This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: hgrVexx8bKxXsNFA8cJGHIzrugm9LS1LDcenQYYsfrY=
Subject key identifier: 62:CD:A8:FA:3A:DD:01:BA:41:CC:4D:7A:56:53:8E:FF:CB:72:98:68
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 019AF31BFA23369E055406878D92C8EAF150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 10:01:28 +0000
Manifest this update: Sat 06 Dec 2025 10:01:28 +0000
Manifest next update: Sun 07 Dec 2025 10:01:28 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: DYfPI488tWZPNWgtka0RxXFlsQqDetAXS0HsHaHu2R0=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:fa:23:36:9e:05:54:06:87:8d:92:c8:ea:f1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Dec 6 10:01:28 2025 GMT
Not After : Dec 7 10:01:28 2025 GMT
Subject: CN=62cda8fa3add01ba41cc4d7a56538effcb729868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:e7:e7:63:93:d6:fe:27:54:ec:09:f8:4f:
ba:31:fa:ce:fb:d8:bc:a5:3f:c7:fd:c6:9d:09:d7:
8c:18:10:a3:c1:b5:b3:ed:4d:d3:65:1b:53:bc:76:
31:2c:9c:bf:4d:49:18:71:d2:71:d5:82:51:65:37:
b1:26:be:12:66:bd:a6:44:0c:e4:39:5b:96:62:14:
f0:60:3d:b7:f1:6c:cd:41:3f:03:ec:fc:8b:db:6c:
46:48:6c:0e:59:19:0c:64:c6:97:8b:58:28:ae:1b:
bd:01:80:bc:b9:2c:09:20:52:77:50:bb:9f:b7:b0:
de:c4:76:39:5b:2a:d7:25:19:9d:7c:14:8a:82:9a:
70:33:24:6f:e1:80:1f:13:ac:b6:d7:95:9d:ef:8e:
0e:14:66:ed:9e:af:71:3a:19:ff:92:af:ab:49:97:
51:61:00:d0:4e:ae:6e:0e:1e:d5:af:d5:f1:90:f1:
b9:a7:50:9a:73:57:83:53:09:82:5a:ad:e6:be:48:
88:02:e5:2b:c6:75:5f:5b:84:9c:9d:17:f3:8e:2b:
08:d2:0e:b3:08:40:32:5b:88:c8:8a:23:e8:db:7e:
ab:08:db:47:4f:bf:de:61:4c:25:a0:8b:99:52:00:
db:9d:2f:e1:7f:84:79:49:57:d5:4f:5d:ce:75:5a:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:A8:FA:3A:DD:01:BA:41:CC:4D:7A:56:53:8E:FF:CB:72:98:68
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:19:ee:4a:5e:89:92:2c:7d:c2:7e:48:09:a8:4e:e7:7a:
6e:9d:72:2d:4d:b3:d0:61:23:24:f6:5f:19:1b:ee:d5:62:e3:
83:fe:cf:7e:ce:c9:2e:78:e9:88:62:c6:47:34:ad:f1:1d:dd:
eb:02:90:4d:08:00:0a:c7:45:29:e5:76:a6:28:9e:c5:5c:b0:
61:a3:37:63:84:72:db:60:03:4d:15:a8:26:db:1b:41:a2:d2:
aa:59:c9:42:92:af:fa:ac:30:a4:b1:73:a6:77:c2:fc:e2:f4:
bd:d4:8a:37:15:70:f1:a2:a7:c8:16:3a:e4:e8:7a:35:d4:e9:
c8:64:ac:49:87:a9:13:88:03:9d:85:19:96:32:6d:02:11:63:
c0:e8:64:21:a4:ae:f0:49:e7:db:9f:66:0c:33:0f:80:8f:e3:
31:19:21:8f:74:88:f7:13:d1:0f:d0:4e:19:9c:8b:4a:4a:36:
cc:fd:21:91:ab:35:76:f5:57:17:2d:06:9b:e5:cb:a6:14:d1:
cc:9c:32:03:3b:eb:49:1e:fd:ac:b7:97:06:80:80:71:f5:e4:
f0:8b:49:20:ee:d2:e7:ca:b5:a0:ef:c7:6d:33:47:de:2c:d4:
f5:8a:a0:e0:df:54:2f:10:36:62:43:84:ca:cf:c1:9f:27:55:
26:bd:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:38 2025 by rpki-client