This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: /KmorMkLRUcGGii+JfQBEqVBICAF3zZ3HgX7Dt68BCk=
Subject key identifier: B0:85:35:EF:4E:F3:DD:C8:B4:0B:27:9C:C9:77:46:8E:56:10:E6:7F
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019B1A974A1A66C76CFD05149166D763E25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1776
Signing time: Sun 14 Dec 2025 02:01:20 +0000
Manifest this update: Sun 14 Dec 2025 02:01:20 +0000
Manifest next update: Mon 15 Dec 2025 02:01:20 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: vIVwRo9mA0EixiN2ISq7Uy6btQSFRunwYi1pmsWuhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1a:97:4a:1a:66:c7:6c:fd:05:14:91:66:d7:63:e2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Dec 14 02:01:20 2025 GMT
Not After : Dec 15 02:01:20 2025 GMT
Subject: CN=b08535ef4ef3ddc8b40b279cc977468e5610e67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:2b:5c:4f:69:2b:58:a1:6d:50:9a:19:e9:
5a:4f:e4:a8:35:e1:a5:28:5e:b4:64:32:df:74:a1:
58:9d:a8:3c:85:8d:5f:8f:e2:74:6d:38:75:2e:bc:
c3:a5:6c:ff:16:da:d5:b1:2a:dd:4d:b5:b0:c6:b3:
63:93:81:f1:a7:3d:c4:93:e0:a0:bc:f9:3a:08:c6:
ef:32:f3:bc:84:0a:cc:01:73:9e:57:53:f9:83:57:
2a:db:ad:6b:24:ed:1e:1c:d7:f3:3d:9a:87:61:38:
4f:d9:9a:30:72:3a:64:0b:36:dd:9f:1a:7b:0a:eb:
08:ce:dd:5a:c1:fb:4d:a6:62:76:d2:3a:94:62:14:
a6:22:2e:16:81:43:3e:12:6d:8d:0b:62:13:1d:63:
10:06:65:f0:a2:ec:03:41:cd:ae:7f:01:f1:fd:47:
8f:12:2f:84:2d:ba:9f:68:ba:0e:a1:b0:c7:f2:c2:
ad:80:e5:c6:00:b2:ea:5f:d6:91:2d:48:72:41:ee:
c8:af:57:fe:35:4f:88:23:fb:47:b0:9f:ce:ca:8e:
8e:92:4b:27:3b:2c:14:ad:4e:ea:52:d2:79:72:cd:
1a:61:01:90:a9:73:14:65:82:e3:6a:c6:03:7b:e3:
13:94:8d:bf:2e:db:ef:79:3a:d7:17:07:fb:66:89:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:35:EF:4E:F3:DD:C8:B4:0B:27:9C:C9:77:46:8E:56:10:E6:7F
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:ca:07:5e:89:ec:b5:25:36:96:a3:0a:04:55:d7:0a:4e:
f4:d8:7f:de:c5:db:cd:1b:99:b2:e0:3b:7c:70:03:fa:09:fa:
70:21:e0:ae:49:76:fe:98:2b:27:41:4c:e6:43:b6:92:92:0a:
64:17:81:25:3f:41:07:4e:36:88:a3:dd:6c:52:a5:cb:0a:28:
2d:d9:e3:73:02:ce:02:10:ed:e9:d7:f7:d0:2f:56:3f:22:af:
5f:3b:9e:93:ba:6d:d1:9f:60:ae:a0:d5:2e:65:8b:e5:88:ef:
63:67:5b:96:7a:28:b9:bf:60:1c:0d:f4:e7:a9:15:97:1f:d3:
2f:04:72:f4:f1:b2:c2:25:db:85:48:d5:5c:b5:d5:ca:26:d4:
67:6f:c3:17:ab:5e:96:11:61:53:19:73:c1:ce:04:33:49:d7:
61:73:8d:63:4d:5f:bc:4e:6f:a9:94:bf:71:79:7a:bc:7d:a6:
cb:eb:83:d4:07:16:e2:74:87:be:bc:3c:a9:c1:a8:61:0c:3c:
b7:54:46:34:76:f2:b5:db:d9:fe:34:5f:52:e3:fa:36:f1:06:
8d:ef:cd:97:f5:ff:a9:48:ee:32:1d:59:70:d1:68:c6:40:88:
6d:5b:0b:a5:9a:18:eb:08:d2:c5:12:eb:36:88:0d:e3:c4:93:
c1:06:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:50:38 2025 by rpki-client