This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: hCXDp9diE9S8CntAiy/KZIZyXTf34n48CXrJRx1FqGg=
Subject key identifier: AD:DA:3B:EF:C6:49:31:EA:E6:6C:3C:5D:B0:AD:E3:9B:02:80:8E:71
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019B1A29043D9FA44D346F1BEB310F1217FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 131B
Signing time: Sun 14 Dec 2025 00:00:54 +0000
Manifest this update: Sun 14 Dec 2025 00:00:54 +0000
Manifest next update: Mon 15 Dec 2025 00:00:54 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: ScrFjW6yowcPTP9x6mgUAcJ0TIAffcLigczhqZAQldg=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1a:29:04:3d:9f:a4:4d:34:6f:1b:eb:31:0f:12:17:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Dec 14 00:00:54 2025 GMT
Not After : Dec 15 00:00:54 2025 GMT
Subject: CN=adda3befc64931eae66c3c5db0ade39b02808e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:8a:fe:e4:fd:49:69:45:97:2a:c7:ec:71:
86:5d:4f:c6:cb:7a:51:c8:8b:39:88:6f:ad:e1:b1:
fa:c6:9b:c3:54:3b:b0:e1:a3:f3:8c:48:8b:01:8f:
b7:68:e3:3b:f0:8e:92:8b:da:22:a6:4a:2a:22:08:
3e:bd:27:f5:bf:1c:b2:af:4f:b8:41:3c:af:ad:99:
c6:e0:54:10:60:48:83:97:b0:e5:f0:6c:2f:a5:b8:
98:fe:b6:1e:0d:58:b2:55:29:5c:a7:9f:60:fc:80:
50:5e:9c:be:cd:c5:ca:b4:6c:4b:5b:93:4f:91:3a:
74:55:7d:d6:4f:73:a7:ed:9f:49:47:3a:f7:bb:73:
88:53:5f:9c:74:23:53:17:f3:cd:9d:96:c2:b3:b9:
d2:a5:4f:58:8a:49:b7:da:e4:a3:1c:8b:95:b0:ff:
6e:fb:0e:ed:e4:e4:10:bf:9b:07:33:bc:df:52:eb:
fa:0a:61:eb:27:ee:3c:13:22:42:d3:99:7c:6f:98:
7c:68:16:79:d3:cb:34:9b:67:aa:dc:b9:77:1a:ce:
7e:73:9d:05:ef:97:c2:88:ce:86:5a:2b:de:5a:f9:
40:6e:81:38:44:45:72:57:54:46:21:3f:bb:e0:41:
37:c0:7c:56:ea:8c:c7:54:8b:de:88:16:f6:3d:db:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:3B:EF:C6:49:31:EA:E6:6C:3C:5D:B0:AD:E3:9B:02:80:8E:71
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:20:d3:ad:6e:e4:f7:44:d3:7e:46:c0:74:c0:bf:c7:da:
d6:95:02:0a:df:45:fa:69:77:4b:07:13:be:22:df:cd:a7:80:
bc:b7:ba:9f:db:9c:d7:47:12:ef:5c:ae:8c:b8:53:67:4e:11:
b3:6d:55:57:0c:60:94:ac:58:bb:84:f0:2f:bc:b3:28:74:7d:
21:76:6b:5f:64:c2:ae:2f:93:35:a3:1d:69:6e:7f:be:12:4c:
a4:e4:a4:71:4a:51:eb:bc:2b:33:7b:c4:ce:8d:85:d8:d8:a6:
bb:39:8c:fe:e9:ab:e8:15:b8:dd:63:44:6d:85:7a:f3:80:48:
27:4a:fe:f9:0e:81:c3:b9:d0:ad:6b:96:67:32:d0:ec:41:5a:
8d:0c:dd:b1:cf:59:1c:ce:73:e1:99:42:db:88:f3:96:9d:d3:
52:8c:c5:30:45:81:0f:e6:8f:4e:3a:93:44:22:16:aa:f8:24:
ab:c5:32:f5:01:9e:91:b3:c3:42:44:48:51:31:f2:2d:27:8a:
04:bc:ec:95:4e:08:83:6c:ce:e1:fe:2a:9e:17:67:85:20:db:
01:35:19:ae:b0:65:e3:a8:b2:9d:23:eb:8c:59:da:28:e3:7d:
4c:48:43:45:3c:a5:c0:aa:e8:00:57:2a:fd:e1:f3:b4:03:2c:
94:c7:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:53:25 2025 by rpki-client