This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: rTaKUAvqkJExcmk3FPLFd5RxwRcHNm9C2hIPR2HEFJ0=
Subject key identifier: BE:B5:44:82:4D:7C:6D:99:3C:14:FA:D9:86:12:71:E8:A5:C6:1B:9F
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 019AF1D1E4048EA389CBDB56BBE47DD4B42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 0641
Signing time: Sat 06 Dec 2025 04:00:55 +0000
Manifest this update: Sat 06 Dec 2025 04:00:55 +0000
Manifest next update: Sun 07 Dec 2025 04:00:55 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: JUClbg7OmhRjAaQkzPIxrDwDXAWg9yL7CaXd6SIjHck=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:e4:04:8e:a3:89:cb:db:56:bb:e4:7d:d4:b4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Dec 6 04:00:55 2025 GMT
Not After : Dec 7 04:00:55 2025 GMT
Subject: CN=beb544824d7c6d993c14fad9861271e8a5c61b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:31:fb:4e:54:30:85:53:6f:11:eb:93:af:
22:36:2d:a1:59:b8:1d:eb:ef:c6:65:47:bb:cd:a9:
9f:66:c0:89:67:75:83:8b:72:1e:8b:e9:bc:0a:b1:
0a:22:fb:41:9c:3b:3d:06:07:cd:ed:c0:60:53:7c:
0f:0f:52:f5:08:8c:5e:c8:a1:e4:5a:25:65:db:8a:
57:64:f0:e7:93:6a:56:ba:e0:83:ef:a9:0d:f4:0e:
1d:1f:83:30:50:05:52:19:6c:a9:68:e3:a2:9a:22:
61:16:30:fe:05:15:ee:d6:ca:8c:3c:4f:69:e1:95:
a0:b9:82:be:01:cc:e7:74:5a:2d:9e:43:fc:fb:97:
db:c0:54:3c:03:ba:3c:88:bf:ba:3c:20:62:f1:d8:
21:d1:44:45:e2:a2:cf:d8:50:9e:18:66:47:2f:fb:
66:21:bb:7f:81:85:7b:a6:21:4f:33:f5:ec:f3:8d:
61:c7:d6:a5:2e:16:62:ee:24:69:b0:8e:dc:9f:52:
db:57:33:66:6b:c2:3a:34:3b:4c:fe:4f:88:14:c7:
97:47:4a:bc:7c:b1:a0:6a:5d:fa:d3:35:a2:0f:93:
57:e5:67:3f:17:a1:d1:f4:05:44:c5:32:84:0f:35:
9d:3c:6a:ec:4d:fd:af:c4:ed:02:43:e5:94:ef:f4:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:44:82:4D:7C:6D:99:3C:14:FA:D9:86:12:71:E8:A5:C6:1B:9F
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:b0:8f:53:e9:ef:1e:58:3c:e5:54:3e:96:07:69:d1:59:
72:75:c6:8b:33:6b:16:d0:8c:cb:d6:be:43:e3:2e:95:0e:2e:
2b:cd:a1:7d:58:25:56:be:cd:97:28:c3:b3:14:e8:e7:44:ca:
a4:1a:f0:6d:2f:9e:16:6a:5d:47:fd:58:2c:db:f3:59:20:12:
1d:b1:ce:d2:aa:82:40:a9:16:c9:44:6b:2b:e6:4c:ce:18:4e:
95:84:78:0c:2e:bb:eb:7a:f0:9c:20:0d:84:b1:a0:b8:2f:80:
98:68:73:8a:1d:42:a3:f8:7d:88:3f:92:1e:de:1f:60:25:dd:
dd:d4:a8:b4:f0:d6:08:b6:04:86:b4:39:83:a1:d8:3b:1c:54:
eb:ce:1a:fe:6b:99:7e:d0:0d:7c:9d:e6:39:74:27:65:e5:03:
2f:37:a8:62:13:94:99:7a:fb:17:86:6d:5d:be:07:e4:25:41:
33:ee:f2:00:3f:3d:9c:3c:9d:71:98:ae:7a:ce:4d:38:cd:4b:
d0:f0:36:ee:89:1d:07:73:07:00:27:c5:b3:bd:1d:96:9d:21:
e0:ac:ce:c5:f1:73:12:08:ab:5b:52:a2:91:05:b1:d7:75:ae:
4f:3c:89:e1:17:26:b1:27:f0:09:86:56:3e:8c:a2:5e:6f:2e:
b2:15:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:17 2025 by rpki-client