This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: RRnzg3tNYfaWUtEOzMgc+ikV7D+a3UGzPvlSWdCV2UM=
Subject key identifier: 03:75:E1:74:C3:2C:ED:9F:1B:42:A5:24:2A:69:5D:4F:50:3F:A9:93
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019B1FF4BF87EA89C461EB3C91237E29EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 177C
Signing time: Mon 15 Dec 2025 03:01:32 +0000
Manifest this update: Mon 15 Dec 2025 03:01:32 +0000
Manifest next update: Tue 16 Dec 2025 03:01:32 +0000
Files and hashes: 1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: lsG3zJu2WqCBsvZFNZMXuQ9ZGHzY9JpOGqeMD/jG5UY=)
3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1f:f4:bf:87:ea:89:c4:61:eb:3c:91:23:7e:29:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Dec 15 03:01:32 2025 GMT
Not After : Dec 16 03:01:32 2025 GMT
Subject: CN=0375e174c32ced9f1b42a5242a695d4f503fa993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:d6:8f:d4:85:ab:1c:8b:16:24:3d:26:b8:
bc:72:a8:4c:fe:29:3a:cd:e3:e4:1c:10:15:20:bb:
3a:bc:b1:a1:84:20:02:14:fc:cf:1f:3d:38:b6:59:
64:2b:18:f5:09:61:32:20:29:90:a0:9a:e8:3e:fe:
88:7c:d0:3f:3f:be:3d:a2:e6:e7:37:bd:ab:f3:e6:
e8:ee:14:14:1d:34:56:04:c8:f2:40:9b:c1:c0:24:
8f:9d:87:fb:cb:80:15:97:66:c8:2e:ee:f0:de:30:
cf:78:14:3b:8d:69:ce:a1:61:32:c5:5e:6c:0c:91:
ac:af:26:58:fd:1a:f8:eb:e3:1e:4f:d0:07:18:99:
5d:1a:d9:1a:f5:8d:74:16:c2:4a:7b:03:32:2c:5e:
ca:80:af:31:20:35:e6:13:eb:d8:71:d3:40:15:b9:
f4:b2:61:58:bf:bd:4b:76:3a:5c:6a:53:62:61:cb:
a6:7a:4d:af:75:70:10:8b:05:c4:12:b9:8a:09:36:
48:61:ed:bc:61:00:d8:15:5d:29:3f:b1:5f:8e:4c:
3b:bd:22:10:92:9f:59:84:14:c8:49:cc:8a:f2:e7:
64:2f:da:1a:21:87:07:27:5a:b4:68:8f:69:9a:13:
3c:6c:78:43:9d:88:75:20:c0:b7:0c:40:4d:0e:c5:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:E1:74:C3:2C:ED:9F:1B:42:A5:24:2A:69:5D:4F:50:3F:A9:93
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:68:56:d7:21:4b:49:30:3a:85:ac:d4:09:85:b1:12:ca:
42:9a:6f:b3:71:1b:f2:de:9b:04:89:aa:32:d5:24:f3:4a:1c:
fe:c5:76:f8:82:aa:e6:f9:92:f0:b4:c5:d0:12:b7:43:15:f9:
5d:c9:b2:e4:47:6e:4e:15:25:03:37:8b:d1:b6:83:de:b8:27:
9a:2a:3c:ee:08:7f:f4:84:96:5d:9a:cf:41:74:19:25:19:5c:
61:4b:47:03:50:50:d2:8a:23:fa:bc:4e:34:77:a0:3f:7e:3f:
e1:b1:1f:08:f9:ea:b5:75:9e:72:50:59:b5:a7:54:0e:ba:81:
a0:1d:96:8c:03:ce:4b:42:d2:d2:84:47:eb:f6:46:58:87:b2:
9a:75:92:83:7f:1f:46:be:72:9a:2a:21:af:8f:a4:8a:81:87:
83:16:d1:4f:4b:1d:a7:68:6a:7a:f1:ac:2e:2c:44:ad:b9:37:
e3:f6:71:60:c4:c4:f4:e4:fa:f7:09:73:54:b1:96:33:57:b8:
23:a2:75:84:31:47:37:24:ae:e3:08:09:10:0d:35:3b:da:d3:
3c:87:23:ba:1e:a8:78:dc:4b:b3:93:b5:89:2e:25:f2:63:5b:
ca:4c:82:d2:27:dc:de:32:f4:f1:92:95:f2:f8:ea:d8:9c:70:
35:00:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:03:09 2025 by rpki-client