This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier: k2M+rrR5sHezdKWGTp2SfM4u5GGUWooKOvMgFLu11f0=
Subject key identifier: 7A:70:DF:20:70:32:5C:90:B0:78:5D:CD:DD:B4:AE:FC:0C:5D:68:C9
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019AF12D60970426EAA772B4D652393A5378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number: 178A
Signing time: Sat 06 Dec 2025 01:01:14 +0000
Manifest this update: Sat 06 Dec 2025 01:01:14 +0000
Manifest next update: Sun 07 Dec 2025 01:01:14 +0000
Files and hashes: 1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: qbSvnJiXgH4LoV5gdDpDLUBsUfX+pwvewBWfwY7Gvjo=)
2: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
3: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
4: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
5: _vpABpH1G0K1MkWppXgkduvknzo.roa (hash: vpV6s9o/VZ8yHVBA8qgPNDiqKNndzHDCOpFszNMOBTw=)
6: vDPixKgN9cnWG32t5mlBhsbJW7w.roa (hash: w3x81UuJu604xVLv5Y9pzJS6KY4OE1wgLypWn562lG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:60:97:04:26:ea:a7:72:b4:d6:52:39:3a:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Dec 6 01:01:14 2025 GMT
Not After : Dec 7 01:01:14 2025 GMT
Subject: CN=7a70df2070325c90b0785dcdddb4aefc0c5d68c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:64:3f:b0:ed:90:92:00:6f:e3:22:a3:cb:
0b:9a:38:c6:9d:66:3c:94:65:e7:7c:0a:6d:a1:3d:
d6:92:7d:49:1a:3b:0b:a0:7c:6f:88:70:f6:a8:7a:
09:83:46:b2:34:dd:c3:c6:57:52:31:0c:ee:1f:45:
9a:30:31:e3:3b:03:de:0f:1b:db:3f:a5:2b:ba:de:
b2:94:cc:23:d7:24:9a:05:dd:55:fb:45:61:54:3a:
70:74:7c:79:b0:ed:8a:43:86:39:bb:cb:ea:86:c4:
b2:6d:9d:1e:10:bb:f7:43:1a:58:3c:d9:9e:73:2f:
1f:0d:86:d9:74:bb:1f:90:0e:d2:46:86:6f:5f:b9:
aa:3e:36:e8:8b:88:4a:73:34:fd:5a:44:0e:a9:8c:
f2:b6:0c:60:24:52:92:ce:e2:a0:30:b1:e8:62:34:
65:e7:d2:f0:1b:4c:8d:40:6c:05:d1:6f:e3:ba:9e:
4b:1f:f1:f2:21:9e:c0:68:5e:5f:18:06:3c:55:af:
86:3e:38:fd:a9:fd:18:cf:c6:4b:0e:d8:3e:1a:bd:
a9:6f:69:97:fc:e6:2a:0d:48:d0:a1:2d:34:4a:99:
9d:4b:aa:91:0f:b1:6f:5e:f6:81:8d:5c:40:0e:1f:
0c:89:3d:68:67:32:79:07:69:aa:84:8a:ae:c4:3c:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:70:DF:20:70:32:5C:90:B0:78:5D:CD:DD:B4:AE:FC:0C:5D:68:C9
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:1f:c9:c8:1c:65:17:17:dd:32:4c:9c:f5:8a:3e:9e:32:
55:0b:bd:53:b3:a5:5c:16:27:29:e9:b0:62:ec:ac:3c:0c:48:
17:74:c1:5c:ed:b0:9c:96:3d:92:55:5b:d9:55:90:9c:be:5f:
17:0c:6c:cc:d4:59:0c:7b:23:d0:66:42:78:d2:8b:b7:06:4d:
01:72:d0:6f:3d:0e:01:5c:4d:b3:68:1a:f7:25:20:46:f6:67:
c6:e2:24:83:4b:dd:23:70:f1:b9:a6:aa:bf:20:5f:6c:b5:7c:
66:4a:06:0d:d2:e3:be:26:7b:ac:18:79:a4:e0:07:69:35:7f:
62:c5:6b:82:00:ee:12:cc:3f:34:9c:95:06:e8:7e:54:a1:42:
3d:85:09:c0:65:5d:64:48:3b:bc:66:4b:b2:a3:c4:6c:e0:94:
3d:80:0a:b0:e2:a8:bf:4e:94:50:1a:4a:19:fa:47:2c:02:f5:
23:80:7e:f6:b6:d9:ee:5d:e6:c3:c7:19:3d:77:2b:4d:11:0e:
4b:fe:c8:f0:49:ac:d7:4f:f9:e1:cf:e2:06:a7:be:a6:78:d6:
81:e0:b4:d6:a0:23:46:f0:00:38:05:b2:26:e8:6b:4e:f2:ef:
e4:8e:40:2f:6c:3c:96:7a:64:d8:b3:ce:c6:ef:d3:60:bd:10:
d4:a3:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:32 2025 by rpki-client