This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier: PwiBqoyOivoyXlHkCMtR7yZL7GNO7eFqp2169j22tlU=
Subject key identifier: 3C:E1:82:38:6B:E0:C9:9A:1D:B0:61:C7:55:7A:97:5A:AB:40:70:51
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 019AF1D1ECF9BD3C846DB983EFAFBF68DAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number: 1130
Signing time: Sat 06 Dec 2025 04:00:57 +0000
Manifest this update: Sat 06 Dec 2025 04:00:57 +0000
Manifest next update: Sun 07 Dec 2025 04:00:57 +0000
Files and hashes: 1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: ezR6ggDhiigBFjp1MijDLqfl6lmEu0npBFcR9t7HUcQ=)
3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:ec:f9:bd:3c:84:6d:b9:83:ef:af:bf:68:da:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Dec 6 04:00:57 2025 GMT
Not After : Dec 7 04:00:57 2025 GMT
Subject: CN=3ce182386be0c99a1db061c7557a975aab407051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:4e:2e:4d:2f:4c:e1:91:e6:e3:cb:74:62:
60:14:6b:d1:ac:5f:96:15:d1:b4:8a:d7:f2:67:d7:
3f:28:c3:77:3e:6c:bf:39:5f:23:de:27:5a:73:a0:
5e:69:dd:e3:be:b2:c2:5f:44:e4:c1:c9:02:d1:29:
be:92:73:3b:33:12:34:9a:de:0e:27:65:ee:3d:03:
a7:26:be:a9:95:4b:22:f0:8e:ed:3a:92:08:9e:d0:
1b:02:ea:63:98:21:85:be:b4:20:ab:8b:49:a8:ab:
75:1e:9a:b2:07:66:e8:be:60:f7:fb:95:ea:68:40:
c4:a6:f9:fe:1c:85:bc:8a:db:e1:7b:70:ee:78:3e:
14:20:8c:72:09:0b:b5:72:2d:ba:49:17:e8:29:d9:
08:ec:c9:4d:62:6e:91:f7:76:39:97:06:51:05:61:
e1:e5:a9:58:5c:25:8b:e6:e5:3a:19:db:54:eb:03:
a9:a7:56:1a:23:55:11:2a:57:bf:92:bb:59:89:19:
b6:23:b4:6c:73:87:51:54:8f:73:df:0b:fb:40:dd:
fb:68:24:9a:b6:fc:8c:3a:a1:be:db:31:8c:9c:21:
0d:77:cc:cc:8e:4d:2f:fe:9c:60:fd:92:93:68:a3:
70:17:7c:58:25:42:cd:e5:45:26:ad:31:f0:c7:93:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:82:38:6B:E0:C9:9A:1D:B0:61:C7:55:7A:97:5A:AB:40:70:51
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:c6:b8:3c:00:b1:9c:be:88:57:ca:6e:72:b4:77:e6:da:
eb:be:9c:75:c9:5a:d2:0f:16:c3:b6:5a:0a:df:88:f8:04:9a:
db:64:d4:4c:1f:15:68:7f:bf:36:1b:42:87:ae:38:47:82:17:
cd:ce:80:bf:e9:ea:ef:e5:f7:de:fa:1c:3c:b2:a8:52:e8:b8:
ce:f5:e2:bc:08:3c:af:9a:67:10:70:77:d3:99:01:f8:40:dc:
3a:01:4d:28:47:44:b9:37:b2:6d:40:af:25:ad:08:e0:73:4a:
b7:19:ea:a5:2b:85:f6:d1:89:cf:22:3a:83:cc:9d:89:c7:1d:
d0:57:e6:05:6b:21:2e:b9:0b:ef:66:fe:c8:38:6c:14:e9:75:
42:11:43:df:d3:40:53:12:14:b4:81:e5:5f:26:b6:20:d7:70:
9c:ff:16:1d:19:19:43:a4:46:5e:43:3e:50:d6:53:d2:48:5a:
0c:90:8a:f5:2d:23:eb:d4:27:9b:c5:80:47:d2:91:0d:1f:e2:
12:6c:75:fb:31:06:cf:9f:bc:75:71:43:ee:cd:2b:98:dd:ca:
1b:28:5f:e2:31:57:9c:97:51:20:38:65:de:16:e4:45:c7:d4:
b7:db:2f:c3:7f:8e:11:02:e8:df:ed:09:28:5b:cf:c8:91:95:
ec:d3:3b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0ez5vTyEbbmD76+/aNr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYWQ4MGQ0MTFhY2I5MzY4NWY1NThhYTdlMTJmNDZiZDE3
MGE3ZmIwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD
EygzY2UxODIzODZiZTBjOTlhMWRiMDYxYzc1NTdhOTc1YWFiNDA3MDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5hOLk0vTOGR5uPLdGJgFGvRrF+W
FdG0itfyZ9c/KMN3Pmy/OV8j3idac6Bead3jvrLCX0TkwckC0Sm+knM7MxI0mt4O
J2XuPQOnJr6plUsi8I7tOpIIntAbAupjmCGFvrQgq4tJqKt1HpqyB2bovmD3+5Xq
aEDEpvn+HIW8itvhe3DueD4UIIxyCQu1ci26SRfoKdkI7MlNYm6R93Y5lwZRBWHh
5alYXCWL5uU6GdtU6wOpp1YaI1URKle/krtZiRm2I7Rsc4dRVI9z3wv7QN37aCSa
tvyMOqG+2zGMnCENd8zMjk0v/pxg/ZKTaKNwF3xYJULN5UUmrTHwx5O2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzhgjhr4MmaHbBhx1V6l1qrQHBRMB8GA1UdIwQY
MBaAFDKtgNQRrLk2hfVYqn4S9GvRcKf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAt
ZGMwZTgxYTlkN2I0LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAtZGMwZTgxYTlkN2I0
LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByjGuDwA
sZy+iFfKbnK0d+ba676cdcla0g8Ww7ZaCt+I+ASa22TUTB8VaH+/NhtCh644R4IX
zc6Av+nq7+X33vocPLKoUui4zvXivAg8r5pnEHB305kB+EDcOgFNKEdEuTeybUCv
Ja0I4HNKtxnqpSuF9tGJzyI6g8ydiccd0FfmBWshLrkL72b+yDhsFOl1QhFD39NA
UxIUtIHlXya2INdwnP8WHRkZQ6RGXkM+UNZT0khaDJCK9S0j69Qnm8WAR9KRDR/i
Emx1+zEGz5+8dXFD7s0rmN3KGyhf4jFXnJdRIDhl3hbkRcfUt9svw3+OEQLo3+0J
KFvPyJGV7NM7SA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:27 2025 by rpki-client