This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier: 0dHv3IB289yCk4dmcEmdyAKZYubepKdZz7EU09pay8g=
Subject key identifier: 2B:64:DD:82:3B:A1:D1:C7:29:26:6F:EE:D7:A8:6F:F2:A3:B7:5C:2E
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019AF1D1BAC82D72B43A0977A800F3F2670E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number: 122C
Signing time: Sat 06 Dec 2025 04:00:45 +0000
Manifest this update: Sat 06 Dec 2025 04:00:45 +0000
Manifest next update: Sun 07 Dec 2025 04:00:45 +0000
Files and hashes: 1: 0mjmbcUYcJdUwsZqfFXQurt0QGs.roa (hash: vj/D2huTe28PQZ9MOq6LRDgSeNcaiaat155ny9UZvt0=)
2: 5JznkOHDsnezLypnW6QUHIz_JqI.roa (hash: uAlkr8hXMWL34v9FNVsgW8wHLyGgQu70yPukhjP+1nM=)
3: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: QOOgZwNBJbhdmDSqtMU/njmShiS4EiRd9jSV1VvCS5o=)
4: T94PGq-eWjYniItYGztzb3OiEUY.roa (hash: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:ba:c8:2d:72:b4:3a:09:77:a8:00:f3:f2:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Dec 6 04:00:45 2025 GMT
Not After : Dec 7 04:00:45 2025 GMT
Subject: CN=2b64dd823ba1d1c729266feed7a86ff2a3b75c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:e3:d0:5b:a9:07:be:2b:5d:53:36:cb:41:
2c:34:c5:9a:a4:77:63:fa:41:46:1a:ed:7d:4b:ba:
44:e3:3c:e6:7a:8b:ee:f1:29:1f:8b:f9:14:6a:f9:
7b:e1:41:a4:fd:fd:fb:a6:6e:9c:1f:e5:6d:c4:59:
e9:2c:dc:90:08:54:55:45:43:10:d8:59:ee:65:76:
cd:cf:86:36:c1:fb:28:1f:d1:0d:cf:49:b6:f3:5b:
ad:db:e9:04:75:cb:f1:41:0d:0b:5c:12:4b:55:82:
1f:e8:ed:63:98:8e:f9:ab:cf:0e:8a:5d:36:ae:8d:
39:89:08:1e:23:55:d9:52:9b:32:a6:d1:6b:fa:c4:
39:48:bc:df:c9:a6:0f:c2:34:8f:28:f5:7b:5f:2c:
54:4a:03:66:c6:f3:d4:75:e6:94:22:23:b1:95:e0:
28:73:b0:da:16:2e:76:e0:bd:43:c7:5e:ce:8b:0f:
08:3c:cc:d7:80:f6:13:34:53:1d:0f:92:f5:1f:62:
51:3d:90:a5:bb:ca:59:46:e9:99:69:8f:4c:43:8a:
3d:21:be:38:1c:1e:73:d3:43:f7:97:aa:02:67:29:
ef:70:1a:5c:14:93:26:91:22:6a:e8:3a:87:82:10:
b9:34:c5:97:9e:7f:97:80:57:6f:ae:31:f6:c9:0d:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:DD:82:3B:A1:D1:C7:29:26:6F:EE:D7:A8:6F:F2:A3:B7:5C:2E
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:20:6b:b2:b6:95:73:ac:f7:92:2b:be:60:e3:48:02:cb:86:
07:ad:7b:83:7d:86:c1:64:a7:cd:a2:a7:3a:89:26:a8:ad:fc:
fb:a1:fd:b7:db:66:47:10:76:26:d3:31:95:c9:24:64:df:92:
f5:aa:a0:85:34:28:58:06:46:2f:7a:ec:d1:39:5f:8a:bf:23:
e1:cf:f1:22:06:83:90:89:53:6a:18:f3:74:50:a2:7c:da:f9:
a6:69:03:d8:02:49:d4:9d:07:07:a7:47:a8:06:b9:f6:a0:a3:
35:01:bd:20:f7:47:09:bc:1f:f4:8d:f7:8d:2f:ae:7a:91:88:
0c:fe:22:81:2b:9c:a9:20:9b:d2:95:c7:dc:9d:5e:d5:df:bb:
8f:d1:5e:b8:ed:7a:b3:66:ff:f5:cc:9a:e0:eb:cf:10:40:4c:
27:d3:41:18:d0:21:69:d8:47:34:a3:7a:05:b1:d0:97:15:78:
8e:0b:7c:a4:54:1c:f8:0a:cf:a1:73:eb:d0:2f:4d:f2:52:db:
ff:d9:63:00:06:a1:9e:03:04:04:da:b8:b8:b9:88:fa:50:09:
7f:c6:46:03:77:c4:eb:0e:3c:73:ac:4a:e4:ad:1c:37:d1:e6:
de:d0:b8:98:bd:7b:46:38:f3:34:66:fc:0b:62:e8:4c:fb:d5:
a1:d9:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:29:05 2025 by rpki-client