This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: gbj06jOatwLJgapMrCr18mpMRNvKE1fJqrNY/hbAWDE=
Subject key identifier: DC:97:63:D0:7F:37:0D:4A:1D:EB:3A:3E:81:65:72:D6:60:5A:F5:B3
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019B6BB3209FBB7EA6F5CCAA16057C6F4EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0697
Signing time: Mon 29 Dec 2025 20:00:59 +0000
Manifest this update: Mon 29 Dec 2025 20:00:59 +0000
Manifest next update: Tue 30 Dec 2025 20:00:59 +0000
Files and hashes: 1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=)
2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=)
3: 6zV97dJ4xQGri5YZtNgkYLMqa5k.roa (hash: djZiLuc0yQH0F11utvsJqgMrXcwZTVdReJ+W5OxQEEs=)
4: 9HcnWARQjSSonGaamiNJGNhyVC4.roa (hash: D9oNz9Yh8nwsaWTmgScYDOQEy6klcI9lva9L7TyjeYQ=)
5: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=)
6: A_froRO9pbrJLDVEzpfQl91eXok.roa (hash: 2umJ0pPia+IzIixJA1uhoZmkKwHmxLfx14SkgokEFl4=)
7: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=)
8: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=)
9: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=)
10: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=)
11: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=)
12: MnDSS9RzqfRLUOztMc088Qj2tec.roa (hash: 12P6aNOzHV1BlCTklqy88k9SBPsXXY3O99fGRYatyGI=)
13: Nd-3OgfsEaz8b4S5w3TUrvK6cro.roa (hash: mF1iVKzCaasZfOfUE/ngfbabUJDFZXu+iLVs9MfoTkU=)
14: QGLMqaCJPT38Acp6hcxFsfLowlw.roa (hash: 4sijIF9r70OKgj/VQlkAIXGxvo5BA3s2HWewEdphRzg=)
15: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=)
16: YBy000w0AHpR1nPLEkw0zwU0dV0.roa (hash: bQJxvj2zN3/OMtsDqLLLAZhZ+WTAOLTUNHmo1xJ7g9E=)
17: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=)
18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: m8rJFPaQgMoGyI6uZG64j54wOzZh5n0IZ5Bh3zTofiE=)
19: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=)
20: fiCGtzKKE-k-7cha3uNWaHMAwQE.roa (hash: DG4Oq1uFkwkg9DHh3q1fJzBn5icOEgMS7FPAHL+4K8o=)
21: msuKydImanFvzffreUXsPKSyrYI.roa (hash: StMSaAhYZIrcs8BRBAoF4EyvRe9iy8QIwB9HLAKysnU=)
22: olt9_dWJPDD4A1-gNvx3OH6cyiI.roa (hash: a6+ylHvPQBgtIyMA+Dg7vQp0JQ6EMGqrOIKWKotQrKo=)
23: tjlqpM7Grwa3ntR0hkW62RQoiUs.roa (hash: Hlku91Metogu7Ir6NyRMT083wklWP/gul25jTIpxWHw=)
24: uzUDdb_gCr4SQ4b4hhdZisRV9YI.roa (hash: 0hxHgjyF/0bOGbaVLPkMhO4k9muLkCTKZm848PYfLVo=)
25: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=)
26: w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa (hash: YDrr6E1j35eer9d2XxL6nLYIzyCqbmfyxlWv4gXRs3M=)
27: x7eLSArXfKOvuDeVf671PG61MTU.roa (hash: r6ETft1LI20v6JjEysljSnODPklVmMLXu8JFH/sQMAk=)
28: zijCKbm0k4e2H6mTon0fNc6-Ros.roa (hash: B2EHhBdECJs+teibHga6HQDVkr8SKIJgosCZ5kAJfps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Dec 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6b:b3:20:9f:bb:7e:a6:f5:cc:aa:16:05:7c:6f:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Dec 29 20:00:59 2025 GMT
Not After : Dec 30 20:00:59 2025 GMT
Subject: CN=dc9763d07f370d4a1deb3a3e816572d6605af5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:87:ef:e8:67:62:d2:bd:7c:af:aa:7d:22:
9a:99:33:5b:1b:e4:9b:63:0c:c6:56:a3:57:d4:13:
f7:53:01:1c:f6:1c:c1:2e:44:06:af:9b:fc:c2:b3:
fb:0d:40:c8:f6:a5:ca:18:4e:e3:9e:7e:c8:d8:09:
0e:63:1c:e7:bd:80:08:8b:82:07:82:99:ae:aa:78:
87:dd:6c:bf:ba:f2:fb:d0:7a:49:cc:a6:56:a0:6a:
43:61:85:19:1b:9f:6f:12:2f:2a:60:01:84:3d:f2:
a8:10:7e:7c:d6:2a:54:63:39:ab:88:de:31:79:a7:
d0:10:48:7d:cd:bf:73:c7:f0:f5:83:81:10:3c:65:
c4:64:cd:33:c4:97:1e:e6:d4:53:5e:5b:45:21:99:
14:4c:74:36:09:53:9b:1b:fc:8f:f6:3f:90:e8:e8:
27:10:b9:ac:a6:79:a0:18:8b:38:e2:ad:a6:83:19:
47:29:c0:e3:ea:e5:54:72:24:ad:94:a1:c6:77:d8:
48:39:6e:43:cf:6d:cf:ef:3a:f3:53:7f:33:29:43:
ae:8f:d6:14:a1:ca:5b:4f:b0:41:f3:f2:b6:40:30:
ab:d3:c0:43:2a:cc:57:71:b6:15:59:da:1a:5e:d7:
ff:59:a9:7b:ba:0a:e9:85:7f:62:4b:d1:46:d0:df:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:63:D0:7F:37:0D:4A:1D:EB:3A:3E:81:65:72:D6:60:5A:F5:B3
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:74:91:dc:6d:2f:a5:cc:af:1b:aa:f3:34:a9:f6:e7:12:
b7:22:5e:10:d7:10:74:9f:c9:e9:bd:86:0f:56:77:07:27:ea:
3f:fd:e7:02:a1:c2:76:29:cb:b9:ba:65:ef:f4:8a:38:40:c3:
4d:1f:41:06:11:17:61:73:4f:bd:80:78:f9:1c:04:65:cc:80:
d7:2a:a2:80:0b:41:8f:1b:1f:1e:9a:b3:62:1c:5c:31:6a:96:
ab:f0:0e:75:67:70:eb:d4:6b:1a:76:3e:2a:4a:6e:b3:d4:a9:
bc:cc:bf:6f:ad:f3:e6:f7:c6:4a:75:3c:89:96:35:4f:42:ba:
35:6e:a7:74:a0:0d:a2:08:27:23:f5:cc:81:0b:d9:61:59:23:
8e:f8:ca:90:6f:9c:70:f6:c2:0b:71:02:e8:c9:30:37:a2:a9:
3c:65:53:40:fc:b8:1c:55:ce:b2:74:92:07:4a:5c:2b:99:6f:
a9:28:ee:6a:57:44:06:08:b2:f8:0c:85:bb:12:50:c7:76:14:
8b:7c:1b:c9:5e:4f:7c:3a:03:1b:20:cf:48:03:58:8e:e3:94:
60:2a:8c:85:fd:85:29:b6:63:c5:2f:c9:2a:87:34:4f:de:88:
ca:3e:21:98:90:8b:02:ab:d6:6c:6f:20:db:8f:c3:ef:a3:84:
c7:b4:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 05:24:30 2025 by rpki-client