This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: wvwDUkL3eMBz4ZIA0TA+cZlZf22Uux+JQv4x8jZhhR0=
Subject key identifier: 70:EB:4D:75:38:21:55:45:EF:E8:E9:48:45:C9:56:6A:6F:6F:71:BA
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019AF50BAB3935CD6CDAD25B6DFDCD12B8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 19:02:53 +0000
Manifest this update: Sat 06 Dec 2025 19:02:53 +0000
Manifest next update: Sun 07 Dec 2025 19:02:53 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: t60qOMRyNrzfAtJBEzEurcIyCS/Sk5VepYT9DR6u5y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:ab:39:35:cd:6c:da:d2:5b:6d:fd:cd:12:b8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Dec 6 19:02:53 2025 GMT
Not After : Dec 7 19:02:53 2025 GMT
Subject: CN=70eb4d7538215545efe8e94845c9566a6f6f71ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:58:81:ea:54:4d:e4:ce:d9:0d:3d:68:c8:
18:f3:fe:ce:9c:6d:35:10:fe:7d:c1:13:71:24:d3:
ef:8f:97:01:9d:41:cb:ef:6d:0a:df:a3:eb:70:15:
06:d7:fb:3e:8c:55:d9:e5:b9:08:70:dc:43:37:64:
ea:7e:60:e6:99:3b:3f:27:b2:e1:d1:d7:28:1e:90:
a7:e7:c8:39:e1:5b:10:0f:42:a7:2f:02:97:90:b4:
4a:5e:da:e7:33:70:46:33:b5:5a:c5:c9:ec:4a:00:
4d:5b:dd:6e:75:1a:31:d3:c1:4e:48:04:42:06:98:
73:45:78:8c:8e:b7:4a:ca:1c:82:61:9c:81:aa:0e:
54:21:c2:0d:75:a6:83:06:ca:d6:1a:37:f9:0d:ee:
ad:b0:69:0b:fc:39:7d:86:6d:73:ab:59:df:59:bd:
bb:82:65:1b:c2:57:cb:e2:9d:5b:55:3a:3b:af:2e:
a6:73:de:80:0e:f4:4b:87:db:9c:2a:fb:4a:ec:53:
d0:f1:7f:fb:1f:87:26:7e:ae:f4:13:68:76:de:97:
55:27:a3:2a:78:1f:10:c0:4e:01:b7:d4:99:bc:7e:
34:a3:9a:2d:57:58:4d:72:5d:5c:e9:2a:61:0d:d6:
d5:ed:76:b8:e7:da:85:5f:0c:e0:bd:5a:0e:a3:f8:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:4D:75:38:21:55:45:EF:E8:E9:48:45:C9:56:6A:6F:6F:71:BA
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bc:09:71:89:19:7f:9c:7d:c0:5d:50:83:31:55:c7:49:67:
15:91:2c:b7:00:f9:b7:ff:43:0d:be:7d:9b:6a:9c:cf:db:83:
8d:d9:ba:9a:93:b5:08:47:03:47:9d:8e:3d:a0:c5:4f:d1:86:
82:08:8c:52:8c:de:94:28:24:35:2c:b8:ba:0e:72:67:ff:64:
8f:27:23:57:aa:e2:67:e9:20:fe:91:f3:d6:36:fc:fe:5f:2d:
4c:aa:f3:71:30:85:2d:8c:3f:32:b7:f9:3e:cb:b7:1b:b5:41:
23:a1:58:27:d6:5d:6e:44:2e:bb:21:0d:9c:39:61:36:0e:ec:
4a:86:a1:75:6a:e5:c6:52:92:73:9a:33:95:d9:38:0d:d1:f9:
3f:04:a3:1f:b2:9d:03:a7:43:68:b9:55:cf:00:5e:05:bb:48:
02:44:af:e8:56:df:f7:26:33:54:2c:f9:f1:26:f0:6d:69:d6:
d7:b8:c3:e9:76:1f:19:8c:02:74:e1:7c:4e:0c:b5:e8:a4:f3:
64:73:6d:a8:73:9d:8b:96:20:d6:00:f5:62:41:cc:92:fa:bf:
65:b0:01:f5:02:23:cf:6a:c6:e0:26:68:a6:74:23:21:fb:ed:
0e:05:b6:a7:0a:fa:7d:cf:c5:c8:1e:74:1f:5d:b0:2a:bb:f3:
4f:c8:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:24 2025 by rpki-client