This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: yfuSDXwDkcJnpk3WUJQ/HGYVMWXRi7rV+X6xVZNvxNY=
Subject key identifier: 0C:49:12:49:1A:F9:65:EB:25:17:18:23:CC:A9:DB:6D:72:53:91:E3
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019AF31C79CA4D287394EBD9CCFA61E00C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 10:02:00 +0000
Manifest this update: Sat 06 Dec 2025 10:02:00 +0000
Manifest next update: Sun 07 Dec 2025 10:02:00 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: nkejwLsjD6NhyaNPgFhu283W7IPW5zGN3h2qfDrqpBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:79:ca:4d:28:73:94:eb:d9:cc:fa:61:e0:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Dec 6 10:02:00 2025 GMT
Not After : Dec 7 10:02:00 2025 GMT
Subject: CN=0c4912491af965eb25171823cca9db6d725391e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:44:7b:b8:e7:5b:5d:a1:b5:a9:f2:e7:9b:
2e:fb:46:a0:a2:82:ba:32:8c:1f:35:30:58:1d:09:
2d:13:c3:1b:af:0c:ee:05:d4:69:05:dd:ff:a3:6e:
d5:56:fa:2e:02:d7:a2:a5:a0:bd:e8:ab:36:73:f8:
a6:f8:54:3c:99:f1:45:33:46:56:fe:d1:8f:37:76:
9d:43:48:4e:99:33:d4:42:41:f1:b5:f9:76:71:eb:
47:97:99:d5:b1:1b:9f:7a:3b:92:85:a5:67:fb:09:
53:dd:74:19:82:d2:13:58:a7:f7:69:4f:9b:fd:5a:
bf:c7:05:78:63:8c:f0:8b:b7:20:cd:4c:43:8f:43:
72:16:75:ad:bc:5e:0f:f5:5d:db:cd:c1:4f:06:78:
9d:fe:35:b0:85:73:82:04:85:a1:19:0e:f6:a8:0f:
4b:ab:97:d1:bf:4c:a6:5b:35:87:c4:63:3d:6a:10:
33:a1:37:5b:fd:5d:90:61:8d:5c:96:57:87:18:9d:
f6:2a:50:1d:27:07:69:76:db:74:2c:d6:f8:25:b1:
ef:b8:22:b4:1d:33:55:9b:25:28:e7:89:2f:1c:81:
20:a5:dd:9d:94:39:97:a4:a7:db:c1:f2:b4:7d:5e:
c6:6e:20:93:86:b1:b4:26:5c:81:1d:66:34:a5:7c:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:12:49:1A:F9:65:EB:25:17:18:23:CC:A9:DB:6D:72:53:91:E3
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:53:8f:88:d4:2d:93:fd:45:9f:7b:41:0e:de:2e:8f:83:
a4:1b:d8:35:d4:ea:d9:13:51:7f:ca:47:e0:43:b1:2d:14:3f:
34:f5:dc:8a:76:3f:c8:86:2c:0c:4d:75:a8:00:9c:5c:a7:86:
f3:a4:01:e0:4b:fe:45:6e:2b:a0:cb:80:e0:a6:6c:98:bd:9c:
a6:68:a3:83:0a:85:13:ef:29:9f:17:e6:38:cd:0f:c9:ee:9a:
c0:7a:9c:b7:ca:37:82:0e:5f:f4:ae:b8:b7:c6:5c:19:80:f3:
a1:46:b1:ba:d3:84:6d:46:e8:ad:d1:d1:e8:3f:79:68:20:e9:
38:82:f1:cb:99:a0:10:75:3b:90:f6:11:ac:9b:29:e0:51:42:
5f:ea:09:82:8a:24:5e:d4:e2:c8:e7:d9:3e:4b:69:f0:c2:b6:
8e:89:97:89:93:90:32:ff:3a:ab:b6:d8:d8:13:2f:7d:ff:d5:
5e:60:55:a3:eb:5c:96:e7:ac:44:e6:4c:6d:f1:0d:ed:f4:80:
d8:5b:ab:8d:a0:54:ce:77:1b:da:c4:6f:60:02:b0:25:34:cd:
d6:10:d8:83:da:2e:82:0f:d4:b0:e5:4c:3c:92:20:29:de:43:
c9:4d:e3:da:68:f1:f0:07:24:e3:55:d5:b7:89:33:73:10:f9:
9a:23:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:48 2025 by rpki-client