This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File: 2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier: Lc//BH8RvwBUCLYWjQDVa9yIg3/spkNDDP6+MyYt1HE=
Subject key identifier: 76:CF:DA:E6:09:A1:BD:3E:42:33:44:90:65:36:4C:0A:B2:CC:A7:18
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 019AF57772126FD857829078F44B68B207E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number: 04EC
Signing time: Sat 06 Dec 2025 21:00:37 +0000
Manifest this update: Sat 06 Dec 2025 21:00:37 +0000
Manifest next update: Sun 07 Dec 2025 21:00:37 +0000
Files and hashes: 1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: LJZS0ib634MlwMFzGazfzOGnnTk8CtEC1IScwF078g4=)
2: unxQV4Al2mLpnwI70qRpIDmTnOs.roa (hash: nWcMiPSfSb9yfnTzVXtb4VL1rzMEuoLvPQwzaYNt8PI=)
3: vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa (hash: Fg81qYF19AaSbeLDfj9BfeZ+UCo1V2TWp+mQX1SfkJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:77:72:12:6f:d8:57:82:90:78:f4:4b:68:b2:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: Dec 6 21:00:37 2025 GMT
Not After : Dec 7 21:00:37 2025 GMT
Subject: CN=76cfdae609a1bd3e4233449065364c0ab2cca718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:ae:c9:86:5a:20:dc:a7:bd:35:5b:c2:80:
69:d1:e8:7a:4e:31:4d:1f:73:dc:67:30:d9:dd:92:
5e:fa:3d:23:2f:e2:ef:06:d2:3c:fb:ce:2d:43:ff:
5e:ce:ad:6b:a3:0d:71:56:c6:f7:9c:e6:cb:7c:3d:
4f:1e:74:99:59:61:8c:11:b4:5f:34:3d:c1:0a:85:
bd:ba:b8:64:96:a6:69:72:68:06:58:a9:d4:4c:74:
36:88:f3:c2:8a:cd:ed:5a:15:01:f0:a6:a9:1c:e9:
85:e3:41:bc:4e:6c:79:2c:11:e6:1d:8b:71:62:8d:
d6:ef:3b:5b:13:d6:2a:55:66:a2:99:3d:86:dd:c6:
74:7d:7e:c2:e0:82:47:81:69:92:12:ab:df:25:e9:
c5:04:cd:32:a0:48:f2:3d:7a:2d:38:e4:8a:3a:6b:
ac:05:9a:65:ef:17:e9:8d:89:48:1d:c2:a3:d4:6f:
42:bf:c7:eb:d9:74:4b:b0:6d:50:28:d6:c9:ac:e1:
19:00:1f:54:25:30:53:70:ca:cd:d8:20:84:a8:dd:
67:24:5d:d9:c3:4f:f3:1e:89:de:8c:fd:57:e8:d5:
58:bc:dd:48:6e:e8:b9:fe:e0:ef:59:e6:9f:f6:c2:
0f:30:68:da:41:21:81:a3:b3:41:78:56:6b:1c:9e:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:DA:E6:09:A1:BD:3E:42:33:44:90:65:36:4C:0A:B2:CC:A7:18
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2b:12:2b:e4:a0:39:03:3d:f1:35:80:23:83:25:91:85:2f:
33:30:a9:a4:85:a4:f3:c7:04:59:f0:2e:df:2e:06:78:85:a6:
2c:12:51:37:ba:fb:84:e9:01:cd:a5:6a:be:f8:3e:eb:90:6c:
83:0f:2b:4a:c5:b9:fb:f0:c2:47:f2:93:e2:c6:36:c6:b9:1e:
a0:33:1d:8c:3a:ee:7a:2c:50:73:87:5c:58:14:f9:4e:27:b3:
b1:b9:98:5b:67:56:29:ba:1c:30:71:d2:7f:8b:91:b6:0f:12:
26:6d:93:e8:25:84:65:5d:27:06:f6:5d:7a:2e:5d:64:6c:9e:
a0:1a:42:cb:73:09:b8:90:84:96:93:dd:5e:74:bb:c5:59:96:
46:07:a4:47:00:17:07:21:e5:dd:4a:58:d7:dd:31:ef:95:3a:
a0:fd:a8:a4:ef:7c:c0:9d:b0:69:3c:95:2d:3f:8c:a3:7d:a1:
78:a6:f4:c7:2a:f7:0c:b1:bb:d9:6a:91:c6:85:88:c5:f3:7c:
24:1a:e3:50:2b:56:d6:b4:81:b9:45:1f:b3:24:e1:45:54:ed:
29:d3:10:e3:c1:fe:e3:7e:4c:50:a0:0f:12:65:6e:22:f2:18:
4b:24:b0:d0:c1:b1:d1:e3:67:b8:09:4f:45:16:31:cc:3c:d4:
2e:26:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:36:25 2025 by rpki-client