This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: 61XINvIeuca9XTQmmD+bfnJ89FNUsh5GJ7ItQo3CfNE=
Subject key identifier: A9:2C:CF:8C:C8:38:30:80:3F:A1:A6:A2:F0:BF:30:2D:53:9E:38:9D
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019AF5AE923CBBF4EBC4B4AD8584D0BE59B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0BFB
Signing time: Sat 06 Dec 2025 22:00:49 +0000
Manifest this update: Sat 06 Dec 2025 22:00:49 +0000
Manifest next update: Sun 07 Dec 2025 22:00:49 +0000
Files and hashes: 1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: Lahzf1WxgNU0EnC+VC7VATnze+TpciwNRGvgMJa/WiQ=)
2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:ae:92:3c:bb:f4:eb:c4:b4:ad:85:84:d0:be:59:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Dec 6 22:00:49 2025 GMT
Not After : Dec 7 22:00:49 2025 GMT
Subject: CN=a92ccf8cc83830803fa1a6a2f0bf302d539e389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:c2:80:76:8d:b9:fd:62:f5:db:7f:a3:35:
58:f0:f3:1a:89:46:0e:29:f6:13:a8:f2:11:5b:35:
af:26:65:2b:13:3f:13:10:75:ef:38:62:65:29:d1:
a5:d0:ee:2d:b0:19:b8:c0:31:16:7c:b8:e8:2e:b7:
84:75:6d:f4:79:75:b2:cd:ec:95:03:02:ca:a5:ac:
91:00:20:95:1a:f8:a5:93:71:85:86:c6:92:57:b9:
4d:8f:ba:c5:1d:6d:1d:ab:84:eb:f6:1b:7d:05:a9:
64:7f:8b:1c:20:e4:98:c8:3e:4e:19:6a:4f:96:1f:
a5:97:9a:62:d9:24:7e:5a:15:6e:1e:82:d2:25:c5:
c8:82:15:52:0d:26:59:d5:4c:ee:90:7e:d5:af:eb:
f2:a8:03:e3:1f:8d:7b:53:f1:1c:00:4b:4d:a3:9c:
51:1c:67:85:fa:e7:8a:d1:88:0a:86:1b:21:f6:3f:
df:72:16:d5:04:41:93:ac:c5:b5:01:5d:2b:55:fe:
49:37:bf:ea:36:0f:7f:89:2d:ac:5f:9e:eb:97:e4:
66:96:2a:be:2d:ee:26:33:96:fc:8c:63:c4:a2:bd:
ad:fb:16:82:99:78:14:ae:0f:69:e1:a4:7b:54:75:
a6:8d:3b:29:17:cd:97:89:8f:6d:b1:2d:fb:95:73:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:CF:8C:C8:38:30:80:3F:A1:A6:A2:F0:BF:30:2D:53:9E:38:9D
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6f:6e:8f:d3:db:45:36:5d:0b:32:c5:2c:a2:44:d1:1d:e9:
f6:e9:ae:03:3b:7d:b3:b2:f2:56:2f:21:88:c3:4a:7d:3b:36:
7c:f7:13:3c:4a:81:d2:78:2d:68:f9:a4:da:02:a3:17:f9:d8:
a9:3a:89:5c:15:5e:ce:ed:45:50:11:de:b5:91:30:fd:f1:64:
72:0a:44:85:19:27:74:36:d3:8c:4e:3d:6a:92:65:4e:0d:91:
54:5c:ca:94:f0:27:34:d7:11:d9:93:de:1e:b1:8b:d3:4a:e1:
e1:e4:fb:df:f5:2a:16:95:66:93:fa:b1:bb:f1:6e:6b:9c:6a:
e3:7d:56:44:2e:bc:02:89:e0:d0:b8:91:b7:8f:29:ec:a5:0e:
61:9d:1f:61:d7:66:93:15:ef:e6:3f:c2:60:91:7d:90:cd:27:
ee:9e:34:e3:01:25:e0:fe:de:58:45:5d:f7:e6:5c:e1:ec:96:
0c:7f:88:c4:41:44:b8:26:4a:d3:ba:dd:6f:fb:5c:a9:6e:72:
4c:28:39:26:16:85:f8:d4:cc:fc:82:17:bd:ac:ec:41:b9:ca:
9b:e0:ad:2f:bb:21:21:f6:6e:43:a9:92:01:2b:33:d3:53:15:
66:6c:d6:15:c8:6a:87:77:1a:91:7a:21:37:7f:9a:24:e1:ea:
66:29:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:20:41 2025 by rpki-client