This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: InA4w03vrNig689hhOWWcDOH8H/Bckccpx/Xhh4Dx1w=
Subject key identifier: 0A:C3:EA:FD:81:7E:5B:8B:7B:20:D4:2C:D4:68:5E:CC:5F:0B:B0:6A
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019AF20987C10BE5017719A6F008A28E3F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 05:01:42 +0000
Manifest this update: Sat 06 Dec 2025 05:01:42 +0000
Manifest next update: Sun 07 Dec 2025 05:01:42 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: lgUjAsd5dVoC82PvpIF1znNhfl5IkNSV2htEJMhcP8s=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:87:c1:0b:e5:01:77:19:a6:f0:08:a2:8e:3f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Dec 6 05:01:42 2025 GMT
Not After : Dec 7 05:01:42 2025 GMT
Subject: CN=0ac3eafd817e5b8b7b20d42cd4685ecc5f0bb06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ff:29:4d:42:02:6f:b6:49:83:69:77:00:57:
5f:dd:06:70:ed:b8:95:84:81:a7:a5:4e:2e:ea:c1:
c7:40:62:71:d5:8f:5f:35:51:56:38:30:68:f8:48:
be:0f:d2:f5:84:15:a7:db:38:45:86:ab:a5:56:73:
ba:6e:ba:32:3b:57:07:15:b8:36:9d:ab:da:37:f7:
64:5a:78:3b:6c:19:08:89:55:9f:88:2b:04:56:28:
61:cf:85:e1:43:ac:8a:58:63:73:47:ce:e0:84:a7:
ba:f9:40:3e:45:82:98:8f:be:06:08:b9:cc:ca:84:
a5:67:27:3e:01:a6:69:cf:35:a7:61:89:86:d1:87:
d0:a2:dc:87:0c:cc:4a:d1:03:71:27:db:c6:5c:db:
b9:50:5a:40:2f:74:67:18:bd:15:6c:20:67:5c:67:
eb:27:b8:8d:ce:ab:53:fa:34:57:f1:4e:21:9e:f2:
5d:02:a2:9f:da:7f:ea:3b:e7:4c:db:65:e1:65:bf:
1c:f7:1f:da:ef:2d:28:b5:75:12:61:a8:82:f2:cf:
e0:25:14:d3:ca:1d:71:cd:55:eb:45:5c:41:63:3b:
7a:c2:65:3a:ea:ef:48:1d:4e:1c:73:e0:0b:73:a1:
93:7d:af:18:3d:da:10:d3:6d:d7:d7:47:0d:f6:e5:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:EA:FD:81:7E:5B:8B:7B:20:D4:2C:D4:68:5E:CC:5F:0B:B0:6A
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:76:1e:d7:b1:bc:1c:21:16:d1:93:5b:47:f7:b4:f3:18:20:
80:44:b7:c2:45:05:1d:13:e8:db:c4:17:7d:3b:d9:15:6e:64:
93:a9:88:1f:58:cc:a9:ec:47:95:4f:a0:5d:1d:66:0e:62:60:
04:84:c2:b8:ae:ad:cc:0c:5b:c9:c1:31:9d:04:a1:5e:37:42:
fb:a4:5c:ef:a6:35:28:8c:9e:6f:5a:34:7c:e7:b4:37:33:df:
21:a0:60:ff:49:ea:fd:93:95:f8:16:03:c6:65:b7:f9:ff:d8:
65:fe:37:dc:4e:d7:e5:54:72:0d:e6:00:f3:aa:6c:0d:35:13:
2d:24:63:92:51:ea:3f:4a:5b:90:82:83:60:92:f6:7e:a5:7e:
08:53:3b:8a:be:4b:0d:70:be:95:b5:4f:60:1b:95:a8:72:14:
72:67:20:c1:f0:ab:a4:c6:c1:ab:73:4b:50:03:7f:09:16:bc:
0b:c8:c6:f5:13:4c:ef:2e:4e:96:f8:8a:4b:d7:c9:9a:ed:21:
53:47:b8:8b:ca:6f:81:de:52:16:7e:dd:ee:5a:12:ab:03:85:
cd:c3:cf:72:b8:0f:ad:ae:93:c2:2c:5c:e2:5e:4c:dc:d9:af:
39:b0:f6:cd:8d:7d:5c:40:36:1a:53:b9:7b:b1:7a:60:5d:68:
8d:9b:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:10:12 2025 by rpki-client