This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: zOaHNgflVBILjGje4lAZJWvpQRs6CXjrPHLIG+dGpng=
Subject key identifier: FD:E9:7C:48:21:31:BE:E9:95:89:DF:72:A2:C7:C3:2A:57:7F:BA:54
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019AF12E330093BD563FC442209D21542D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 01:02:07 +0000
Manifest this update: Sat 06 Dec 2025 01:02:07 +0000
Manifest next update: Sun 07 Dec 2025 01:02:07 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: NMhZa8iFAgFn1f9i7yUPzIGbLPd3AT6W2i7YjIaZK/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:33:00:93:bd:56:3f:c4:42:20:9d:21:54:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Dec 6 01:02:07 2025 GMT
Not After : Dec 7 01:02:07 2025 GMT
Subject: CN=fde97c482131bee99589df72a2c7c32a577fba54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:c6:0c:ca:8d:75:9f:f6:26:6d:af:5e:4c:
d0:ca:7c:03:98:25:cf:27:13:c2:23:24:06:d7:76:
99:d7:69:90:49:87:ad:77:1e:1e:3d:43:24:8d:c8:
75:83:89:03:7c:93:1e:42:72:52:e8:35:a0:93:75:
56:b7:d3:d5:c2:cf:d1:a4:6d:d2:20:05:db:68:6c:
0f:f9:d3:77:63:61:47:b5:1b:2b:3c:e9:13:48:39:
96:01:16:0e:60:cc:1b:c7:73:c7:20:fa:89:fd:13:
82:ca:e4:95:39:d3:8a:bf:ca:51:53:76:36:38:4a:
26:86:1f:c4:36:24:35:7d:1c:6c:e2:bf:71:ce:ca:
7a:bd:d9:59:05:46:d1:ef:36:5e:88:e2:da:04:fe:
6a:b3:27:d4:6e:d3:6c:0a:48:a3:92:8f:64:41:1d:
96:53:81:42:f5:68:c2:54:ef:04:40:cd:a7:52:d9:
bd:c0:e0:ac:7a:c1:4e:fa:7d:7b:1c:7e:61:9f:a8:
70:fc:b7:59:9a:44:6c:2a:c7:79:8d:58:ee:ff:a0:
e7:21:48:2c:8e:49:c9:9f:5a:09:93:a9:d3:e4:a6:
45:04:08:32:ca:fe:97:51:1e:c7:1e:1a:88:6e:a1:
00:0e:be:e1:39:19:e0:3b:b8:89:ca:ce:d9:fc:06:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:7C:48:21:31:BE:E9:95:89:DF:72:A2:C7:C3:2A:57:7F:BA:54
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:78:4f:66:d7:40:44:a5:0e:8e:e6:02:38:59:fc:64:9a:
29:3f:c9:db:b6:3c:28:60:ff:49:79:37:ab:21:84:5d:af:6b:
09:83:50:08:36:8b:90:d8:a2:49:7d:5a:a1:3c:c9:bf:a1:7a:
42:ab:e2:8f:ca:92:3b:7b:7e:d7:fb:98:a7:73:fc:e3:05:7c:
72:c9:f4:96:ba:8b:ae:da:cd:98:99:2b:d0:75:02:59:13:46:
5a:2d:02:fe:32:f0:72:6f:80:cf:ce:ac:55:15:76:ca:07:89:
bc:55:a9:d3:05:de:25:a1:47:89:d7:b2:f2:87:e8:32:a5:ff:
3a:c1:e4:96:87:e3:f7:49:e2:ea:60:08:e6:44:d7:b7:df:e9:
8e:35:bc:da:f3:61:19:65:e3:98:59:57:5c:ac:42:dc:2a:b5:
b5:fc:4a:a6:9e:d2:72:20:e2:4a:58:c2:44:4e:e7:d4:71:1d:
ba:9f:5d:f3:64:e6:3b:a8:fc:a8:d5:65:4d:d2:65:56:9f:fb:
af:4b:f0:4a:d8:69:93:ba:9e:d8:21:51:fe:46:4e:a6:57:87:
53:dd:f3:01:d9:d0:75:6d:44:7a:10:f6:ec:41:ff:3d:98:ed:
a7:ba:32:4b:ec:8e:eb:eb:db:f0:e2:66:f8:63:af:1d:6c:1e:
7a:d6:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:57:31 2025 by rpki-client