This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier: 7deETqZV9qGTaojJNZzefaQ1IuXMooIqIf9rqvkpkvo=
Subject key identifier: 1F:31:72:98:2D:10:77:0C:A8:A3:04:AD:26:06:D6:39:4C:8E:88:E2
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 019AF1D1D36F13A29B311D8280EE277DD9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 04:00:51 +0000
Manifest this update: Sat 06 Dec 2025 04:00:51 +0000
Manifest next update: Sun 07 Dec 2025 04:00:51 +0000
Files and hashes: 1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: robetHb/UZz4CuNnPfMF1ZuNkstBm0KH+fni7yWWlnk=)
2: zXpgIfivUxV3ksiBOIvLcsg5wsg.roa (hash: kEoJUet4XPH+HygffLp7TrLFhJPdEY2uJaOE3uj/HMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:d3:6f:13:a2:9b:31:1d:82:80:ee:27:7d:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Dec 6 04:00:51 2025 GMT
Not After : Dec 7 04:00:51 2025 GMT
Subject: CN=1f3172982d10770ca8a304ad2606d6394c8e88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:fd:5b:a9:48:ae:e8:26:28:8f:37:fc:b0:
13:02:87:3d:be:e3:53:41:0b:02:f1:f2:08:c5:29:
00:30:be:b0:c6:10:4a:61:1f:48:96:8c:0d:73:bf:
e6:9b:fb:a8:22:85:b4:6c:51:c6:bf:f4:d5:58:77:
c7:f8:ca:f7:2f:c8:e8:a5:2f:cc:d8:99:2d:e6:81:
da:a6:12:88:73:e9:7d:da:37:5d:f4:81:9e:96:99:
6c:79:8b:c0:d4:5b:c0:78:9d:79:39:94:27:ff:8b:
16:ec:18:c7:14:89:98:14:93:a2:d8:f6:51:ee:3f:
f0:c2:2c:de:02:d5:98:7f:1a:b7:f4:a7:70:67:17:
41:ae:bb:f7:4d:d7:4b:19:2b:82:10:88:da:9e:30:
a4:c3:b1:f5:53:d6:ad:30:a8:7e:3b:b0:48:1a:45:
c3:39:c7:98:22:35:ee:c5:54:7e:1d:26:d0:59:60:
c3:19:35:46:92:bd:65:d1:8f:b1:b9:5a:49:3f:91:
e7:54:27:30:be:b3:2c:b4:90:e5:a7:ed:6c:b3:a9:
9f:33:5e:af:26:8b:3f:97:76:be:8f:a4:fc:3e:62:
6b:cf:27:1c:f4:14:5e:87:49:34:12:8a:91:94:4f:
bf:2c:d8:2c:6e:d2:fc:be:39:a8:65:3a:56:37:f3:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:72:98:2D:10:77:0C:A8:A3:04:AD:26:06:D6:39:4C:8E:88:E2
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:e6:4e:db:5d:eb:9d:ca:3e:1b:f9:cd:44:1c:24:1f:a4:
d0:7b:42:69:c3:f9:a1:0b:b6:ad:d7:5a:f7:02:ef:b4:9a:56:
a7:7c:95:1d:f5:a6:b3:91:97:d5:2f:94:97:26:ac:f7:b3:79:
59:c7:ed:85:3e:a2:55:c6:72:b0:ca:8d:84:fd:33:44:07:52:
f8:cb:4a:ed:57:38:8e:b8:44:23:08:fc:32:f0:ea:96:ed:7b:
68:0b:19:43:d0:ad:28:03:6e:3e:38:ce:0d:04:f1:e5:79:8b:
72:68:4a:61:bd:35:3a:be:05:d9:6b:ea:d1:e1:35:1a:e4:5a:
28:77:ce:b2:b9:8d:d0:38:c3:7a:7f:ea:d7:e0:10:11:4a:cf:
1d:7d:17:2e:23:d3:aa:f8:f7:69:41:e6:2c:86:81:66:45:22:
71:a4:37:fc:f8:5e:f3:34:7a:22:b7:c5:95:18:ed:d3:e4:62:
78:fd:ce:f2:ca:a6:fb:89:d3:3a:75:f0:b5:26:06:02:7e:17:
49:ba:40:07:5e:5a:be:a6:0c:37:1e:5f:c8:2f:4a:b4:35:3e:
0a:de:c3:e0:ad:75:41:e4:a6:5a:47:f5:52:5a:46:ba:ec:c6:
2a:02:70:a5:09:66:7b:7d:ae:0e:25:15:fc:e0:c3:5c:61:6d:
d5:fa:05:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0dNvE6KbMR2CgO4nfdnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDMxMzY3NjA4NTY0ZDg3ODNiYjI0MjQ4NmU5M2Q2NTA2
ZTdmOTUwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD
EygxZjMxNzI5ODJkMTA3NzBjYThhMzA0YWQyNjA2ZDYzOTRjOGU4OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24P9W6lIrugmKI83/LATAoc9vuNT
QQsC8fIIxSkAML6wxhBKYR9IlowNc7/mm/uoIoW0bFHGv/TVWHfH+Mr3L8jopS/M
2Jkt5oHaphKIc+l92jdd9IGelplseYvA1FvAeJ15OZQn/4sW7BjHFImYFJOi2PZR
7j/wwizeAtWYfxq39KdwZxdBrrv3TddLGSuCEIjanjCkw7H1U9atMKh+O7BIGkXD
OceYIjXuxVR+HSbQWWDDGTVGkr1l0Y+xuVpJP5HnVCcwvrMstJDlp+1ss6mfM16v
Jos/l3a+j6T8PmJrzycc9BReh0k0EoqRlE+/LNgsbtL8vjmoZTpWN/NUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8xcpgtEHcMqKMErSYG1jlMjojiMB8GA1UdIwQY
MBaAFHPTE2dghWTYeDuyQkhuk9ZQbn+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQt
MDJjNTAwOGJjYzA5LzEvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQtMDJjNTAwOGJjYzA5
LzEvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmDmTttd
653KPhv5zUQcJB+k0HtCacP5oQu2rdda9wLvtJpWp3yVHfWms5GX1S+Ulyas97N5
WcfthT6iVcZysMqNhP0zRAdS+MtK7Vc4jrhEIwj8MvDqlu17aAsZQ9CtKANuPjjO
DQTx5XmLcmhKYb01Or4F2Wvq0eE1GuRaKHfOsrmN0DjDen/q1+AQEUrPHX0XLiPT
qvj3aUHmLIaBZkUicaQ3/Phe8zR6IrfFlRjt0+RieP3O8sqm+4nTOnXwtSYGAn4X
SbpAB15avqYMNx5fyC9KtDU+Ct7D4K11QeSmWkf1UlpGuuzGKgJwpQlme32uDiUV
/ODDXGFt1foFVA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:06:46 2025 by rpki-client