This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File: B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier: xbBmOZlw+ZNv1RXS4UMIGUA2+BNcHXcEAhZCHi5rBLQ=
Subject key identifier: 70:8B:DD:5D:D9:30:76:87:F1:55:C6:82:5D:8D:68:42:70:FE:80:BC
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 019AF42E5B97BDA5DD6031E7754E4AEB2362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number: 114D
Signing time: Sat 06 Dec 2025 15:01:09 +0000
Manifest this update: Sat 06 Dec 2025 15:01:09 +0000
Manifest next update: Sun 07 Dec 2025 15:01:09 +0000
Files and hashes: 1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: a0lGvkXx2UkXk/TRsKSMqVhK1fSKzBb3koGXqmKht6Y=)
2: WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa (hash: jPFVdHVWjo+CbaX7r8T+q+wkvMyetEyIe+LzWcBGU+g=)
3: lYXFJBiFIo7GF8qx1TduAJu4mZk.roa (hash: EFfOawY/LhITRuUSXF2uybmDfyRYV8O+uOvPFUBho9Y=)
4: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:5b:97:bd:a5:dd:60:31:e7:75:4e:4a:eb:23:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Dec 6 15:01:09 2025 GMT
Not After : Dec 7 15:01:09 2025 GMT
Subject: CN=708bdd5dd9307687f155c6825d8d684270fe80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:85:6b:de:b9:e6:73:f6:71:86:b6:6a:5c:
c9:2b:ee:03:ba:4c:c4:07:ea:07:db:82:a4:41:84:
af:09:37:d1:4f:ed:01:cb:93:85:9f:5c:72:d2:e1:
94:30:cc:28:ad:93:18:56:1b:8d:96:3a:3c:84:71:
a3:90:33:ea:a6:18:09:0e:a1:4d:5e:a1:92:de:04:
e5:f9:d2:df:60:5d:fa:5c:e3:b8:cb:7c:95:b2:25:
79:b3:2e:ff:9d:45:36:01:9a:b3:57:db:ca:cd:b9:
aa:ee:9c:f1:0c:02:9a:dd:61:6c:af:1b:62:e1:6b:
3d:bc:e2:9a:0c:e9:ee:fc:79:a0:86:78:67:ab:de:
36:69:4d:60:c4:5f:8e:86:cb:87:1e:52:6c:51:fe:
85:5c:42:f1:fe:d9:57:73:10:5a:fd:39:d4:1c:a2:
30:b1:aa:31:c1:f6:00:41:e3:ca:b0:df:b3:68:9a:
71:ce:c8:31:35:98:1c:20:6e:d3:3a:3e:16:4a:7b:
0d:d5:df:50:68:6c:8a:10:87:b3:6c:bd:9a:ec:9a:
08:e5:4b:09:08:20:bd:aa:04:e1:a0:cb:78:54:4b:
57:44:7b:ac:e6:c7:de:e6:a4:a1:e3:33:93:04:17:
7d:16:20:7c:e3:b7:23:c1:c4:41:5e:f3:23:62:7b:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8B:DD:5D:D9:30:76:87:F1:55:C6:82:5D:8D:68:42:70:FE:80:BC
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:10:32:31:d0:61:35:84:75:0f:a5:ae:a6:93:cb:ad:ba:
c6:8a:d0:42:8d:b7:55:23:5a:4d:3a:30:89:10:da:5e:02:99:
20:52:9e:b4:a5:b5:82:0e:15:93:2c:c5:6f:e7:b2:43:8a:c0:
b1:64:b5:a5:98:45:2b:bd:a0:b5:1d:47:09:b5:78:dc:ab:eb:
f1:95:70:c6:92:d4:fe:91:8a:b0:3d:db:6d:95:5e:c4:4a:d5:
89:c1:ac:d8:25:69:49:06:36:af:9a:15:39:42:32:84:46:63:
e4:01:41:55:33:6b:57:e7:56:2e:90:8d:ab:e3:d2:ce:19:61:
4e:e3:84:9e:c3:0f:f6:61:78:ad:8e:e4:91:32:72:80:83:87:
dc:6c:c4:07:b1:a6:a1:8f:27:9d:fe:58:e6:4e:0e:da:be:4e:
b9:62:30:25:6c:a6:c6:79:44:87:f1:fc:62:ed:84:16:67:47:
61:ac:4d:a8:63:02:2f:0f:f2:d9:35:2d:e2:0e:e5:07:69:94:
d6:94:55:ae:f2:b8:06:8f:a6:a9:f8:7b:3f:d9:c4:50:59:ee:
44:81:be:a9:eb:36:e0:cc:ff:9a:da:46:d4:e6:89:e0:b3:45:
25:5f:cd:f4:61:bc:e7:df:c1:4f:97:53:0c:ef:c3:96:12:54:
d6:63:79:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LluXvaXdYDHndU5K6yNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0
Zjg1N2UwHhcNMjUxMjA2MTUwMTA5WhcNMjUxMjA3MTUwMTA5WjAzMTEwLwYDVQQD
Eyg3MDhiZGQ1ZGQ5MzA3Njg3ZjE1NWM2ODI1ZDhkNjg0MjcwZmU4MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2Fa9655nP2cYa2alzJK+4DukzE
B+oH24KkQYSvCTfRT+0By5OFn1xy0uGUMMworZMYVhuNljo8hHGjkDPqphgJDqFN
XqGS3gTl+dLfYF36XOO4y3yVsiV5sy7/nUU2AZqzV9vKzbmq7pzxDAKa3WFsrxti
4Ws9vOKaDOnu/Hmghnhnq942aU1gxF+OhsuHHlJsUf6FXELx/tlXcxBa/TnUHKIw
saoxwfYAQePKsN+zaJpxzsgxNZgcIG7TOj4WSnsN1d9QaGyKEIezbL2a7JoI5UsJ
CCC9qgThoMt4VEtXRHus5sfe5qSh4zOTBBd9FiB847cjwcRBXvMjYnsrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCL3V3ZMHaH8VXGgl2NaEJw/oC8MB8GA1UdIwQY
MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt
MWVjY2JlNjdjNjYxLzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx
LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/kQMjHQ
YTWEdQ+lrqaTy626xorQQo23VSNaTTowiRDaXgKZIFKetKW1gg4VkyzFb+eyQ4rA
sWS1pZhFK72gtR1HCbV43Kvr8ZVwxpLU/pGKsD3bbZVexErVicGs2CVpSQY2r5oV
OUIyhEZj5AFBVTNrV+dWLpCNq+PSzhlhTuOEnsMP9mF4rY7kkTJygIOH3GzEB7Gm
oY8nnf5Y5k4O2r5OuWIwJWymxnlEh/H8Yu2EFmdHYaxNqGMCLw/y2TUt4g7lB2mU
1pRVrvK4Bo+mqfh7P9nEUFnuRIG+qes24Mz/mtpG1OaJ4LNFJV/N9GG859/BT5dT
DO/DlhJU1mN5kQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:17 2025 by rpki-client