This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: 91mmzOAUEkx0j2DYdmvoi6Nyli2CrI1OgVeQbad/658=
Subject key identifier: 2D:0C:D1:AF:1D:5A:E6:09:57:40:11:D2:AE:B0:BF:5E:32:92:73:22
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019AF12E2A4A2A30F57565209A3DDBFE50D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 01:02:05 +0000
Manifest this update: Sat 06 Dec 2025 01:02:05 +0000
Manifest next update: Sun 07 Dec 2025 01:02:05 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: 6gBYS11kKRnUn1N/e9qLP4G6Ngormc1+7T+ikIK9CLY=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:2a:4a:2a:30:f5:75:65:20:9a:3d:db:fe:50:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Dec 6 01:02:05 2025 GMT
Not After : Dec 7 01:02:05 2025 GMT
Subject: CN=2d0cd1af1d5ae609574011d2aeb0bf5e32927322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:3c:8c:93:71:6f:c9:d4:56:75:24:e7:b2:
b8:ab:a6:53:d5:eb:65:2d:62:aa:86:a4:ee:49:89:
96:a3:45:5c:55:e8:6b:e1:73:66:90:8a:3e:20:e5:
d7:1a:7b:6b:f9:57:0a:8c:5b:41:f7:7f:cd:05:05:
88:8c:4b:77:c5:69:c4:ed:0b:93:29:76:d2:d1:2a:
19:99:b0:06:2e:94:28:41:fa:10:99:3b:9c:38:80:
3d:e7:2f:06:5f:1c:f5:53:e1:91:2f:49:c5:20:ca:
b0:44:a4:97:00:89:42:ef:d1:81:21:bd:b6:df:72:
39:bf:a0:ef:0b:4e:f2:6f:2a:46:ce:e3:ed:b3:e1:
5c:8b:61:7e:92:d0:aa:73:e3:a2:24:16:24:dd:10:
fc:33:22:4f:ed:a5:e5:84:71:b8:0d:f3:29:45:f6:
54:e5:c5:e4:06:c8:36:44:12:59:a9:47:c3:4a:9a:
25:98:98:d2:fa:98:36:b8:7a:ce:d7:56:67:84:4a:
ff:e7:0a:88:22:88:fe:d0:95:9a:d1:7a:e4:87:96:
35:ff:40:19:20:b2:5d:0d:ef:59:59:02:af:31:1d:
4e:80:af:a2:2d:f6:c6:f3:4d:7f:ac:78:7c:f1:58:
53:d3:79:68:2f:8c:7a:4b:c8:07:c2:9c:2e:80:c2:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:D1:AF:1D:5A:E6:09:57:40:11:D2:AE:B0:BF:5E:32:92:73:22
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:61:5c:10:ac:a3:23:4c:03:85:51:50:0d:5c:a1:6e:73:
bb:e0:ab:56:a0:cf:71:bc:52:26:48:f3:d2:dd:82:d3:2b:39:
b3:56:dd:ac:3d:51:e7:a6:92:79:91:b1:59:ac:21:27:e6:7e:
df:af:bc:5b:cc:dc:42:58:23:0b:65:fc:72:e9:a5:66:1e:88:
f6:75:94:c6:0a:9c:3a:00:a7:b2:a6:a6:0e:a0:4d:30:bf:dd:
87:bd:c1:ae:23:03:9f:e3:88:77:60:cf:4e:1c:ef:c9:38:99:
cc:52:ea:cc:bd:aa:30:08:5b:71:2a:a2:94:d8:b7:55:2b:fc:
d9:79:3d:dc:b7:b9:bc:b9:c1:ff:ca:e2:05:a6:cd:65:63:1d:
da:4d:a4:90:e0:2a:af:d1:19:78:97:54:03:1f:b8:36:52:3e:
56:40:79:37:18:f0:72:53:c8:c1:3c:6d:c5:0c:6d:f2:41:b8:
9f:c2:e6:3e:27:49:49:7b:d7:35:a8:74:5e:8d:03:ad:b7:7e:
4f:62:bc:b4:a1:95:e2:92:8d:73:7f:75:ea:ec:38:39:9e:d2:
aa:88:2d:95:b0:ab:cb:c8:27:99:93:c3:30:7f:0f:cd:86:68:
ea:a4:d6:de:5d:1c:0d:06:9a:73:f3:83:a9:6e:d8:9d:46:6a:
d2:04:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:03 2025 by rpki-client