This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: b7kL7Vl5ZTjlpk7x2JD7P264SRStYW52ZBltQz43fyk=
Subject key identifier: 3D:2A:00:E6:87:EA:FF:1D:C2:FF:A3:92:92:46:E2:C0:3A:8B:35:A9
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019B104A10278E19782A38A3D72F61714CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1775
Signing time: Fri 12 Dec 2025 02:00:47 +0000
Manifest this update: Fri 12 Dec 2025 02:00:47 +0000
Manifest next update: Sat 13 Dec 2025 02:00:47 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: uLUQLGvyrOMiO+olp81+gBJSoU8apHkmdtts0c5ayjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:4a:10:27:8e:19:78:2a:38:a3:d7:2f:61:71:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Dec 12 02:00:47 2025 GMT
Not After : Dec 13 02:00:47 2025 GMT
Subject: CN=3d2a00e687eaff1dc2ffa3929246e2c03a8b35a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:86:15:eb:73:f0:09:f2:1a:18:aa:88:c1:
31:af:e5:99:08:22:6c:78:14:dd:68:ec:84:e5:c3:
3e:46:ce:a6:9b:7c:9f:33:5a:b0:f0:54:aa:e2:47:
16:33:ab:79:80:0e:b9:55:5f:0f:dd:28:16:16:ad:
56:be:e2:b7:67:ed:a4:e4:6c:5e:89:3d:e7:26:d1:
77:9b:db:9d:bf:fa:6f:90:0a:f2:b5:18:28:44:ef:
a4:a7:bf:87:49:9e:b5:07:49:00:64:9d:30:87:76:
c8:bc:92:32:63:83:3f:22:eb:1e:ce:37:e9:b6:83:
82:2d:6e:fe:97:54:65:bc:1c:9e:d6:0c:b9:5d:95:
d0:66:28:77:37:29:e5:3f:bb:5e:fb:f8:c0:49:71:
bb:e1:13:45:a8:c9:80:bd:7d:4b:b8:00:a3:c7:48:
4c:48:14:c7:40:02:0a:4d:2c:57:b5:c6:3d:41:80:
47:0a:9b:09:b1:40:b9:96:c9:35:b0:5d:55:1a:4b:
86:5a:3e:3e:1e:83:06:5c:a2:cf:76:4d:a8:d0:16:
f3:2c:4b:b2:7f:9c:a5:59:6a:8c:c5:cd:4b:26:bd:
f4:6b:e9:07:e7:62:e4:20:17:42:03:6c:64:1d:6d:
93:b9:2d:06:de:99:9a:6c:e8:1d:4f:4d:22:2a:97:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:00:E6:87:EA:FF:1D:C2:FF:A3:92:92:46:E2:C0:3A:8B:35:A9
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:6d:83:c4:eb:6f:e3:02:96:fa:6c:6c:ba:e4:32:13:d2:
93:11:51:11:54:ab:ad:b3:78:5a:2c:8f:50:dc:66:dd:99:af:
d1:c3:bc:f1:a7:92:0f:71:33:9a:b2:0f:44:dd:58:5c:1c:81:
85:f6:55:01:31:7e:a1:92:fb:6e:c5:a7:1e:71:5a:6b:65:d3:
61:db:a6:79:d2:c4:84:9e:4b:98:eb:49:02:a3:90:e7:51:de:
61:0f:0a:6c:f6:bf:44:ef:f6:5d:76:5e:6d:2f:5b:e5:0c:bc:
55:55:57:2b:c4:4d:4f:ea:fd:b9:2b:09:3c:df:7d:a9:7a:fd:
c7:fe:42:d0:b0:c7:94:ee:5b:3a:da:d8:3e:2b:c0:c1:49:d0:
15:7b:42:8e:eb:34:20:9b:48:aa:ac:13:f5:50:21:aa:30:ef:
6d:1e:a5:2d:26:76:b8:9f:6d:e4:e5:a9:69:f9:13:af:ef:c6:
51:4a:df:5e:ff:73:43:99:f1:a2:43:ee:e6:dc:b5:52:3a:9e:
cb:4a:0d:0c:2e:67:a5:f4:fd:48:06:ab:9b:4b:d1:af:14:cd:
d5:8d:be:13:8d:1d:01:68:e5:2d:3d:cd:9b:f1:80:d1:85:7e:
0a:36:1e:67:7f:58:11:8a:8f:be:23:85:8f:a7:c4:19:6f:89:
25:68:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 05:18:40 2025 by rpki-client