This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: PC7Wh+hwYaannmU5XKavcyr43uHk2+uv95Gaa2079ug=
Subject key identifier: BC:98:0B:C4:E0:12:70:8A:CC:B5:97:3A:F1:32:03:76:5F:83:80:99
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019AF1647F16F12EE2D2886F18FCB32ACB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 05BC
Signing time: Sat 06 Dec 2025 02:01:26 +0000
Manifest this update: Sat 06 Dec 2025 02:01:26 +0000
Manifest next update: Sun 07 Dec 2025 02:01:26 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: 0eNDz09G5ZaE5PHCzKxGsqFif30UupIPsWXysC/or/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:7f:16:f1:2e:e2:d2:88:6f:18:fc:b3:2a:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Dec 6 02:01:26 2025 GMT
Not After : Dec 7 02:01:26 2025 GMT
Subject: CN=bc980bc4e012708accb5973af13203765f838099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:1f:4a:4d:45:37:cb:86:c0:04:c1:94:05:
c7:1d:a4:17:6f:d6:12:1d:03:e2:d6:11:8e:f4:f7:
39:fc:42:5a:86:24:41:ec:c1:1b:86:79:59:3e:43:
fe:e8:d7:f4:76:e7:88:24:9b:65:f8:62:16:3e:34:
6e:df:51:46:60:ea:25:bc:02:86:a1:01:82:7d:b6:
8d:79:f6:e9:0a:93:d9:75:61:74:20:57:f4:f6:04:
a8:7f:70:00:9b:82:6f:96:67:90:dd:85:88:3b:98:
72:39:ed:73:ac:bc:5b:ad:0a:81:51:7a:40:f1:d3:
e7:33:0c:45:2e:c6:87:ed:55:4f:9f:73:58:c9:90:
4a:5d:c6:f4:37:dc:8e:03:3c:a2:5c:d6:93:ec:83:
8f:be:13:d8:37:bf:67:ef:57:27:a5:43:f1:82:c8:
30:23:0c:4f:73:30:ef:bd:9a:e8:6a:3a:37:e5:18:
97:06:0c:ef:73:b5:39:78:ee:11:0f:0d:da:0a:98:
5c:7c:25:08:c7:b3:da:22:8f:c6:37:c9:f0:19:01:
30:9f:93:c9:cd:45:1f:54:f8:9f:52:10:35:ce:98:
9c:fe:67:b3:92:0c:ba:9e:e7:01:34:6f:a2:5f:e4:
a7:c8:b1:d9:99:35:95:c7:30:69:35:4d:bc:23:bb:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:0B:C4:E0:12:70:8A:CC:B5:97:3A:F1:32:03:76:5F:83:80:99
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dc:69:d5:a7:57:5e:3e:bf:32:28:d7:0e:ff:9f:a0:96:dc:
a6:d1:b6:b3:af:9a:7b:5f:c7:63:bc:f2:25:5a:d0:63:d4:f5:
13:25:4d:84:22:a1:cd:c0:ff:64:77:2b:4d:0d:ce:2b:46:ad:
01:01:b9:e2:1d:6e:25:28:58:f2:9f:9e:79:6c:51:10:1f:a6:
6a:5c:f5:e7:23:09:35:bb:67:be:b6:c8:a3:3c:79:01:fc:19:
52:7c:19:26:ef:9a:aa:a0:38:83:b8:fe:17:1c:f4:b3:68:0f:
78:04:c3:d5:5c:fe:39:15:c0:b7:16:13:bf:35:fd:59:48:df:
18:f7:05:16:73:04:ce:57:1f:3e:e4:f7:d1:5d:ba:f7:ab:45:
3e:2e:19:3a:5b:27:11:fb:5b:f7:74:d7:cc:98:b1:e0:37:a9:
5a:6e:db:59:3f:e6:af:be:cf:6d:36:25:5a:55:13:81:ad:55:
a5:18:8e:21:a5:2d:4a:7a:15:03:93:65:b9:0b:94:8b:d2:a1:
31:44:b4:3c:f3:d3:26:5c:91:25:54:c8:2c:d4:bf:b8:32:e8:
cc:45:8b:9f:f2:68:6f:ad:fe:ef:a2:78:52:18:8a:11:65:b2:
9f:58:ba:65:12:01:9d:86:45:23:60:cf:9d:19:20:80:28:b2:
a6:ef:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:22 2025 by rpki-client