This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: te7aAihn3XaFiK2bkOzt7q84OiwnVkBTCwvj58B5j1E=
Subject key identifier: C0:ED:21:D1:CB:B6:6F:8A:59:55:CE:F2:31:B4:92:AF:66:7D:2E:E0
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019B21AB91689CB86010C5664451FEB7EE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 05FD
Signing time: Mon 15 Dec 2025 11:00:50 +0000
Manifest this update: Mon 15 Dec 2025 11:00:50 +0000
Manifest next update: Tue 16 Dec 2025 11:00:50 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: OpGJ0UPPqKMBu1OdrJFY/AGiK99QfKNeoLklHHhGnKc=)
3: lyYoYFNGC2A9WNKCueXrm4mkRZo.roa (hash: IZrpJH4Ut/OiG1jPgHzsJ5IYnAXiTXDkQvi3YTSJS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:21:ab:91:68:9c:b8:60:10:c5:66:44:51:fe:b7:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Dec 15 11:00:50 2025 GMT
Not After : Dec 16 11:00:50 2025 GMT
Subject: CN=c0ed21d1cbb66f8a5955cef231b492af667d2ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:3c:f0:71:8e:ba:bd:1c:f6:90:b1:d2:99:
5a:c6:dc:5a:55:05:30:3b:04:89:85:c2:2c:e4:53:
1b:c9:d8:2c:6c:92:7b:7c:3e:16:88:74:e9:91:88:
6a:f0:fd:69:a6:f7:9e:3c:5d:6a:a6:8f:4f:f7:2e:
c2:75:18:86:1d:29:df:35:7a:1a:de:f2:72:7e:1f:
01:ab:7f:67:f7:1f:be:52:9e:5f:e5:c3:dc:6b:4a:
78:37:86:70:5f:7a:dc:10:55:10:35:dd:4f:33:b1:
4f:51:a6:60:ed:9d:50:1f:1e:7f:3c:66:66:8b:3e:
02:ba:27:05:37:62:4f:22:3d:64:18:42:0b:45:4e:
9b:2f:32:e8:68:60:ae:0f:fe:a5:03:98:d8:cb:25:
bb:a4:54:82:8a:42:7e:c3:e0:03:50:03:52:55:7f:
2b:fb:f3:5f:65:c6:c4:d9:81:5a:44:e6:78:c6:6b:
3f:54:dd:21:5f:e8:24:ec:be:f8:f1:a4:2a:74:8c:
05:6b:6a:29:6f:e5:33:ea:16:6e:5f:94:e3:df:54:
32:21:8a:30:bc:9a:07:56:52:f8:4c:70:a3:26:05:
35:e8:11:c4:6e:3f:94:f7:32:cc:f3:09:21:73:14:
15:ed:06:50:9f:1b:29:9d:cd:b9:b4:a5:d9:f3:54:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:21:D1:CB:B6:6F:8A:59:55:CE:F2:31:B4:92:AF:66:7D:2E:E0
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:74:30:ff:2e:f9:58:b4:39:46:9d:4a:47:4a:11:04:60:
be:41:ed:55:31:64:df:60:c9:2e:ab:d3:e2:9a:0d:e0:c6:6b:
a0:84:bd:78:b7:0a:d6:69:14:a7:39:34:d6:69:ac:ff:bd:4a:
58:c5:cd:4a:96:fc:1b:0b:85:15:c4:6e:94:12:9f:1e:d0:04:
c6:c3:6e:af:78:5d:39:c5:0b:3e:95:a3:ab:d6:ba:c3:24:b5:
6a:e3:6e:63:44:de:d9:6e:d5:3e:89:f0:3c:f1:aa:19:63:93:
13:f6:e0:2d:c4:b0:a2:4c:0f:4e:23:b5:3c:77:4c:1d:cc:b3:
e9:09:5f:8f:f2:8f:58:bd:7b:1c:04:49:0b:f8:78:dd:6e:b5:
77:25:b8:34:0d:ef:64:2c:13:9d:14:07:e8:e6:b1:fc:63:1b:
8c:fa:62:77:93:4a:20:d5:d9:4d:44:8f:64:4a:89:09:c3:d3:
1e:f8:30:2b:c1:54:22:4a:9e:4d:5a:93:d5:87:da:21:29:ba:
aa:d1:b1:a9:89:c1:d9:91:11:2c:5f:31:4d:11:1e:41:65:ee:
6c:8b:79:55:2e:29:31:b3:08:44:6e:03:69:9b:43:ba:4e:a3:
be:f7:02:88:d1:19:8d:8f:b4:8c:4f:e6:84:95:2e:48:0c:3b:
57:c3:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:06:13 2025 by rpki-client