This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: DxJKMpY3boY46bT5wbgQgoN/WttVeGL1A9geKC5eqdU=
Subject key identifier: 38:11:2C:F5:CC:32:6C:66:38:88:68:D3:AA:5A:ED:02:5B:53:86:83
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019B2B8A958AF9FB0382BCF4385CAAB5BE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 178C
Signing time: Wed 17 Dec 2025 09:01:00 +0000
Manifest this update: Wed 17 Dec 2025 09:01:00 +0000
Manifest next update: Thu 18 Dec 2025 09:01:00 +0000
Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=)
4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: GrZwzGGBbGsJHItzNScV7q9boBYSJfKLV1FJrfwASnc=)
5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:8a:95:8a:f9:fb:03:82:bc:f4:38:5c:aa:b5:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Dec 17 09:01:00 2025 GMT
Not After : Dec 18 09:01:00 2025 GMT
Subject: CN=38112cf5cc326c66388868d3aa5aed025b538683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2c:cb:40:b8:fe:07:92:83:8d:09:ad:85:8d:
90:bb:82:ae:bc:47:09:9a:57:6d:92:09:de:5a:16:
be:4e:4d:4d:9e:f6:29:6e:fe:f8:eb:d6:dd:8b:ab:
7a:42:53:80:b8:6f:df:b1:a3:ac:d6:02:ed:f5:fc:
bc:66:4c:76:70:e3:b7:4f:4e:68:8a:53:78:19:64:
96:b8:bb:1c:ad:59:f2:b9:31:53:43:9e:9e:89:1f:
c1:de:b7:b2:ec:c9:b6:22:8e:05:39:be:eb:b6:fc:
20:fc:8e:30:16:7e:5d:92:0d:1f:bf:56:85:ae:e1:
e1:9a:29:88:66:e8:b0:2e:40:05:9a:1b:ff:94:a2:
fa:e4:b7:3e:5f:c9:1a:80:f7:cf:d2:f5:c6:89:65:
43:c9:80:60:65:da:48:7d:27:7b:0d:33:15:b2:ac:
47:02:d9:83:f7:93:02:59:67:d3:a4:f8:79:cd:67:
c8:a2:2a:ee:b5:96:c7:7c:ac:a7:63:34:da:e8:ad:
1e:54:bb:56:f7:82:23:66:a4:1d:74:ac:3b:30:68:
17:a8:fa:6a:97:c5:cd:f8:bd:2c:61:24:89:43:c8:
ed:7b:59:fd:a5:fe:a1:6b:39:5e:05:81:59:b5:88:
77:9c:b5:e1:8c:c8:87:9a:c7:8c:da:0a:e1:0c:b3:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:2C:F5:CC:32:6C:66:38:88:68:D3:AA:5A:ED:02:5B:53:86:83
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:98:70:1e:d2:4a:eb:04:73:eb:fa:99:39:36:3f:9a:07:4f:
b0:59:7c:85:3e:08:6f:55:d0:82:b9:e0:73:cc:25:0e:c1:63:
ea:cd:15:bd:2d:1e:7d:17:14:97:34:7f:65:6d:3c:0f:41:96:
56:70:2e:e7:a8:54:bb:51:92:30:c1:a4:4f:aa:5f:e5:d9:b5:
db:e2:b4:8e:ca:9c:e2:f7:89:86:29:d7:6f:2f:72:ce:63:07:
2e:9f:51:33:e2:dd:00:b8:4e:7f:75:ae:49:42:aa:c1:43:2d:
28:b9:a6:53:44:e5:86:d7:0b:e9:54:c2:12:be:c1:01:6b:14:
f0:a3:04:d2:20:55:6d:55:72:43:01:cb:fe:85:32:79:e5:0a:
0c:7d:62:ec:c9:0d:c0:33:5e:42:ab:e7:92:e5:a2:c4:5b:d4:
97:8b:79:28:c5:b1:10:47:b5:a5:8d:7d:39:01:76:95:02:9b:
c8:62:76:f2:91:78:c5:99:f1:92:71:2b:c4:7f:f3:1b:ee:2b:
81:4d:9a:8e:93:f2:16:56:71:b0:97:bb:3f:41:da:98:92:12:
76:74:9d:3d:f5:fe:3e:1a:0d:0c:a4:a0:ef:81:72:3c:f1:7a:
e7:0d:92:d0:7d:58:7c:70:5a:0a:6f:7c:4a:b6:38:cf:d8:dc:
9a:ec:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:21:37 2025 by rpki-client