This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: cJfrDJqghkUycqACwB0nEjn74LruxpKxnWbNww3olMk=
Subject key identifier: 0E:84:D1:03:75:82:57:75:C4:68:DF:75:0B:22:08:B3:DB:22:7C:9B
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 019AF31D0D852C2EC13CF83B2E42FFE77A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 1770
Signing time: Sat 06 Dec 2025 10:02:38 +0000
Manifest this update: Sat 06 Dec 2025 10:02:38 +0000
Manifest next update: Sun 07 Dec 2025 10:02:38 +0000
Files and hashes: 1: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: Vg5FFmGuRrYL47h7wvZuxFWX2zvcR3ZWEl8Qz3kZj7Q=)
2: UpoRaRKUM_cxz1mUcVdpf2dzj0g.roa (hash: gkhONxi+R49OF3RZKp/33aStKf4NqX/Hm1mDh0fRR2U=)
3: _deNM6L0-gRjzB9Oru0BeDNyfHo.roa (hash: LDo7rHt3sUV11VVSTI9bz2qFEysdcQXIsvCOfT9GJ88=)
4: zWuO-GBcqklRByFpP-KvyxqlmHA.roa (hash: mMGoMj1kmRHV71swlSc1+k5tBlzbfdxCQQL7QyHaoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1d:0d:85:2c:2e:c1:3c:f8:3b:2e:42:ff:e7:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Dec 6 10:02:38 2025 GMT
Not After : Dec 7 10:02:38 2025 GMT
Subject: CN=0e84d10375825775c468df750b2208b3db227c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:31:d4:6f:ec:72:25:3a:e3:b7:a8:8e:13:
e9:8f:b5:36:a2:c1:d0:de:18:59:16:0f:5f:24:21:
9e:c9:05:25:b2:80:b7:6d:81:ba:34:bd:70:59:de:
13:fb:f5:b7:5e:f4:d8:09:cb:77:0a:a9:3c:e4:38:
1e:bb:a0:30:28:80:f8:e8:59:c4:b0:b2:cc:61:5e:
8f:4d:64:38:5c:0f:04:b3:9e:a3:84:0c:e2:88:ac:
9f:2a:3f:32:a1:3e:63:d9:52:5d:47:d6:1f:26:5a:
1a:3f:5f:2e:e5:80:2b:c2:97:4f:e7:7e:ae:a1:4a:
ab:11:10:c8:f5:d6:53:11:a9:c8:b8:28:0a:90:68:
d4:9d:c6:55:af:e5:72:f7:e5:92:4e:a9:89:85:1c:
07:5e:50:be:d9:20:2c:2f:d4:aa:10:f0:ba:40:4e:
95:8d:4b:92:5d:df:48:e5:0f:af:a4:e1:6c:77:a5:
3f:b0:20:7b:eb:f8:aa:9c:c5:90:fe:4c:02:d9:06:
3e:6d:f9:55:ee:99:c6:01:a0:17:98:69:67:6c:7d:
51:e9:48:79:94:46:c8:7e:a2:41:8b:2f:7d:d0:3a:
45:8c:74:a2:7f:2c:d5:6f:86:46:3d:76:99:a9:11:
68:b7:ec:81:7a:13:d2:e4:f7:44:80:de:34:eb:ed:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:D1:03:75:82:57:75:C4:68:DF:75:0B:22:08:B3:DB:22:7C:9B
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4a:d6:fa:bc:a6:d7:a3:c6:0f:17:dc:bf:90:8f:5c:0c:e8:
9b:5f:92:85:6d:bb:4e:24:9b:b2:fa:cf:8e:ee:6b:ae:13:53:
b2:15:c6:7f:0c:df:5a:b4:26:73:14:82:49:a9:14:de:8f:19:
c9:51:ec:ba:6c:89:dc:a7:6d:14:7b:c1:a7:3c:07:43:aa:54:
e4:21:45:86:40:83:c6:b6:47:b6:7f:8c:4d:0a:d6:cd:4e:6a:
b4:93:4f:05:83:0e:fc:f6:15:0c:4d:85:e7:9b:46:23:ef:b3:
4b:45:ce:1f:37:f7:9a:33:bb:d3:96:53:ee:ce:0f:95:cf:90:
c3:7e:55:9c:ec:a7:86:a3:92:fa:d9:19:39:80:c3:df:fd:45:
3a:ea:36:20:67:29:7a:2f:94:25:69:1a:86:6e:e1:73:fb:97:
a5:9e:ed:28:00:a9:84:c7:d6:96:9a:69:48:63:61:49:89:10:
d2:4f:ce:94:e3:fa:db:db:f7:02:be:39:f8:46:fb:13:09:c4:
73:8a:5c:0f:7f:5d:6d:79:8e:09:d9:be:6a:48:12:4c:33:cc:
e2:49:a7:74:7f:b6:01:88:7f:db:97:0f:ce:f5:9a:55:5f:20:
4a:08:c4:e8:f1:bb:db:9b:91:05:7b:ea:e1:87:85:bc:fd:41:
c4:6d:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:28 2025 by rpki-client