This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: cbiU3frb0nBydooUsQFCcsp0blvPYvBGgWWR8+suxmw=
Subject key identifier: 67:9A:1E:F7:4F:AA:B6:1D:6A:92:CF:A0:A8:13:08:4B:4C:AA:03:12
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019B3A586898299ECFD9F487ACB9FCD06991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 178B
Signing time: Sat 20 Dec 2025 06:00:30 +0000
Manifest this update: Sat 20 Dec 2025 06:00:30 +0000
Manifest next update: Sun 21 Dec 2025 06:00:30 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: 2zlKOvbAvQZnhSVaWjsOOlM3Xzg.roa (hash: BfYATa29KVeAb0l3w0wWL4QpEZML5G/JVPVE014fS6c=)
3: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: ORoifP5JDClqMIQ9lY+l0DpecW/BEd8zQIyFoIdE98w=)
4: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:58:68:98:29:9e:cf:d9:f4:87:ac:b9:fc:d0:69:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Dec 20 06:00:30 2025 GMT
Not After : Dec 21 06:00:30 2025 GMT
Subject: CN=679a1ef74faab61d6a92cfa0a813084b4caa0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:a3:2f:a2:b3:37:93:16:4f:67:e0:2d:4e:
98:33:ae:a5:29:96:f2:f1:61:aa:3c:a9:ba:c3:ce:
20:df:45:20:ec:62:f6:5f:ea:66:66:2d:8c:2c:04:
97:fc:a1:cd:51:ad:09:79:cd:10:94:80:80:ae:0a:
b4:61:9e:4e:d6:06:d7:86:64:07:a9:9f:0c:bd:49:
7c:5f:da:1e:5f:2a:40:00:30:b5:23:e3:ee:f2:75:
99:4d:91:f8:82:d2:4d:26:04:e6:5b:53:b4:c8:45:
b1:4c:62:16:c6:83:c1:e2:79:ed:c7:2d:f2:78:1f:
5d:85:96:e2:ae:d5:e2:f4:94:f0:17:c0:4d:57:ac:
83:44:04:45:4d:1f:2a:c0:a3:16:f6:e1:e1:d7:b9:
c5:55:0d:ce:b2:36:f1:25:29:0d:44:84:19:23:98:
bc:48:b6:d7:e6:75:f5:52:a6:2f:25:bc:91:c2:73:
a8:dc:b2:e2:f1:49:82:95:c9:6f:db:a5:38:17:69:
5f:82:d2:10:8e:93:b7:7a:60:9b:2e:2d:ef:e6:7e:
01:09:e1:20:8f:8e:68:e0:5b:b2:6a:3c:10:4f:1a:
dd:6c:50:b5:a8:26:21:e0:de:fc:7e:6f:af:b2:c5:
c1:2a:95:35:2f:da:21:b0:a4:48:04:60:28:f2:fd:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:1E:F7:4F:AA:B6:1D:6A:92:CF:A0:A8:13:08:4B:4C:AA:03:12
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:06:4c:88:61:9e:12:52:0a:3b:22:5d:f4:da:26:49:61:
0c:36:00:52:45:00:ed:30:64:4d:50:34:c3:1b:3b:02:be:d6:
f2:0a:4d:27:fe:b7:77:cc:23:17:62:04:2f:4f:20:75:15:57:
74:70:ed:db:e5:ac:f0:99:1f:51:e3:b5:6b:f2:8a:d6:95:b5:
15:57:2d:d4:0f:21:8a:4e:e7:a9:1d:86:00:cc:73:42:ac:36:
0d:b9:da:f4:87:cb:74:86:91:d3:5a:11:aa:29:27:4e:57:1e:
ba:e7:8b:b6:d8:15:d8:24:e5:4e:65:3c:fa:c3:02:5e:37:89:
46:33:ae:6c:0b:8c:31:1d:47:ea:61:aa:ca:76:c7:4f:0f:a2:
bf:e8:48:42:7d:0d:bb:16:47:d5:17:8c:bb:de:ac:dd:cc:86:
20:bf:1a:84:39:62:26:02:ba:a9:b8:21:87:53:8b:a0:6e:6f:
25:86:30:14:a2:49:cd:89:18:b0:60:c1:36:e3:06:cf:b1:69:
e8:e2:32:ae:74:7b:b6:51:c5:64:c9:39:06:f8:5d:08:d7:ea:
ae:e1:7c:cb:af:e5:db:b9:3f:83:02:b1:74:82:f8:ca:71:1c:
77:4d:d5:7e:8a:83:1c:1d:22:80:bc:20:0a:9a:8a:0c:54:3f:
5c:de:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:53:09 2025 by rpki-client