This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: wih5qctd9ZWHnoevhQK1+MLKwFhoW4V8GMwwFf5kqYA=
Subject key identifier: A3:E6:F6:C4:35:1E:77:01:ED:32:F8:C2:8D:E4:9E:B9:CE:6E:11:DC
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019AF2E44A9CD9173944BD259FA731F3746D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 1776
Signing time: Sat 06 Dec 2025 09:00:38 +0000
Manifest this update: Sat 06 Dec 2025 09:00:38 +0000
Manifest next update: Sun 07 Dec 2025 09:00:38 +0000
Files and hashes: 1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=)
2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
5: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=)
6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: IvTDi8mWKaE+p2jW2tbBFygersClxAJ+Pv5JWzPbu/M=)
7: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:4a:9c:d9:17:39:44:bd:25:9f:a7:31:f3:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Dec 6 09:00:38 2025 GMT
Not After : Dec 7 09:00:38 2025 GMT
Subject: CN=a3e6f6c4351e7701ed32f8c28de49eb9ce6e11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:c7:27:e4:13:b3:0b:b7:73:e1:da:88:4a:
cf:a4:e3:cc:2b:c6:16:7e:57:b4:59:19:40:c9:c1:
b5:44:27:f3:96:e7:1a:64:64:a3:02:9c:23:29:61:
62:94:7d:d4:c4:1e:3d:ad:d6:22:4f:ce:54:2a:3a:
f1:5b:fa:8b:5c:c9:7a:ac:ef:45:cc:be:80:95:91:
16:a3:48:d1:9f:49:2e:c2:71:4f:36:4f:e9:fa:af:
cd:0b:8a:88:c3:93:95:9d:be:ce:ce:5d:b5:39:2c:
a8:b4:d0:9a:67:02:06:4e:09:a1:03:3f:16:b3:10:
2e:72:5c:7f:e5:3d:cb:c7:27:5e:0a:a6:76:0e:55:
54:31:68:3b:8e:a3:cd:06:a9:67:b4:21:a9:db:a0:
b6:78:67:b7:ca:d4:33:c3:66:05:b7:0c:54:98:41:
aa:59:3c:0c:d5:d5:7d:7d:6b:d3:c0:75:1a:f0:16:
99:a4:8a:3d:b2:0b:fc:22:48:77:cc:b7:4e:df:68:
71:b3:78:14:6a:11:ca:31:1b:fa:9d:92:3a:ec:73:
3d:83:b4:65:1e:4d:93:0b:49:83:80:6d:bf:46:26:
ee:a4:71:29:b2:ea:a5:c1:ee:30:a2:fa:e5:1c:c6:
ba:26:b9:97:3f:46:c0:89:e6:e4:06:9b:bb:36:08:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:F6:C4:35:1E:77:01:ED:32:F8:C2:8D:E4:9E:B9:CE:6E:11:DC
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:e0:80:5d:32:ff:9f:84:a2:f3:33:a8:8b:5e:25:ef:63:
b6:0a:d8:38:78:4e:b0:52:47:e3:be:2c:16:8b:04:df:6d:ab:
82:19:75:35:60:64:e1:d8:9b:b3:22:86:6a:f9:03:f2:1f:cc:
5b:d0:fa:38:c0:4b:b4:a6:2c:39:26:25:bb:bc:24:57:e0:a5:
2f:41:ec:9c:e1:20:3c:f2:6d:5c:cd:1c:fb:f1:9c:64:b3:18:
23:c5:bb:fc:e2:9d:8b:26:a4:37:11:a8:4c:29:97:e6:6d:21:
19:91:65:76:a9:1b:74:02:d5:60:1d:2b:fd:a5:5d:ad:85:8e:
ef:b1:5b:a3:4f:82:13:f6:dd:24:0a:a4:d4:16:25:04:18:d4:
2d:99:61:6d:f4:62:9a:94:90:c5:1c:76:42:e6:d3:8c:18:b6:
b7:d9:4c:e3:50:f3:25:92:a9:63:73:a0:99:e9:47:8b:cf:1c:
d7:e4:d4:90:87:a7:a6:d0:a0:b9:66:bc:07:1a:e5:49:4a:cc:
ce:fa:24:6c:b7:6c:80:a8:e4:b8:ba:dd:60:f7:5d:ce:f3:12:
15:79:32:05:9b:c0:9a:6e:fb:5c:d7:5c:24:cf:c5:af:86:1a:
90:c0:b0:0f:1e:42:cb:ff:93:7e:a9:5f:f0:30:fb:78:fb:fc:
f5:ae:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:12:28 2025 by rpki-client