This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: MI87zOh7J7Ze1mQIctbTis5fHB+yQqtPtZft9oMci7I=
Subject key identifier: 2D:C4:BC:B9:F6:B7:C8:20:A4:D7:35:47:72:DF:1C:83:26:25:22:A9
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 019AF352C9A7AEE9D7E392447BC3D13626AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 11:01:20 +0000
Manifest this update: Sat 06 Dec 2025 11:01:20 +0000
Manifest next update: Sun 07 Dec 2025 11:01:20 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: XK6RIzAOA86XRPgmmymK/2KBourvW2gGTdcx8oxxpyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:c9:a7:ae:e9:d7:e3:92:44:7b:c3:d1:36:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Dec 6 11:01:20 2025 GMT
Not After : Dec 7 11:01:20 2025 GMT
Subject: CN=2dc4bcb9f6b7c820a4d7354772df1c83262522a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:c4:ce:6c:bc:77:51:c0:25:e5:aa:05:ca:
f6:6f:c8:e0:ff:0a:87:84:fa:db:c2:d6:76:7f:e8:
ea:fb:63:66:3e:93:fe:97:59:21:d1:e2:68:1a:48:
44:92:69:88:3e:b6:3d:13:c0:ae:e5:61:02:58:f3:
c3:b8:31:23:57:2b:4f:58:a4:a2:05:2d:d3:e8:46:
b1:23:1d:3b:8e:57:a7:ce:05:48:47:d5:46:38:1d:
de:fc:60:a0:d2:e1:af:d4:01:1a:c3:72:fe:76:76:
a6:18:cf:1f:74:04:d0:52:37:38:df:bb:2c:72:27:
37:90:70:2c:89:04:8b:3a:ee:36:fa:1e:83:7f:0b:
af:97:66:51:61:26:ed:5f:13:d5:83:97:37:bc:62:
07:87:8c:a3:dd:d0:e4:21:05:15:10:40:7b:cb:13:
8a:31:1d:21:d9:f5:f5:89:f8:f9:34:e1:75:07:56:
14:ea:52:fe:2a:71:10:4a:f2:e1:f7:f3:3a:4f:cb:
c0:9d:f4:f5:95:19:40:65:84:ca:22:2b:fb:46:d7:
37:a3:68:91:fd:d1:b8:f8:57:d1:e9:89:c5:8d:fa:
ac:2f:dc:da:ac:33:39:5e:d5:21:7e:8a:ae:d4:0e:
68:3c:dd:1f:b4:69:1f:f9:fc:ca:e1:c7:49:ed:91:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:BC:B9:F6:B7:C8:20:A4:D7:35:47:72:DF:1C:83:26:25:22:A9
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:ad:32:2d:37:05:48:8b:7a:5f:98:64:08:40:e3:2e:b1:
49:5c:45:ed:ec:e5:c4:bf:6b:61:bb:24:96:e2:30:88:18:8f:
27:99:38:85:e5:75:77:8b:cd:e5:bb:34:0b:87:17:52:4a:b0:
96:7f:87:09:a3:36:4b:c7:31:06:81:fb:68:b2:ce:68:7e:e4:
ab:c3:45:05:fa:d7:f4:4e:7e:87:2a:9e:6f:b8:0a:4e:cc:91:
30:f9:74:aa:33:1e:21:3f:d2:39:58:d8:3c:e4:85:3f:14:5a:
df:64:48:7d:1f:80:3b:10:d6:8d:67:27:d4:9a:11:33:1a:ac:
09:78:89:4e:7d:bb:8d:54:d7:ec:2e:04:ae:97:f7:32:7c:9e:
09:4b:82:f8:8e:48:a6:2a:bc:46:51:24:7c:02:c7:00:69:82:
8d:bd:5d:be:99:3a:77:eb:72:bf:29:f9:8b:22:12:eb:be:ef:
c7:66:75:99:8f:4b:78:91:46:7c:e9:20:96:ef:87:92:8d:10:
c0:d2:6a:e2:b2:5e:44:d7:10:1c:d1:5d:1c:e1:f4:2a:66:32:
fa:9b:53:ea:ff:5b:26:16:11:71:77:d7:44:22:b0:ec:42:6e:
f3:16:15:23:3e:3a:49:e6:04:01:e3:1f:ab:63:37:4b:11:a6:
d5:36:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:25 2025 by rpki-client