This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: Uwkc2wlfYiyGmzdNpHkPdvDMcVborHNoLFUO3J4SdiA=
Subject key identifier: DF:0D:2E:AD:40:3B:85:1E:32:74:21:06:B3:C5:B9:D4:61:CB:2D:B0
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019AF31B30134DAC10D22A5705BE9EFA9BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0D41
Signing time: Sat 06 Dec 2025 10:00:36 +0000
Manifest this update: Sat 06 Dec 2025 10:00:36 +0000
Manifest next update: Sun 07 Dec 2025 10:00:36 +0000
Files and hashes: 1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=)
2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=)
5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: YfryivIi8vBtwyScAQ5MJdqMPslvgzV8jJzHB2vFM/0=)
7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=)
8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:30:13:4d:ac:10:d2:2a:57:05:be:9e:fa:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Dec 6 10:00:36 2025 GMT
Not After : Dec 7 10:00:36 2025 GMT
Subject: CN=df0d2ead403b851e32742106b3c5b9d461cb2db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:2e:38:8c:76:f8:53:b9:90:f6:7a:01:ea:
9f:ee:d0:17:0e:ed:bd:a2:db:8c:04:1a:82:0b:86:
cd:99:8f:14:b4:d6:d2:9b:05:d4:d2:8b:fc:84:b2:
7d:5e:a9:44:d0:37:f1:67:8d:02:b9:a7:30:84:7d:
eb:00:ca:50:5e:a3:57:d9:58:de:71:af:2d:ce:22:
1c:ce:d9:56:8f:f3:99:7b:e2:e7:f7:22:23:6d:10:
7e:58:90:b8:44:1d:94:1d:bd:6e:e9:6f:30:4a:27:
5c:4a:21:00:30:a0:31:40:0c:90:c6:56:4a:f6:08:
eb:38:1a:98:57:61:a6:d2:2f:50:aa:99:9f:92:96:
29:d6:a6:69:65:b2:1d:c0:62:c7:d5:85:01:82:7b:
d5:3f:ca:18:26:a0:ab:8e:54:c9:37:e4:9e:f0:09:
40:e2:24:3d:ba:c6:6f:ba:3a:9c:b0:60:a7:73:8a:
a0:e1:88:90:be:88:98:b9:8a:38:29:91:62:c7:b5:
a3:c0:d2:32:e7:64:d9:4f:93:5d:03:f0:7c:d7:9f:
4a:65:b0:a8:0a:fb:04:89:7b:be:b1:de:1b:b0:0c:
ab:fc:39:cd:26:38:e0:a9:f4:64:a6:ab:f9:fa:38:
89:a7:5f:f7:06:b7:d3:6a:9e:e0:08:72:33:c2:8c:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:2E:AD:40:3B:85:1E:32:74:21:06:B3:C5:B9:D4:61:CB:2D:B0
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:79:a7:e4:2f:1f:0c:d1:19:ed:cf:33:9d:37:ed:42:da:57:
d6:6f:f1:fe:a8:09:7d:62:bc:bd:11:4a:9e:2e:ec:30:14:a5:
40:6e:ee:55:2d:00:8b:e2:96:b7:70:ce:12:d0:8c:35:e4:a2:
8e:49:ff:3c:84:bc:37:87:30:59:fd:cc:87:bb:ab:48:9d:c7:
16:be:d5:32:40:a0:d0:ba:ca:07:7d:2a:73:3c:7b:e0:36:7c:
a0:42:0f:3f:f4:64:f2:6f:8b:06:5f:06:a9:23:b1:1e:a1:15:
f9:ee:1f:28:22:64:45:a9:4c:fb:7d:05:ee:f2:d8:62:25:0f:
af:74:4c:f6:fd:fe:f6:1c:ef:74:b1:f4:c7:90:52:c1:5a:bf:
a4:e1:5e:71:22:bc:6c:d2:39:54:5f:08:dd:c1:22:a7:74:d4:
fa:a9:19:6f:1a:25:8d:85:a6:e8:76:4d:e2:82:9d:8d:79:85:
35:12:78:33:aa:7e:da:59:85:87:4d:88:e4:83:a6:78:70:39:
38:8f:43:98:47:a4:b0:59:57:f5:97:8b:93:2b:f9:84:f3:80:
fd:08:11:05:1e:af:8c:d1:cd:a5:00:ea:84:67:04:cf:9a:fe:
b1:eb:9f:e0:fe:10:1a:dc:f9:88:69:04:63:bf:7f:21:3b:97:
6a:69:23:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzGzATTawQ0ipXBb6e+pvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0
YjU5ODQwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD
EyhkZjBkMmVhZDQwM2I4NTFlMzI3NDIxMDZiM2M1YjlkNDYxY2IyZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIouOIx2+FO5kPZ6Aeqf7tAXDu29
otuMBBqCC4bNmY8UtNbSmwXU0ov8hLJ9XqlE0DfxZ40CuacwhH3rAMpQXqNX2Vje
ca8tziIcztlWj/OZe+Ln9yIjbRB+WJC4RB2UHb1u6W8wSidcSiEAMKAxQAyQxlZK
9gjrOBqYV2Gm0i9QqpmfkpYp1qZpZbIdwGLH1YUBgnvVP8oYJqCrjlTJN+Se8AlA
4iQ9usZvujqcsGCnc4qg4YiQvoiYuYo4KZFix7WjwNIy52TZT5NdA/B8159KZbCo
CvsEiXu+sd4bsAyr/DnNJjjgqfRkpqv5+jiJp1/3BrfTap7gCHIzwoxJ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8NLq1AO4UeMnQhBrPFudRhyy2wMB8GA1UdIwQY
MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt
MDFiOGJiNmFkOTBhLzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh
LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXmn5C8f
DNEZ7c8znTftQtpX1m/x/qgJfWK8vRFKni7sMBSlQG7uVS0Ai+KWt3DOEtCMNeSi
jkn/PIS8N4cwWf3Mh7urSJ3HFr7VMkCg0LrKB30qczx74DZ8oEIPP/Rk8m+LBl8G
qSOxHqEV+e4fKCJkRalM+30F7vLYYiUPr3RM9v3+9hzvdLH0x5BSwVq/pOFecSK8
bNI5VF8I3cEip3TU+qkZbxoljYWm6HZN4oKdjXmFNRJ4M6p+2lmFh02I5IOmeHA5
OI9DmEeksFlX9ZeLkyv5hPOA/QgRBR6vjNHNpQDqhGcEz5r+seuf4P4QGtz5iGkE
Y79/ITuXamkjWw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:59 2025 by rpki-client