This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier: lmmc1HsvcejmhZlSvPHmDY46BSIBpjXnqYDagA9QHyM=
Subject key identifier: 13:57:E7:BC:BA:0A:03:7B:66:37:20:07:D7:3D:E8:27:0F:8A:94:41
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 019AF163DA999ACB5D2C83C546960D086D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 02:00:44 +0000
Manifest this update: Sat 06 Dec 2025 02:00:44 +0000
Manifest next update: Sun 07 Dec 2025 02:00:44 +0000
Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: +zB2S7TCR/RINDY74eUA6ZM7YK8Vai/7Gnill6cR6pg=)
2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:da:99:9a:cb:5d:2c:83:c5:46:96:0d:08:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Dec 6 02:00:44 2025 GMT
Not After : Dec 7 02:00:44 2025 GMT
Subject: CN=1357e7bcba0a037b66372007d73de8270f8a9441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:23:40:bf:22:99:1c:15:49:c8:38:8e:ac:
39:a2:0b:76:62:6d:9e:67:ff:11:f8:36:59:f6:26:
7a:68:06:a3:52:ba:a3:cc:dd:43:45:c6:80:6a:67:
34:ad:c4:7d:f8:09:00:74:e0:aa:17:1f:b6:1c:29:
e6:d4:34:c3:32:d9:18:11:38:9b:a6:fa:47:da:c3:
2c:1b:cc:c3:74:82:47:f1:49:cf:8d:40:6a:da:99:
85:63:0d:99:b3:7a:4d:54:b9:1d:10:11:e2:55:90:
9c:e7:74:d5:2f:87:a7:da:a1:80:e0:a6:75:a8:4c:
be:4f:61:00:32:c2:19:fe:5f:72:b8:6e:86:b2:13:
fc:d4:fd:95:6f:ca:7d:5d:d4:b8:ed:4d:ac:68:24:
03:d5:da:e6:e5:75:f0:31:b7:fc:25:ab:d5:7d:1f:
47:c5:10:7b:5c:25:27:43:b1:a0:59:59:8c:ec:7b:
48:ad:81:1a:a2:64:1d:d3:9a:21:20:ef:25:e7:21:
ae:ae:28:54:2e:c1:f9:ec:8c:b9:81:df:c6:72:36:
f7:06:3e:d3:eb:49:35:dc:50:62:af:48:55:cc:5a:
da:fa:e2:6a:8b:3d:31:17:b4:42:51:b4:7a:86:6f:
be:9c:2f:91:ae:1f:ee:b5:2f:0c:86:0f:8d:15:e0:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:E7:BC:BA:0A:03:7B:66:37:20:07:D7:3D:E8:27:0F:8A:94:41
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0f:8b:9a:4f:bb:e1:72:18:26:73:4a:ec:c7:7d:02:81:08:
50:8e:0a:ac:bb:ba:83:f4:37:88:85:20:2d:b8:a8:8a:6b:bf:
43:0a:57:d4:2d:ce:97:a9:31:a5:16:f1:84:13:27:89:f7:0a:
37:0f:e1:04:e3:e8:41:25:05:69:3c:f5:28:ad:49:bc:7d:bf:
47:e6:2a:42:c2:32:6a:2c:70:b5:11:9e:8b:30:31:21:e2:ff:
34:d2:df:db:7d:6c:73:32:3c:14:50:a0:a5:61:47:c1:46:cd:
af:2e:2c:53:07:34:e3:67:8f:57:75:f1:a6:0b:f5:72:2a:6a:
6e:80:40:06:2f:fa:e7:dc:a6:c4:0a:59:51:7f:00:a2:4e:46:
ac:ed:b2:44:d8:36:f0:9a:da:f4:fd:58:83:fc:b0:79:1c:95:
c5:d8:6c:00:8c:60:5d:8d:cf:61:3e:d2:d1:7d:4d:72:c2:e9:
90:f1:35:b6:f5:3d:1b:60:c2:46:ac:a1:0d:55:ca:1d:43:3c:
c0:ef:f8:97:1a:c3:ae:76:bd:49:20:db:e7:6c:d9:96:67:2a:
76:34:dd:ff:aa:b3:0f:05:34:c9:9a:ff:29:f6:ab:6c:5c:a0:
76:83:ea:00:5a:31:ac:7e:86:f4:69:c4:9c:4e:a5:f0:52:93:
cd:ab:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:45:13 2025 by rpki-client