This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: 87qTVfoghOx1Ix21zVv/o2gi55MwP/GKfwukK9CSevI=
Subject key identifier: AB:2E:13:94:4B:89:DF:95:9C:92:91:43:C8:7B:BD:96:0F:BB:F6:48
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 019AF2E432374648A18E10292BF99D4AC7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0E05
Signing time: Sat 06 Dec 2025 09:00:32 +0000
Manifest this update: Sat 06 Dec 2025 09:00:32 +0000
Manifest next update: Sun 07 Dec 2025 09:00:32 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: Ng07NWQ9gZI2Ytt2O7OXLC6f5CfYumQ6/a1x5+VeMhU=)
2: negj_8qldSprHD3F1eQcTwkIJOc.roa (hash: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:32:37:46:48:a1:8e:10:29:2b:f9:9d:4a:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Dec 6 09:00:32 2025 GMT
Not After : Dec 7 09:00:32 2025 GMT
Subject: CN=ab2e13944b89df959c929143c87bbd960fbbf648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:3f:b5:c3:26:b3:ae:3c:6f:a0:2b:81:fc:
59:9f:04:70:6e:0b:d5:37:47:e5:1d:39:fa:04:06:
dc:a3:7c:4d:53:ff:83:09:5b:91:fb:55:da:f7:57:
bb:ee:29:d4:92:ec:55:1b:6c:19:d5:fb:86:75:64:
8b:ef:8f:1f:2f:e3:ca:d6:a1:84:a5:fe:ec:47:09:
bf:50:76:9a:a9:81:82:8c:8c:a3:f5:ad:35:67:36:
63:d4:58:90:79:6c:b2:ba:4d:4d:6d:58:c8:39:64:
00:71:5d:a7:4b:d0:dd:42:15:a4:8d:b2:94:7f:fc:
7f:fb:6e:c9:74:cc:34:fd:8a:3e:9d:2f:7c:4a:2e:
5e:9d:7d:a0:39:3e:a6:aa:4b:75:e6:39:7f:12:fb:
0b:a7:9e:dd:b5:18:c4:33:76:d9:f7:4e:a1:22:d1:
f5:c1:d0:e4:b3:92:20:f3:0c:36:82:e8:94:e0:8a:
4b:61:57:2e:cf:c3:90:1e:da:43:01:59:56:c3:d3:
0e:78:91:37:52:b8:70:e4:61:98:81:76:f6:ac:bf:
c1:85:90:51:3e:7a:49:08:59:1c:d3:1f:c6:6a:61:
f5:c7:e6:c3:b1:92:f0:5b:83:72:e7:7d:05:e1:1e:
c4:9d:bf:5d:f4:f1:0c:49:45:6c:32:96:f0:5a:e8:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:13:94:4B:89:DF:95:9C:92:91:43:C8:7B:BD:96:0F:BB:F6:48
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1d:6d:ca:43:70:91:4e:3e:72:f4:bb:7b:c4:04:72:4d:1f:
4d:fe:e5:56:b5:37:f7:4a:b8:51:9f:02:fc:85:16:03:22:ec:
d1:0d:9d:01:8d:c5:c5:26:10:29:16:8d:f2:a7:55:68:79:8c:
b4:30:ab:10:6a:5d:94:97:f8:cd:85:4d:a0:e5:ad:13:19:d8:
b2:ba:c3:59:54:63:26:d9:96:1b:a2:e2:f9:d2:29:d8:4a:1a:
45:84:0b:ef:a7:b3:83:bd:a6:d7:58:79:bd:bc:0d:90:47:34:
26:eb:ef:9e:76:fe:fe:47:9c:aa:8b:65:0c:21:8d:e8:d1:61:
56:05:05:b3:f5:95:bf:5c:6c:86:43:63:3a:bb:7d:2a:50:fc:
f4:ec:4e:cb:53:7b:a5:45:6d:00:03:a5:2b:d2:77:71:5d:58:
7d:39:bb:4e:7b:5c:0f:06:eb:b6:d6:80:b2:9f:0d:be:c0:7b:
b8:4d:bc:c2:f2:b9:a7:f1:89:71:dc:ea:c7:44:d8:6e:97:4b:
06:22:42:2a:85:bc:a2:15:ef:e2:fa:81:fb:df:56:69:4e:36:
02:6b:3b:69:05:0f:25:62:6b:c7:0e:d0:82:a3:e4:ff:01:82:
ed:a5:68:99:ae:b9:ce:b5:88:59:3a:81:7c:79:f4:be:3d:29:
bd:fa:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:24:25 2025 by rpki-client