This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: UPx+MAz0nW9OBFAovVl7Bv+jeWx1fSMMNSfBiyX/tzc=
Subject key identifier: B3:21:63:BC:BE:4D:2E:D3:D3:A5:AF:DA:97:24:A7:44:F7:9E:30:07
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019AF12EB5E68DCFF1648B195F4115B13D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 1316
Signing time: Sat 06 Dec 2025 01:02:41 +0000
Manifest this update: Sat 06 Dec 2025 01:02:41 +0000
Manifest next update: Sun 07 Dec 2025 01:02:41 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: Rc7vpgaJCEoD9MZeqTZqEfqTa508oeHMegpJD6z7cII=)
8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:b5:e6:8d:cf:f1:64:8b:19:5f:41:15:b1:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Dec 6 01:02:41 2025 GMT
Not After : Dec 7 01:02:41 2025 GMT
Subject: CN=b32163bcbe4d2ed3d3a5afda9724a744f79e3007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:75:23:d2:e6:bd:e7:27:87:ce:e4:c8:ae:
f4:e9:76:12:18:6f:8f:3a:2c:5c:85:98:2a:cc:b9:
d4:26:32:6e:3a:a8:fb:87:44:94:06:a0:22:fc:88:
3a:5d:54:f4:00:31:a6:ac:ff:d3:42:7e:31:a6:93:
96:e0:1b:ce:f1:9b:81:11:db:2a:00:f5:7d:f2:44:
9d:73:8e:26:0f:8a:68:ca:74:4b:68:0a:75:e0:a3:
96:a9:05:15:16:ab:2c:d3:cd:0b:f6:ed:b8:00:02:
ed:0b:88:e6:7d:bf:c7:3d:44:8a:e7:4e:29:61:92:
46:ad:49:28:d8:c3:bc:bf:a7:18:ad:f9:7c:ef:42:
88:65:9f:41:51:02:15:bb:dd:89:f7:0c:f1:40:13:
db:fb:b9:20:2c:51:e5:ac:37:63:01:0f:f1:c7:21:
a6:f6:7e:71:5a:57:b1:36:d0:01:0a:23:69:f6:93:
d9:4e:6c:2a:7c:3d:a7:d3:1b:8f:a8:11:ab:b5:e6:
31:64:21:17:41:89:62:6e:d6:22:89:e8:5d:5f:11:
fe:b5:d7:bb:3b:57:a0:9f:0d:6a:b8:63:54:8a:c4:
09:ed:08:21:dc:56:0b:ae:18:af:79:35:ff:c2:45:
bb:ba:58:23:45:84:f5:6e:8f:5d:59:f3:89:b2:19:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:63:BC:BE:4D:2E:D3:D3:A5:AF:DA:97:24:A7:44:F7:9E:30:07
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:6a:37:b1:f1:34:46:a8:a8:72:2e:52:a4:f9:58:28:f0:
05:a0:99:17:59:45:35:e1:8d:cb:0b:6e:c4:5f:62:7a:7b:d2:
69:e8:48:b7:b2:c5:1b:86:e5:a3:c5:6e:76:e6:39:72:7f:b7:
c4:ab:e9:4c:38:a5:e0:ba:c6:3b:dc:13:6b:ae:bf:97:e6:92:
5a:e5:68:4f:01:a9:85:b9:55:cb:2f:2c:70:e0:62:51:f3:d0:
a6:0f:ee:96:17:ab:18:f7:1e:f6:d0:b5:8a:e3:9a:5a:14:6e:
83:e6:2e:bd:e0:14:2f:b1:2e:07:58:32:6e:3c:f4:79:cb:e5:
39:62:0e:ef:19:7e:c2:e8:99:14:5e:fd:40:f5:a5:45:43:b4:
82:7f:97:6e:94:43:92:7b:4e:42:77:4a:b4:15:97:a5:48:c3:
77:57:cc:8a:2a:ed:c4:ac:7f:55:ee:7f:be:43:9c:7f:b2:d2:
28:c5:c9:9f:63:63:ea:18:3f:a3:ea:ec:13:ad:d5:03:e4:20:
e1:d0:43:f1:9f:eb:6a:7f:3e:7c:bd:f6:b5:ac:03:51:a1:48:
02:1d:78:d4:54:c2:30:3f:83:6e:ea:c2:83:61:13:30:aa:de:
a7:55:4f:22:82:b5:1b:8b:db:07:12:9d:d3:56:f7:80:6d:65:
00:ff:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:17 2025 by rpki-client