This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: +Iy7a7Gb+PajxKexD/oGkfnBS3fjECmd8sdPqkUWaoY=
Subject key identifier: 45:52:23:DA:41:83:63:68:FB:90:97:16:D8:22:E7:97:E3:1D:03:F1
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019AF31C2767D1A45AF040C735579A7F9EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 13AA
Signing time: Sat 06 Dec 2025 10:01:39 +0000
Manifest this update: Sat 06 Dec 2025 10:01:39 +0000
Manifest next update: Sun 07 Dec 2025 10:01:39 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: TVUqj8jsNPsHnd0G9DxqZKgOWy2hHRhVaiCzEoTbBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:27:67:d1:a4:5a:f0:40:c7:35:57:9a:7f:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Dec 6 10:01:39 2025 GMT
Not After : Dec 7 10:01:39 2025 GMT
Subject: CN=455223da41836368fb909716d822e797e31d03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:24:e9:51:46:93:ea:c8:69:11:6e:a7:cf:
00:f1:75:5f:c4:90:c7:89:2f:5b:cf:55:d0:78:d8:
32:72:cb:2b:56:89:73:9b:28:e2:e0:a5:fd:a7:95:
89:79:7a:eb:e3:3b:9c:83:e0:b1:f4:90:3e:38:bd:
e6:23:b0:6b:ff:c0:4d:c4:24:8e:11:78:26:cd:97:
4d:30:ad:1c:dd:9f:7e:5f:4f:7c:fd:bb:c9:e0:43:
4f:b2:12:70:9b:8c:27:c9:81:bd:29:f9:8e:92:f2:
74:a8:44:73:98:19:c2:1c:3b:05:3b:9b:f4:78:0c:
6d:82:a3:ab:59:e7:bf:a2:9e:a9:54:d5:80:c2:98:
86:26:34:d4:9d:86:ac:89:40:0e:7d:8a:3f:3d:32:
18:37:40:aa:f1:76:d5:9f:c6:5a:ef:6a:47:28:e4:
0c:68:cf:19:d5:8c:5e:1f:d8:b6:14:b2:1f:a6:64:
9b:f0:ec:57:6a:64:aa:74:2b:c8:3a:14:eb:f7:24:
7f:59:38:2c:47:38:be:35:5c:da:57:14:6c:52:b2:
f3:77:5a:b1:22:82:b3:fd:04:00:3d:d1:48:be:e2:
c9:06:bd:bc:da:80:1c:68:2b:ea:de:a4:0f:cd:22:
95:34:91:b7:2d:b7:10:f4:76:0c:0b:fb:3a:9a:bd:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:23:DA:41:83:63:68:FB:90:97:16:D8:22:E7:97:E3:1D:03:F1
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:87:3f:f8:53:d4:b9:08:af:78:d5:76:c2:b7:df:6d:31:
5d:4d:c3:c1:3d:e8:8c:bb:1c:1d:fe:1a:2a:54:b5:30:dc:26:
7a:e3:7a:37:1d:49:00:e7:38:02:7f:2d:05:c8:bd:05:92:98:
d4:09:48:59:38:59:e5:ae:51:78:d5:00:22:13:b1:24:9a:1e:
36:19:1c:f1:87:2b:3f:59:2e:47:50:be:2f:5b:31:c0:6e:98:
ce:2a:55:1e:f7:11:22:ea:e8:b7:6b:3e:fb:f1:60:2d:98:b0:
bb:95:b2:9b:fe:9a:8a:d1:eb:b3:6b:c5:d5:10:ef:a1:3f:69:
f5:c5:16:8b:bb:19:d3:c1:48:cb:ac:d6:3d:af:df:bb:ff:e2:
a4:0e:c4:b3:e1:74:17:f0:2c:e7:40:ce:41:55:e4:ed:bb:9a:
99:d0:3c:18:fc:f2:7c:e2:1d:43:62:e6:db:f8:dd:1e:37:43:
b4:57:e6:5f:23:b2:e3:d7:f9:78:fd:c6:fc:b2:b8:83:c2:de:
c8:1a:63:c5:fa:47:07:0e:9f:e2:e9:a6:4c:61:b9:8c:34:c4:
60:56:62:51:6f:94:b8:4d:fa:dc:e1:66:3c:ee:04:bb:44:f8:
21:3e:1a:e0:31:d6:93:4d:ec:ee:25:77:5a:a9:6c:3f:5f:3e:
95:8c:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:10:23 2025 by rpki-client