This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: 2ACDPWcgdbuR3L2spiDN+Kj3mywpVNXObjx0npiJSz0=
Subject key identifier: 9B:E7:61:C3:88:B1:69:7B:AD:91:37:81:FF:2F:61:3A:C7:3C:F4:7F
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019AF12D9EC104E448B1E3160412F709F6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 01:01:29 +0000
Manifest this update: Sat 06 Dec 2025 01:01:29 +0000
Manifest next update: Sun 07 Dec 2025 01:01:29 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: 6u+Z/7HDt8IOANmdpaC11g8uVx5LBbIYfRlHJxC9B0g=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:9e:c1:04:e4:48:b1:e3:16:04:12:f7:09:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Dec 6 01:01:29 2025 GMT
Not After : Dec 7 01:01:29 2025 GMT
Subject: CN=9be761c388b1697bad913781ff2f613ac73cf47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:7a:53:5b:b3:15:d9:b2:bc:ab:2d:cd:6d:
f7:98:c1:07:1d:a3:18:96:e3:8f:af:7d:7e:8c:05:
21:16:c4:11:67:21:f7:2d:b2:36:fa:c3:24:21:c5:
80:76:4d:90:f9:6f:b1:04:3f:3b:31:cc:2d:d3:05:
e1:d4:d2:62:87:03:86:92:c9:f3:86:fe:29:2e:7a:
fa:0b:76:22:9f:9e:90:78:6e:22:79:3a:c2:c5:49:
17:93:d5:42:79:3c:67:1e:69:7a:69:1e:b2:ab:d5:
aa:2b:e9:a2:d9:cf:d6:bf:cd:6d:56:8a:88:8f:f9:
cc:6c:2d:b8:b7:f8:52:ae:b2:d1:6c:de:f2:28:4c:
7f:56:ac:72:a4:f5:57:99:6b:54:2e:71:54:6a:4b:
ec:a9:2b:a9:3d:49:d5:9c:00:b1:34:3d:95:6d:7b:
60:34:44:68:fa:e9:51:2b:9a:d7:4b:b6:41:cb:74:
09:eb:a1:b2:25:45:4f:8b:b7:56:c4:c8:63:dd:97:
03:b8:d6:cf:16:02:f7:17:4f:4b:81:f3:21:76:0e:
1f:d4:15:fd:1d:6b:69:20:e5:49:22:36:16:d1:de:
28:70:30:dd:82:de:6b:ec:fd:f8:d1:77:24:85:e1:
50:57:01:01:20:74:05:6d:87:84:a8:81:09:9d:f2:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:61:C3:88:B1:69:7B:AD:91:37:81:FF:2F:61:3A:C7:3C:F4:7F
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:1d:65:78:ec:46:b8:da:2f:4b:18:9b:bc:b4:e6:46:fb:
38:ab:08:81:52:a8:1a:40:1a:18:66:c6:62:6b:f5:c9:7a:78:
cc:24:c6:6d:7f:de:29:af:61:2e:b1:fb:c4:b8:29:08:17:3a:
3f:a0:8a:3b:b0:2c:cc:b3:2e:b0:2d:94:33:43:97:c2:f6:fa:
75:a1:cc:fb:b3:a1:b4:4a:1f:c8:1e:d9:ab:e0:6d:b7:e7:eb:
13:d0:59:00:46:e2:34:94:3c:4a:a1:2c:8d:e3:51:e3:62:2c:
d1:b7:81:f9:6e:87:58:b6:ad:26:c1:88:ee:36:fa:39:08:36:
ff:f8:3c:94:79:6b:ba:26:44:8d:d0:f3:ba:7c:c3:09:4f:5c:
a3:d4:43:b3:e2:2e:c7:64:a9:2b:20:7b:7e:2a:b6:23:99:a7:
3b:cc:91:05:14:1d:d3:c8:fd:f3:7c:51:21:ad:dd:dd:8e:72:
0e:13:c9:c4:b7:3a:32:21:a2:63:72:86:b4:a7:1b:24:93:e7:
8f:f5:ab:7b:11:1f:10:d8:09:dd:bc:d4:42:32:5f:da:e6:98:
02:48:11:47:de:81:75:cc:73:8e:1c:53:cf:3f:a8:68:7c:9a:
20:1b:3a:50:4c:8d:c2:87:fa:a2:90:6b:bf:b0:5f:40:c7:b1:
42:0d:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:34:52 2025 by rpki-client