This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: r6eKkaktqXnpaxC32Qklf+AR1OMVcp9NBh8F5ffPHXo=
Subject key identifier: 18:EB:F8:78:59:4C:5C:45:EB:0B:CE:BA:B8:55:04:D2:5C:39:E7:8D
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019AF20969F0B9FADDEE73EA40E5621C70B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0EEA
Signing time: Sat 06 Dec 2025 05:01:34 +0000
Manifest this update: Sat 06 Dec 2025 05:01:34 +0000
Manifest next update: Sun 07 Dec 2025 05:01:34 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: 2btWHt5NLhsqk4v+qYr7L5qYtOA+pFJ8aSUYaXWUq2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:69:f0:b9:fa:dd:ee:73:ea:40:e5:62:1c:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Dec 6 05:01:34 2025 GMT
Not After : Dec 7 05:01:34 2025 GMT
Subject: CN=18ebf878594c5c45eb0bcebab85504d25c39e78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:04:5e:ec:8f:53:df:ae:2f:e0:c2:3d:1b:
8b:81:c6:15:06:78:3a:99:ce:ed:ff:cc:01:64:d0:
ad:c1:7a:cf:cc:a8:87:ba:29:1e:55:33:fd:22:fb:
42:3d:5e:2e:58:fe:63:db:48:07:3d:1c:db:3f:fa:
01:c9:34:e0:73:9b:c2:b4:ce:85:a3:40:19:ed:43:
4e:e6:13:1c:0f:da:8e:91:6e:92:d5:8c:e8:73:ad:
ac:62:97:4c:0c:c5:59:06:25:8b:b8:ce:ff:c6:28:
65:7d:76:60:60:00:62:7f:18:af:88:82:01:a3:6a:
72:4d:2a:f4:8c:8d:5b:a2:b2:af:c5:03:07:75:08:
98:7e:52:d7:7b:c9:3d:69:10:e7:5c:5b:39:9d:a1:
5e:67:83:a4:f5:ea:8f:b9:5d:4d:2f:8e:64:9e:7c:
41:01:af:52:39:1b:50:a7:01:ad:0c:f4:bb:0d:36:
8e:f0:be:60:5e:06:b3:7a:be:2f:63:7b:b0:d1:19:
58:58:6e:97:4e:e9:99:5f:95:4c:3f:dc:0d:63:b3:
9e:a5:43:1a:e5:ce:19:35:f8:89:86:13:23:6f:bf:
6e:51:70:fa:b6:37:88:14:c1:97:23:4f:4f:39:77:
16:6a:1c:7f:00:69:a5:0b:81:2a:c8:a6:34:30:42:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:F8:78:59:4C:5C:45:EB:0B:CE:BA:B8:55:04:D2:5C:39:E7:8D
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:7f:d5:81:66:8f:a2:4a:23:f2:2c:81:d8:44:57:06:21:
ae:9c:f9:17:24:17:bd:fb:de:f0:cf:b5:f1:5c:c5:30:47:76:
7b:ef:0f:1a:58:ad:f8:fe:b3:81:ff:af:3e:83:6c:56:03:cf:
c7:9e:2a:61:67:13:e3:be:0e:b4:3a:f1:e2:8e:01:c6:9d:48:
ba:f8:96:25:bd:84:af:46:53:31:21:e0:e5:ac:81:a4:3b:b3:
13:bc:72:cd:96:9f:0d:1a:aa:74:8c:84:2d:99:85:8e:88:e8:
87:d0:2d:0f:93:7b:08:d5:70:10:50:91:83:49:cf:0c:0f:82:
96:bc:ba:e8:f4:5f:21:c2:6a:18:13:dd:ca:3b:88:a7:4c:18:
c3:3b:ca:cd:1f:5b:09:08:5c:9a:a6:6c:b9:9b:8c:1b:ca:1d:
31:32:cc:0c:92:fc:79:69:59:47:89:8c:39:6c:51:e5:03:a1:
62:9a:0d:c4:a5:96:29:02:7d:4c:5d:6f:b9:a9:ad:84:a2:b5:
c4:b8:da:94:db:da:a6:50:e1:80:01:08:f3:0e:20:27:25:22:
af:5e:40:4e:92:20:45:b2:a6:1d:d6:ee:be:c5:f0:6f:03:1a:
e8:15:88:5f:d3:70:33:a1:0f:ff:28:f4:98:ad:9d:5e:37:9f:
8a:f8:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:11 2025 by rpki-client