This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: YPOqgF6xyGHmRi4E23CaNH/SXf93RcWcv0j1znjOmMI=
Subject key identifier: E3:C9:34:D0:A1:6D:AD:E7:6A:48:6B:0A:63:7F:88:47:98:00:F2:33
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019AF1D1872114EF829E7064C24BC256C23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 16BA
Signing time: Sat 06 Dec 2025 04:00:31 +0000
Manifest this update: Sat 06 Dec 2025 04:00:31 +0000
Manifest next update: Sun 07 Dec 2025 04:00:31 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: S/BiCO0K4Ok4DvVZ/VPKkWgIbkdBMCLtwLr8XfpG+yw=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:87:21:14:ef:82:9e:70:64:c2:4b:c2:56:c2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Dec 6 04:00:31 2025 GMT
Not After : Dec 7 04:00:31 2025 GMT
Subject: CN=e3c934d0a16dade76a486b0a637f88479800f233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:8b:ec:81:cb:48:bc:6d:69:38:75:a1:94:
37:eb:63:80:49:bd:8e:20:bb:f6:54:ee:99:c0:18:
94:d9:65:9f:c8:7e:0a:4d:22:d1:c1:8c:0b:ec:64:
19:df:b2:4b:1a:d7:a5:bc:9c:eb:87:43:a4:74:99:
08:78:51:17:41:6d:5a:c1:34:83:76:32:55:2f:c0:
21:9e:1a:ed:b7:07:69:ed:88:a9:57:b7:3d:e5:c8:
83:d3:ae:7a:c2:ce:d5:0c:6d:74:95:d0:c7:ae:86:
2a:9f:64:be:5d:69:ba:af:5d:8b:bc:b7:c8:a8:0e:
f2:c2:cb:5b:7a:25:80:d8:4d:49:c4:5b:e8:dc:ba:
91:f3:76:b8:66:e9:22:ff:49:73:b2:46:d9:52:c6:
0a:8b:cf:21:a5:24:97:e5:fc:53:bc:bd:ac:3e:60:
9d:46:32:8a:47:7d:6b:ab:73:36:68:85:e7:da:5b:
6b:1d:b9:b5:45:2c:d3:f2:7b:07:ac:66:a5:1e:a8:
06:3c:70:c9:ab:a3:d0:51:76:c8:f5:ca:30:a4:13:
76:bc:e9:df:3a:c3:f1:20:68:e5:97:42:4e:ad:95:
e1:0d:f6:15:04:9f:fc:71:64:e1:12:ad:79:5b:12:
9c:bb:b8:07:b4:3d:d9:7a:34:9b:34:92:6b:da:ca:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:34:D0:A1:6D:AD:E7:6A:48:6B:0A:63:7F:88:47:98:00:F2:33
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d7:e0:1d:81:ee:1a:34:6d:88:a0:79:08:f2:42:55:15:92:
72:d7:cf:39:4d:d6:d1:76:b6:55:8c:93:e1:91:ab:27:17:14:
2b:fc:b5:9a:1c:f8:1f:a7:f8:a2:1b:f1:d3:4b:94:5d:e3:90:
7e:75:dc:f5:c7:34:5b:dd:67:60:5b:fb:a8:24:57:4e:60:49:
78:a5:a3:2a:33:0c:06:ed:32:8a:94:dd:e1:f2:2b:1c:05:0c:
26:5a:8d:46:80:3c:8f:f2:00:3a:75:66:e2:0b:91:6b:84:80:
8b:87:10:42:26:a2:4c:02:e4:6b:73:2c:b1:4b:d6:79:b3:d6:
9e:40:15:83:f0:24:bd:32:2d:35:30:d9:7a:28:46:54:7a:c0:
de:39:a1:00:7f:80:83:42:c0:d8:f0:ea:89:2b:bd:52:9e:67:
98:86:fe:c2:61:51:bb:1d:4b:de:90:0e:79:5c:6d:60:27:9f:
b3:90:6f:e8:cb:6a:9d:0a:d7:4d:95:23:e0:2c:03:63:cd:e7:
ee:f3:ad:47:3e:c4:23:dc:3b:f5:0b:62:b1:92:da:74:53:77:
40:2f:ac:c6:0f:20:bd:f0:5a:0e:7c:2f:66:09:97:03:f6:11:
34:d0:99:4d:03:cb:50:75:53:0d:d9:04:fa:35:3c:60:4a:26:
0b:5a:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:20:48 2025 by rpki-client