This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: RXZ8l+MiJ6qxpRupoJUI6WRq/WLvONzQdJ/Ux7tRr9I=
Subject key identifier: 48:80:86:55:F8:E9:2F:D1:38:AD:3B:A5:BA:EF:55:D9:46:03:E0:0F
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 019AF49C4F343AE61B76803B7F61AA0DAE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 17:01:15 +0000
Manifest this update: Sat 06 Dec 2025 17:01:15 +0000
Manifest next update: Sun 07 Dec 2025 17:01:15 +0000
Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: VXPkKFdmupoJcWd8CQg1G2V/Dp3LMuuDOvHYBRlPEko=)
2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9c:4f:34:3a:e6:1b:76:80:3b:7f:61:aa:0d:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Dec 6 17:01:15 2025 GMT
Not After : Dec 7 17:01:15 2025 GMT
Subject: CN=48808655f8e92fd138ad3ba5baef55d94603e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:7c:df:c3:ab:79:c1:39:c9:d1:e0:a5:0c:
55:89:c5:ab:30:5e:96:76:9b:70:3d:f0:07:b8:ce:
93:2f:a4:aa:43:34:f2:c1:8b:34:75:9f:b8:ea:7c:
5e:80:fb:95:94:26:5a:06:6b:1b:2b:0f:66:99:f4:
93:3c:45:93:9a:79:71:72:bd:cd:a8:3e:1b:d5:e9:
42:75:03:1a:4f:92:0b:49:e3:fe:0d:00:d9:df:0b:
2f:35:3e:f3:eb:c4:18:2c:55:ff:ff:5e:fc:50:b0:
e9:88:5b:9b:f6:9b:a3:e8:2a:04:e6:a1:8c:04:db:
17:c9:6e:71:64:16:df:c4:28:06:c1:21:f6:07:31:
d7:3a:53:87:3c:15:cd:e6:bd:e0:5d:94:5d:94:7b:
4a:7c:f7:b7:2b:1e:52:21:86:01:d6:56:82:9f:8d:
c0:eb:a6:69:54:00:2f:c5:74:fc:71:c1:00:4d:f1:
2a:d7:54:b1:de:ac:10:ea:1d:78:a2:ff:ce:a5:43:
56:4a:c3:6c:2e:39:c4:43:78:65:62:c5:99:1c:a4:
72:39:f1:19:73:67:36:e1:b2:7d:1c:64:45:10:88:
7e:18:bf:49:3e:45:e1:0d:2e:4f:74:3e:ad:58:4e:
de:dc:7f:a8:3f:b8:ae:04:48:bc:97:1b:df:10:70:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:86:55:F8:E9:2F:D1:38:AD:3B:A5:BA:EF:55:D9:46:03:E0:0F
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:2c:1b:74:c5:18:01:66:d1:9d:9a:0b:f9:5b:0d:ca:92:
be:a9:5e:68:48:3e:3b:1e:a6:88:1f:30:73:c0:cb:08:ba:70:
28:23:63:db:df:12:87:9e:be:7c:aa:a0:ef:2c:db:8d:be:5e:
a7:1a:c2:61:fc:9c:d7:86:4e:71:8a:e5:64:d7:05:d9:27:5c:
a0:1a:14:37:14:8e:c8:30:49:dc:39:40:37:22:09:28:bd:5e:
f3:fb:9c:13:f9:9d:bd:bf:4d:fd:71:49:63:de:2e:75:6c:4d:
16:41:53:67:5f:fd:82:de:82:25:5b:a0:64:e4:34:6e:fa:d4:
f6:26:68:1a:f7:d0:d5:0b:11:bb:18:5a:11:17:32:b7:9c:05:
72:d5:28:84:8c:f5:64:d6:54:e8:20:f4:7e:f7:88:d5:ed:c6:
f5:ce:61:4a:66:14:50:33:0c:27:47:30:1e:d5:a2:74:82:70:
a9:b3:0a:0e:21:c5:86:b9:23:fc:73:48:57:32:a0:bf:22:a8:
fa:b0:8f:0d:2b:41:ee:e2:8b:b2:f4:d9:ef:47:43:20:7e:67:
a6:09:e2:8e:7c:e6:34:58:bf:c3:47:06:9b:e2:5b:bb:d2:b0:
cf:54:c4:e3:04:54:d0:72:a7:8f:2a:dc:37:68:76:24:06:64:
53:45:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:37:55 2025 by rpki-client