This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: qzauSAwZXsolLucEqCIVesuk5v5V8HAfeTykaKkmtUo=
Subject key identifier: 8A:2E:30:D7:D4:F8:2E:89:DE:39:0A:E6:23:B3:75:BC:AD:53:AC:CB
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019AF2EA8FEF4DB3A4E7C8E8FA0C684BA976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 15C6
Signing time: Sat 06 Dec 2025 09:07:29 +0000
Manifest this update: Sat 06 Dec 2025 09:07:29 +0000
Manifest next update: Sun 07 Dec 2025 09:07:29 +0000
Files and hashes: 1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
2: 84Pxk_QK5F5c0pwgTDFWtDT7vwU.roa (hash: c1siOGR8KUDdej1OO9Qc6j+ELIH1wDjJz2kkSXEbu4c=)
3: 8kHzjF6JFCHpsRwergAzR6Hl5jY.roa (hash: mffmLDMT2QFZfhtMRkhlhhueq/UkFuS4pA75sqzvXFs=)
4: F89bS7qNe1rnaq_S9GGqTSzrLTM.roa (hash: l3wobnBJMDC08NMZEcgpSqpNWZr9JHGOo3k9DjoFPHM=)
5: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: ew3fQuBzjBMe6vdnrajmelyMhjO5i39eAITPutT6Q7g=)
6: uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa (hash: amni1qn11Roj9snqRyHbB8jz052oRW+qTOsvWy6QGjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 09:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ea:8f:ef:4d:b3:a4:e7:c8:e8:fa:0c:68:4b:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Dec 6 09:07:29 2025 GMT
Not After : Dec 7 09:07:29 2025 GMT
Subject: CN=8a2e30d7d4f82e89de390ae623b375bcad53accb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:10:2f:7f:1c:56:b3:45:2d:c5:82:ba:1b:
e4:b8:ba:2c:17:f5:b9:13:7d:5e:b4:36:79:33:a0:
30:10:4c:11:6a:73:ed:19:e5:16:0b:77:00:1f:ef:
53:45:a9:c0:7c:e6:b3:11:dd:eb:5a:fd:84:25:7d:
99:a0:08:e6:5e:f4:f7:87:26:64:32:a1:0c:00:d9:
e0:a3:9a:82:f8:53:ef:6a:7d:3d:ae:94:2f:6c:df:
0d:11:50:7d:01:60:e5:4f:67:23:7c:8b:f9:01:a8:
f1:af:80:c5:65:bc:f7:70:0d:12:2f:7b:a8:84:f4:
9f:c9:b4:0b:36:ab:16:64:f5:50:cb:24:0c:1e:94:
d8:03:8e:cb:0a:f1:47:7f:a2:76:ed:eb:a6:e1:3b:
04:a5:bf:f7:5f:6b:cd:fc:fb:60:0f:c5:9e:79:c0:
62:f5:37:ae:a2:53:05:be:64:b7:a3:42:b6:d9:fd:
0a:23:98:7b:50:6f:de:ad:8d:01:b1:2f:05:72:05:
76:18:2d:e6:be:40:d5:b7:51:b3:0f:0b:24:d9:38:
b4:12:67:2f:d4:ec:a8:a3:95:c6:2d:31:76:6f:6d:
ea:17:ce:2e:eb:8b:91:7f:bb:5b:ad:5d:70:53:71:
b3:71:f8:e9:3c:11:8d:5d:63:7c:63:82:9c:aa:61:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:30:D7:D4:F8:2E:89:DE:39:0A:E6:23:B3:75:BC:AD:53:AC:CB
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:e5:be:6d:6d:3e:c0:db:66:71:76:5f:9a:67:f4:4b:4c:
c3:b8:b8:16:2b:51:75:af:83:ec:66:1f:47:4b:34:b8:41:9d:
ef:ac:7e:8a:0a:c0:c4:ba:4c:83:2b:36:7b:69:0f:4e:e6:62:
d5:8c:90:a2:8f:3c:63:3a:28:78:3c:f4:2c:68:fa:1f:e2:59:
e9:02:93:ef:71:5f:15:a0:fc:68:17:37:f2:a8:d8:2a:41:29:
2d:55:ae:6d:e6:ae:62:8d:b9:d9:ef:ff:bd:c7:6e:c9:5d:e7:
7f:ee:2e:c9:4e:6d:e7:57:22:c1:ac:35:73:eb:a4:f1:80:3e:
75:ea:86:78:21:60:4b:08:5b:88:78:ef:19:17:cc:7b:ae:b6:
43:76:59:40:71:45:e5:d8:fc:d1:60:c8:68:df:af:8b:d8:fe:
c8:73:4e:1b:f4:cc:e6:dd:98:a6:7a:b7:8e:be:55:a5:27:7d:
f1:8d:73:ae:72:2c:67:db:ae:fe:d1:23:e5:fd:96:ac:29:d5:
fc:7b:4e:9b:a8:97:6e:ba:48:fc:a8:27:d2:22:a7:d0:5c:6b:
e2:c4:92:de:f0:92:f7:96:67:b7:86:d8:32:01:e5:71:22:fb:
6d:dd:ba:3f:fd:b8:2e:2c:bd:29:f6:20:b2:48:e3:e3:d5:70:
2c:af:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:55:01 2025 by rpki-client