This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: /SVD+ldC64FIXs6WxYP0uQtrtSTBnzVsfVQlLQxuhzg=
Subject key identifier: A0:B5:B8:B0:0D:98:30:D4:6B:49:FE:CA:BB:A4:4B:01:0C:B8:DF:06
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019AF19B43E00C47AEB8F491A43DDEB563E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 03:01:15 +0000
Manifest this update: Sat 06 Dec 2025 03:01:15 +0000
Manifest next update: Sun 07 Dec 2025 03:01:15 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: 4zoQ5UL0chGLgbXBnAp7C3ppvQ8udAHcKlT227dcs3k=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:43:e0:0c:47:ae:b8:f4:91:a4:3d:de:b5:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Dec 6 03:01:15 2025 GMT
Not After : Dec 7 03:01:15 2025 GMT
Subject: CN=a0b5b8b00d9830d46b49fecabba44b010cb8df06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:0a:c5:08:c6:f7:3c:48:bd:d0:01:80:c3:
45:7d:81:7d:db:6c:60:d3:d3:66:9d:5c:15:78:87:
45:d2:e2:76:15:b5:f8:a3:8d:73:de:80:e9:23:49:
4e:d9:71:91:ce:38:59:64:2c:f1:c4:37:5b:8b:25:
3b:c6:4e:3c:e8:2d:98:fb:25:0f:93:b8:ca:f7:12:
21:75:59:89:1c:81:bd:63:d9:95:5e:81:a1:aa:07:
11:7b:e0:be:b5:30:92:4d:9c:2b:9f:34:83:c1:4f:
3d:9a:31:9e:49:ba:58:9f:07:b9:22:48:03:db:c6:
b7:18:fb:65:63:66:4f:f5:e3:53:72:16:a0:98:93:
89:d4:da:cc:6e:cc:3f:f6:fc:88:28:ab:8f:05:ad:
b5:c5:51:c0:e2:31:0d:0a:18:0a:1d:7f:ec:55:ef:
d1:9a:a7:86:d2:8d:5b:e5:cd:c0:e0:48:99:b4:58:
e0:a0:47:70:45:5f:24:77:99:4e:e9:37:5f:16:32:
8d:40:5a:53:8a:30:cc:b3:a7:59:d6:30:b0:16:8e:
7d:da:ee:90:aa:e7:d9:e6:e7:28:7b:f2:4f:f5:5b:
e9:b5:1c:e1:c3:df:b0:fe:66:9b:76:f0:46:7d:67:
06:c1:59:a7:9c:e5:7c:95:3e:ad:15:b8:bc:86:ea:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:B8:B0:0D:98:30:D4:6B:49:FE:CA:BB:A4:4B:01:0C:B8:DF:06
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0e:a6:44:e8:a9:df:89:b0:29:b3:25:8b:7a:09:64:a2:76:
3d:40:e2:23:b7:c9:82:e1:fe:54:1f:c0:08:d6:18:57:6c:2f:
33:02:59:c8:df:2a:d9:ff:0a:e2:c2:af:9f:a7:28:63:d0:2a:
93:15:20:b7:d4:9e:6c:df:50:44:d6:7c:84:37:88:20:ca:b1:
db:e7:85:53:2b:76:07:ad:30:5e:32:3f:07:3b:45:c5:e5:0e:
b5:a0:68:23:37:0a:e9:64:d4:30:fe:18:2f:a7:e0:f4:6f:6e:
34:4b:18:36:24:ed:cf:7f:87:6a:e5:24:87:00:a5:d1:64:ef:
23:60:b2:88:03:b3:4d:57:71:44:2c:36:4c:b4:e0:7e:b0:45:
8f:1e:0e:8e:32:54:05:d7:9b:2e:77:28:aa:9c:50:a6:3a:fa:
e5:5e:c5:d6:65:ec:c0:2a:c2:b6:46:2f:2a:a6:9d:bb:a3:50:
af:72:aa:26:2e:6a:ca:82:e2:bc:8d:6d:b1:87:35:71:ca:92:
d2:b5:41:15:46:b8:26:db:2d:6a:5e:3e:00:3c:f1:52:47:a7:
be:a5:87:dd:b4:e7:d2:0d:74:39:4f:7f:6b:94:db:36:cf:25:
c5:9f:33:c8:76:76:ea:76:55:c9:25:ae:fd:62:10:65:e0:bf:
b1:0f:ca:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm0PgDEeuuPSRpD3etWPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD
EyhhMGI1YjhiMDBkOTgzMGQ0NmI0OWZlY2FiYmE0NGIwMTBjYjhkZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q8KxQjG9zxIvdABgMNFfYF922xg
09NmnVwVeIdF0uJ2FbX4o41z3oDpI0lO2XGRzjhZZCzxxDdbiyU7xk486C2Y+yUP
k7jK9xIhdVmJHIG9Y9mVXoGhqgcRe+C+tTCSTZwrnzSDwU89mjGeSbpYnwe5IkgD
28a3GPtlY2ZP9eNTchagmJOJ1NrMbsw/9vyIKKuPBa21xVHA4jENChgKHX/sVe/R
mqeG0o1b5c3A4EiZtFjgoEdwRV8kd5lO6TdfFjKNQFpTijDMs6dZ1jCwFo592u6Q
qufZ5ucoe/JP9VvptRzhw9+w/mabdvBGfWcGwVmnnOV8lT6tFbi8hurAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC1uLANmDDUa0n+yrukSwEMuN8GMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ6mROip
34mwKbMli3oJZKJ2PUDiI7fJguH+VB/ACNYYV2wvMwJZyN8q2f8K4sKvn6coY9Aq
kxUgt9SebN9QRNZ8hDeIIMqx2+eFUyt2B60wXjI/BztFxeUOtaBoIzcK6WTUMP4Y
L6fg9G9uNEsYNiTtz3+HauUkhwCl0WTvI2CyiAOzTVdxRCw2TLTgfrBFjx4OjjJU
BdebLncoqpxQpjr65V7F1mXswCrCtkYvKqadu6NQr3KqJi5qyoLivI1tsYc1ccqS
0rVBFUa4Jtstal4+ADzxUkenvqWH3bTn0g10OU9/a5TbNs8lxZ8zyHZ26nZVySWu
/WIQZeC/sQ/KQA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:59 2025 by rpki-client