This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: E49OpTj/ZeuLKH5lilMlCkinaoxNLz3jQhwoTkv2opY=
Subject key identifier: 11:4B:87:E8:DE:A2:92:E5:AF:5C:6A:5E:7A:4E:D6:36:41:5D:DC:D0
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019AF19AF5A90C8792D0D4B25E2FAC79E0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1458
Signing time: Sat 06 Dec 2025 03:00:55 +0000
Manifest this update: Sat 06 Dec 2025 03:00:55 +0000
Manifest next update: Sun 07 Dec 2025 03:00:55 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: fMVyK4ALF3YKXjhu/So9aQuB8E64lKH593upRa4OqyM=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:f5:a9:0c:87:92:d0:d4:b2:5e:2f:ac:79:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Dec 6 03:00:55 2025 GMT
Not After : Dec 7 03:00:55 2025 GMT
Subject: CN=114b87e8dea292e5af5c6a5e7a4ed636415ddcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:5e:76:4c:a2:24:57:b7:32:4e:b8:8b:3a:
21:f6:3e:7c:7b:03:0a:2f:9c:e2:c1:ee:f8:16:4a:
97:ef:fe:d8:5c:e1:07:14:d2:b5:09:65:eb:ef:5c:
d2:31:dd:d8:f9:18:89:55:54:e9:8f:f9:10:25:84:
c2:da:e1:03:23:2d:8f:24:27:2c:02:ed:5d:c6:4b:
22:b3:52:5a:c6:c4:c1:aa:bc:70:81:a4:e4:be:f2:
89:eb:95:cf:31:4d:7e:92:f8:22:30:b3:ef:84:97:
73:0e:67:45:37:64:fb:1f:b7:70:6c:c3:b2:f6:17:
0d:96:48:9c:42:00:2f:87:8f:40:10:2a:dc:69:1b:
99:1e:e5:0c:3a:72:58:31:46:d6:d2:1e:eb:f7:42:
27:c8:93:24:9d:0c:b5:51:23:1d:de:86:2a:d3:b8:
44:e4:86:10:32:de:a0:ca:fd:a6:61:23:7e:19:c0:
ce:bd:73:d9:f4:9d:82:75:b4:8f:b6:ef:b4:cf:70:
d4:75:4e:52:b5:5b:0d:d7:ba:49:f2:4d:ee:3a:fb:
c4:6c:34:1f:bf:94:97:b8:fb:fc:97:c1:8c:90:5c:
ae:98:4e:21:e6:c7:03:33:a2:40:c2:7c:58:8a:26:
ec:bd:98:65:1c:ce:1e:34:f6:f8:ab:40:4d:33:ed:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:87:E8:DE:A2:92:E5:AF:5C:6A:5E:7A:4E:D6:36:41:5D:DC:D0
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:34:64:36:0b:16:28:2d:d6:08:1b:73:04:d6:12:bf:10:cb:
48:f3:93:49:4d:cf:6e:a9:0e:3b:8e:f7:5e:ab:ab:5d:d2:d6:
d9:95:95:12:26:c5:d8:50:d3:d6:b1:00:2b:68:24:51:c4:3e:
83:c7:16:15:f5:2a:e8:ca:b1:52:56:6f:64:59:dc:d6:ac:bd:
dd:ed:41:cb:00:8c:f3:81:2f:5d:a9:ae:e6:6f:22:1d:cf:83:
14:93:b9:d6:40:4b:10:d8:e3:39:fa:25:dc:3e:c0:bd:6d:be:
cf:e2:eb:17:8b:c7:92:c4:ab:16:29:63:51:35:f4:58:e0:3e:
e0:1b:21:5c:17:06:d2:b4:d5:68:f8:16:6d:57:1e:e4:e2:27:
23:a6:b9:17:91:12:36:99:c0:9b:68:db:11:6a:76:38:80:ce:
2d:15:a1:aa:21:aa:7c:1b:75:46:f7:bf:f3:67:0e:04:3f:33:
03:60:31:96:0e:ed:e7:c2:4d:57:62:34:f5:30:90:1f:a4:53:
12:bb:5d:f3:c4:31:b1:7a:2f:d0:14:80:c1:37:96:60:f8:00:
9c:8b:71:af:4d:17:a0:96:19:73:2d:67:3d:44:13:ce:a6:df:
8d:51:10:02:95:f7:e2:5d:f0:29:af:ab:64:9f:0f:ab:71:ed:
f7:c9:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:02 2025 by rpki-client