This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: 6x1e9hDk4/r0ylKECfidZzRgQ48YfJHmZVbofeT20nM=
Subject key identifier: 3E:DE:52:BF:F7:61:1D:CF:E2:A9:92:30:70:19:F9:F8:83:1D:E4:A6
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019AF352AC456E0FCADD71B5B8C86E472D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 1768
Signing time: Sat 06 Dec 2025 11:01:12 +0000
Manifest this update: Sat 06 Dec 2025 11:01:12 +0000
Manifest next update: Sun 07 Dec 2025 11:01:12 +0000
Files and hashes: 1: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (hash: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=)
2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: zXp/G1rQ9Mzo1lV/noixw+FkNQLbn2bZrLdPfvQMcAw=)
3: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (hash: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=)
4: hfyAz_QYTue5Wbe5vJxSavU_6HY.roa (hash: 4N/5nYpUdCpyKpn/U/R7SrWZ90U5qc3XnEimDy5XhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:ac:45:6e:0f:ca:dd:71:b5:b8:c8:6e:47:2d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Dec 6 11:01:12 2025 GMT
Not After : Dec 7 11:01:12 2025 GMT
Subject: CN=3ede52bff7611dcfe2a992307019f9f8831de4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:2f:6a:85:62:2e:0b:d6:a7:e4:50:a1:1b:
9d:08:99:7f:09:0e:ff:75:06:17:77:9b:15:06:98:
ee:34:db:ea:21:af:03:55:0f:21:29:18:6d:23:be:
4f:0d:83:58:d0:a7:62:91:00:47:c9:6f:ac:8f:56:
ab:e8:01:8d:ec:91:05:8a:53:c6:b8:58:a0:27:eb:
47:43:1a:1f:aa:1a:c6:90:f7:e9:85:ae:e2:b2:a0:
69:80:23:73:2b:41:36:d5:15:0b:f7:b5:9b:f3:39:
54:31:25:c7:73:57:77:57:6e:e8:af:03:08:a1:a4:
7a:3a:6d:42:76:46:36:ca:cf:66:2b:22:44:3e:0c:
4a:5e:6b:46:be:a2:09:df:72:f9:57:bc:98:fc:07:
4e:37:5c:dc:f6:bf:6c:4d:bd:aa:67:a7:41:ef:0b:
a9:9b:d0:d2:4d:fc:61:fe:3a:b0:1b:ea:9f:d3:d1:
a0:89:ea:0d:d0:ff:13:1f:0c:b7:a9:ff:66:25:a1:
b9:30:f0:c5:e5:75:88:6c:8d:7e:3b:10:74:42:3c:
97:e5:c1:d9:35:89:ed:10:22:0c:f3:4c:4e:80:ba:
45:d2:20:cd:50:88:77:46:01:22:d7:81:3f:d6:aa:
b1:42:88:76:fc:8a:eb:80:2e:39:35:cc:2f:f6:82:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DE:52:BF:F7:61:1D:CF:E2:A9:92:30:70:19:F9:F8:83:1D:E4:A6
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:97:77:51:98:20:d9:78:9b:90:ed:e6:bc:15:4a:cb:79:
21:d5:47:fe:b3:de:ed:51:05:2e:89:48:11:14:91:ff:c5:6a:
fe:7d:3c:7b:e8:78:ef:e6:87:53:a1:6a:16:95:39:1d:44:98:
02:cc:4d:46:a5:d8:38:3a:29:f2:85:00:ff:38:fc:56:e9:0a:
75:71:d2:4e:ef:d0:27:4f:53:ba:44:fd:e8:7e:a3:b3:3e:6c:
2a:6c:1a:30:1a:07:93:52:d4:3f:ea:0f:a9:99:54:06:fc:dd:
ce:51:b8:50:71:cc:8f:67:ff:76:bd:82:aa:4c:b5:e3:7a:94:
8e:05:75:bc:50:64:b2:8a:f2:2e:ad:b1:f5:e9:f1:d5:a1:61:
19:9a:91:cd:dd:c1:75:ea:e2:7a:25:95:16:0a:8e:e8:e6:fd:
15:d5:a7:a0:68:d6:6a:dd:08:8a:ab:5e:f5:d8:65:17:13:b8:
00:fd:a1:6c:0e:fb:9c:a1:30:d9:af:db:5c:33:73:86:2b:0c:
97:17:c6:bb:ca:4b:07:c0:88:ba:93:44:a2:bb:99:61:18:fa:
db:b6:f0:69:36:cb:74:d0:c7:d3:19:79:bb:e6:0c:73:8a:45:
28:a9:64:85:3f:62:ff:8c:fd:e9:9e:8f:52:60:cb:25:71:c0:
70:69:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:39:53 2025 by rpki-client