc:64:43:
db:a8:a5:10:ea:3b:8a:5f:a6:cd:a3:a2:15:46:81:09:a8:be:
f7:19:5e:61:50:53:52:67:51:4c:b3:1c:47:26:6b:db:8b:c1:
d5:b2:88:a3:c5:d2:8f:3b:02:4a:8e:da:5f:86:31:bf:08:8d:
1e:b7:ab:f0:96:b8:9d:1d:43:5c:6c:b8:0a:5a:c7:6e:94:46:
ad:44:f7:4a:86:03:17:a4:d4:7e:bd:b2:d9:2b:98:1e:b2:07:
4a:b8:d7:c0:fb:8b:6f:85:45:2d:95:58:b9:a4:b8:c2:42:28:
dc:50:49:80:c4:9e:0c:75:74:2b:82:87:e3:e2:c6:e0:ac:3e:
60:06:b4:98:d3:17:b3:66:d0:1a:f2:98:36:b6:b5:88:61:1d:
67:67:9d:ea:6d:3f:66:01:19:65:a8:c4:ce:01:e9:1c:2c:0e:
18:cb:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 03:50:32 2025 by rpki-client