This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: FKrzoL0oD++Bl1pgDDMJPzV5Jt0/Gw3SeJhiVYqCykc=
Subject key identifier: 93:62:A2:E6:1D:B3:BC:BF:14:D2:C1:8D:C5:65:7F:15:DC:4F:56:9A
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019AF276CD4248ED0C3A68AEF8A68DF56F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0E87
Signing time: Sat 06 Dec 2025 07:01:03 +0000
Manifest this update: Sat 06 Dec 2025 07:01:03 +0000
Manifest next update: Sun 07 Dec 2025 07:01:03 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: xtm27wN/8T1HGhwJG5ByVBfzWv73IdRWS7L7PHbZMlA=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:cd:42:48:ed:0c:3a:68:ae:f8:a6:8d:f5:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Dec 6 07:01:03 2025 GMT
Not After : Dec 7 07:01:03 2025 GMT
Subject: CN=9362a2e61db3bcbf14d2c18dc5657f15dc4f569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:bd:9a:a6:ed:4e:c9:08:3b:d3:20:78:09:
31:f1:8c:6b:b9:b1:da:53:b0:b7:44:77:1a:a7:98:
1a:0e:a2:51:48:da:87:28:86:5c:51:b5:98:da:81:
b8:a9:0d:e8:18:4f:b9:ed:d8:b5:f5:eb:9e:d9:a0:
87:fe:fc:bd:c5:d7:a6:0d:89:ce:4a:de:8e:98:d4:
56:90:04:7d:db:b2:39:4b:78:e4:94:85:da:88:44:
54:95:91:0a:9c:97:f9:55:5a:46:55:fa:fb:aa:7a:
56:2f:b9:04:b4:aa:8f:f9:61:c9:99:69:8f:13:b8:
bd:3e:78:02:8f:8a:dd:6b:9d:b4:86:4d:85:bb:2d:
d0:ec:52:e3:d5:05:d5:2b:78:68:d0:ee:49:ff:f6:
56:be:b1:81:66:32:aa:3f:5e:04:82:3e:17:4b:eb:
b5:90:d5:97:9c:3d:92:c4:ed:51:d6:c8:a5:32:be:
20:c9:4c:1a:ab:4a:f1:f5:fd:26:ce:36:04:4e:ad:
4a:d3:5b:6e:19:ee:62:01:61:c0:dd:45:9c:f6:c8:
5c:bf:a3:77:4e:e7:7b:a4:0e:09:d3:84:40:60:6f:
d4:3a:2e:8a:9d:97:68:6a:b6:b0:27:09:0c:d2:32:
4b:2e:72:dd:63:d0:9a:62:4d:ec:5a:b2:2e:6f:3f:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:A2:E6:1D:B3:BC:BF:14:D2:C1:8D:C5:65:7F:15:DC:4F:56:9A
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:84:f4:7e:5e:06:47:c4:85:be:96:17:54:87:77:51:18:
71:3e:c4:d2:a5:89:84:b6:19:81:c8:93:0a:ef:66:ac:a3:bb:
c8:68:d7:24:1c:86:94:15:c1:2e:3d:4c:e7:dd:88:0c:d2:78:
d8:a8:50:14:70:5f:ec:dc:3d:4e:7b:1f:d9:91:63:38:ce:09:
13:55:a9:89:87:95:26:6d:5a:75:eb:e6:cc:67:ae:93:2a:9f:
7c:ea:5a:fb:1e:8a:65:ae:94:b1:ab:d1:65:4c:b4:66:5f:1c:
c1:c1:ae:9d:bd:13:d0:5a:a6:f8:24:9a:e1:61:42:7b:32:60:
6f:eb:5b:44:80:24:30:34:01:5a:9f:99:b5:a2:0d:da:3c:68:
42:4b:e9:79:5e:2c:94:6b:e5:cc:cd:45:65:86:1b:05:5d:bc:
db:e9:1d:f5:88:97:09:86:d2:04:08:7e:4f:cb:ba:c8:ce:85:
b4:69:30:e2:04:3f:0a:88:65:ca:bf:28:2a:c9:72:9d:70:ba:
6e:73:e8:3e:fa:f1:2d:67:da:c5:bd:a4:f1:4e:e8:91:28:59:
e7:e5:f0:23:ef:ec:e7:b0:f6:88:e4:70:8e:df:b5:84:cd:76:
fd:86:34:82:0e:1f:9a:20:3d:1f:93:26:1f:8a:97:0c:c8:ae:
9c:48:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:31 2025 by rpki-client