This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: 3o9WRV9HQYbZly2jXjHTDkt/0oaUfpW67JJrBR6SMqI=
Subject key identifier: C1:EC:7F:42:3A:AD:15:0D:8F:DC:FD:AA:B8:66:FC:75:96:00:AF:FF
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 019B2F67B8D8A74B9055D0AF02696F32D06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1782
Signing time: Thu 18 Dec 2025 03:01:25 +0000
Manifest this update: Thu 18 Dec 2025 03:01:25 +0000
Manifest next update: Fri 19 Dec 2025 03:01:25 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: qkSOYqoGiwRWvl4/sbgV8qPz5bLjzfPwNz+z1w9vKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:67:b8:d8:a7:4b:90:55:d0:af:02:69:6f:32:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Dec 18 03:01:25 2025 GMT
Not After : Dec 19 03:01:25 2025 GMT
Subject: CN=c1ec7f423aad150d8fdcfdaab866fc759600afff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:f9:34:6c:f3:0f:6f:dc:aa:58:f1:7b:b7:
c2:b1:ae:25:82:06:2c:97:4c:3f:32:be:55:ac:02:
a9:30:92:a6:80:53:c2:49:93:e6:72:ad:56:d1:3c:
1e:f6:6a:de:87:e7:8d:45:aa:6c:d1:3a:5f:80:44:
87:49:4f:c7:5d:85:d4:70:68:c1:bd:5e:37:fb:ba:
e0:10:ed:56:40:ca:3e:43:10:e2:dd:3e:ce:c7:2c:
92:85:83:ab:16:a8:b5:bb:85:bb:6f:75:6f:51:cf:
55:0d:44:c5:df:09:17:ad:a5:6e:d1:02:48:b4:52:
dc:3c:31:3d:b9:7b:f0:c4:e3:c2:c2:e7:f3:fe:7b:
79:49:21:db:c4:e5:60:ef:5a:25:98:2d:00:aa:31:
af:c9:d3:65:cb:dc:b1:50:6e:57:a2:54:fb:0b:1a:
b8:81:9a:d9:24:b4:6d:09:fd:f2:b3:83:5c:e7:be:
07:f0:34:67:43:62:72:1c:c9:f1:da:b6:3a:f5:4a:
5b:d0:f3:25:a7:9c:67:1f:42:bb:c2:ef:f5:7d:41:
ec:79:0a:97:12:20:bb:bb:73:d5:59:24:45:2d:82:
19:c0:6c:e7:63:30:d7:de:cc:0b:fe:1c:f9:30:c7:
a5:9f:6c:ca:72:e7:ca:28:79:5d:ba:8a:12:b0:10:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:7F:42:3A:AD:15:0D:8F:DC:FD:AA:B8:66:FC:75:96:00:AF:FF
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c4:68:30:fc:29:d4:3a:e2:65:e8:f1:81:0a:9d:7b:04:af:
f1:1f:39:c0:b7:c0:e6:a7:52:a4:61:90:48:ff:21:e9:17:39:
b8:bf:df:f9:63:a4:84:da:45:cc:2b:58:5d:8d:a7:ad:84:b1:
39:cc:00:bd:dc:e2:44:6d:f3:53:b1:9f:54:b9:a4:aa:45:1a:
78:90:6e:19:71:a4:24:1a:ed:77:34:bf:4d:2f:aa:97:93:ed:
70:17:da:d5:54:2f:48:d9:d4:88:c4:e6:5f:58:28:53:bc:6d:
75:0e:6b:3c:97:40:72:be:84:19:fc:21:d1:bb:e4:81:7c:2a:
4d:2e:b2:09:f8:da:56:5c:06:b4:32:dc:bd:3e:52:9c:39:4d:
52:09:8c:b0:fe:2e:c9:e5:de:2a:71:cb:25:7f:71:3d:22:b1:
36:c2:79:36:83:02:ec:51:58:60:ba:40:40:8f:8b:b8:de:12:
d9:5c:89:13:79:c5:f5:cb:04:88:34:3c:c3:2f:aa:7f:f3:51:
d2:50:ba:a1:78:83:cd:44:2c:67:a5:a2:de:b5:a4:21:ac:df:
14:b5:88:09:32:5a:3a:83:b5:e2:12:e6:5f:12:1c:18:02:f4:
89:07:9d:65:b6:2f:b3:ae:a2:53:47:0c:39:e4:17:3c:02:65:
8f:5d:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:15:44 2025 by rpki-client