This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier: QqU0WkccH0TLpiymiSb9yilQtyAnCipk9Xq3Z7iwzz4=
Subject key identifier: E8:4E:7D:8C:80:9B:7D:D5:FA:DD:EA:6F:F5:23:4C:C1:F1:D7:10:99
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 019AF276CFDC9BD647F5FB38F9A5BCA8F283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number: 13B9
Signing time: Sat 06 Dec 2025 07:01:03 +0000
Manifest this update: Sat 06 Dec 2025 07:01:03 +0000
Manifest next update: Sun 07 Dec 2025 07:01:03 +0000
Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: QDSVKPHZkQA2A9vJ4j/Nl362bOn80YE6qEGlwisjLkw=)
2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:cf:dc:9b:d6:47:f5:fb:38:f9:a5:bc:a8:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Dec 6 07:01:03 2025 GMT
Not After : Dec 7 07:01:03 2025 GMT
Subject: CN=e84e7d8c809b7dd5faddea6ff5234cc1f1d71099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:3f:b6:a9:3e:9c:a4:a5:c0:fd:83:81:ba:
57:fc:af:00:02:d5:a7:ad:9b:f6:ce:12:ff:df:99:
ef:8b:93:1b:07:44:b0:d6:51:f4:b2:ee:8d:19:f2:
a6:1f:8a:49:ed:3e:a6:aa:72:d9:dc:1a:25:d5:a3:
59:40:7f:e4:3d:49:89:7a:3e:6d:7d:87:42:26:40:
95:5b:0d:af:07:24:fb:d3:84:4b:1e:ed:6c:ca:d6:
b2:ed:76:13:a0:be:16:8f:69:78:44:98:9d:7a:75:
fd:14:03:fb:f7:ff:de:e0:33:98:e6:d5:9b:fd:f6:
8e:28:e7:97:d9:f4:e8:07:6d:7e:ce:8d:07:71:2c:
ef:2b:33:ed:de:83:98:ab:31:89:42:05:70:59:7a:
de:63:7b:63:4f:1f:26:15:3c:01:aa:0f:8b:68:32:
b7:54:c2:fe:16:02:8d:d5:36:c7:fb:c7:27:d8:d6:
fd:57:7d:3d:aa:2d:b8:62:e9:fd:23:27:5c:28:a7:
d5:c8:9f:74:b4:fa:51:f8:3e:fa:8f:52:32:54:ce:
04:22:99:f9:ae:b0:d3:a9:0a:46:03:f6:66:cd:a9:
7e:f4:e3:3a:05:05:dd:bb:31:be:ec:00:8e:19:e4:
06:17:c2:cf:b9:2e:9e:0f:02:dd:8c:37:7f:d8:37:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:7D:8C:80:9B:7D:D5:FA:DD:EA:6F:F5:23:4C:C1:F1:D7:10:99
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:71:ea:8f:90:9c:39:18:50:f4:5c:1c:65:e3:f1:eb:9b:
33:50:d2:51:07:c6:64:7a:8f:e5:5b:55:57:cd:cc:72:4b:4e:
81:f9:e6:91:4c:38:d3:a8:db:e4:90:bb:03:7e:f9:8b:cb:72:
f9:1a:cc:c7:96:5d:4a:f2:be:23:81:c9:bf:94:9a:59:52:19:
d4:35:bc:47:13:5f:e2:27:4b:85:5a:5b:e2:59:c7:68:8b:39:
38:50:86:69:87:2a:b0:56:fc:db:8b:c0:4a:ac:03:e8:fe:6d:
bb:a6:12:63:20:16:e4:73:4a:a4:b6:d5:ae:e8:cb:fd:f2:64:
aa:9c:7b:ed:b1:38:2b:d7:cb:31:87:0c:d9:37:5b:af:68:6f:
4b:1b:c6:76:5e:2d:42:04:97:8f:54:ca:22:db:cc:7d:66:9c:
70:c1:a3:fd:8b:8d:5d:f7:88:b4:7f:95:88:d0:b9:d4:d7:30:
39:64:0e:26:63:3d:a1:bc:5a:7c:2b:db:2d:40:cf:01:2a:a9:
65:d3:e7:fa:bb:e7:26:06:61:b8:d8:fd:bd:d7:34:99:22:68:
d5:a0:cc:d1:47:55:25:59:77:f4:e6:e8:0a:6e:d1:d3:95:31:
a4:1f:98:d1:46:00:80:92:06:0b:79:98:aa:b1:6e:11:ee:e3:
9b:d0:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:06:38 2025 by rpki-client