This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: TFfKDrSfeS0tcavH/crXieXIkZtB67hCC9Z4eAr4chM=
Subject key identifier: 2A:DB:FB:2C:61:68:D2:C8:EB:91:DC:EE:DC:ED:6B:8F:42:96:B0:BD
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 019B281BC4682255237EC176F39FA39C63FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 1782
Signing time: Tue 16 Dec 2025 17:01:06 +0000
Manifest this update: Tue 16 Dec 2025 17:01:06 +0000
Manifest next update: Wed 17 Dec 2025 17:01:06 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: o09QokQw3jEXVZ3igXPF/JFP4oUnE8NMcdJ8SFHSK9I=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:28:1b:c4:68:22:55:23:7e:c1:76:f3:9f:a3:9c:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Dec 16 17:01:06 2025 GMT
Not After : Dec 17 17:01:06 2025 GMT
Subject: CN=2adbfb2c6168d2c8eb91dceedced6b8f4296b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:a6:99:85:50:6a:fc:07:fa:43:cd:6d:9c:
a5:40:55:96:6f:5d:26:32:8c:62:10:3b:d2:6f:5d:
92:be:22:ef:91:99:05:e4:6d:63:ab:9f:29:6f:ac:
07:2b:0b:c3:e9:8d:eb:d2:3f:b3:a7:3f:ff:9b:6c:
53:0c:f8:23:56:b5:bd:30:6b:59:f6:c5:91:3d:8d:
cb:52:05:87:75:12:9e:b5:38:55:7c:c9:60:6f:2a:
07:10:77:b9:d2:99:25:49:45:00:6e:27:22:77:f7:
81:f5:d7:98:01:2f:05:7d:bf:4f:1f:cf:8c:fa:07:
73:40:2e:0c:af:95:00:ef:59:79:7f:c5:5d:b3:86:
21:2c:ee:36:c7:51:8f:fb:ee:42:fe:6c:31:8e:ee:
b8:02:6b:b9:ef:ae:e6:63:c5:55:47:07:d2:86:4d:
a6:2c:db:30:89:6d:38:6e:4d:8f:ff:e5:2f:a6:51:
42:1d:53:3a:09:18:3a:f4:cc:8e:61:71:42:cf:2c:
c7:b9:47:fc:2d:b6:ac:5e:37:90:0d:df:f6:6b:2f:
6f:83:2a:3b:a8:54:d4:a5:56:5d:43:ea:d6:2c:7c:
92:41:26:9e:8e:88:08:c5:a9:6d:15:c9:ca:4e:02:
e7:bc:68:e8:cb:3c:24:0b:8b:67:ae:c6:71:a6:9d:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:FB:2C:61:68:D2:C8:EB:91:DC:EE:DC:ED:6B:8F:42:96:B0:BD
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:35:b2:73:1a:e7:86:0d:d4:c7:e0:c4:ce:c2:44:76:80:
0f:ee:37:5d:bb:25:04:66:48:64:09:35:e5:e2:5d:25:77:83:
d1:6b:32:47:b8:28:3a:c9:bb:ec:a5:ca:01:c3:23:c0:fa:06:
e2:c6:44:f8:4e:90:f0:a1:87:26:74:e5:cc:b8:b7:8c:13:a8:
25:02:10:cf:69:b8:ef:28:b9:48:c2:b2:d9:bb:1e:63:0a:8c:
ae:ea:8a:34:e2:e1:c6:df:53:d4:6c:07:c7:04:c5:14:76:96:
3a:82:41:c8:5d:13:c0:78:55:15:00:20:2e:7b:9f:9d:f6:23:
c7:51:3c:9d:d0:9a:32:25:45:f9:3b:29:a1:ce:40:1b:78:f3:
79:14:f6:91:c9:5a:18:31:fd:78:1e:44:60:ae:72:a5:f1:34:
2b:05:88:ff:99:ee:4a:cd:43:8e:be:63:f3:be:78:e7:70:78:
79:f9:29:12:2f:7a:6f:87:46:32:8b:87:7e:63:e6:cf:0c:7c:
da:11:39:65:d4:46:8f:af:ea:8d:a7:c0:20:39:78:ea:d4:54:
08:1d:cb:e2:74:be:55:86:3a:80:11:13:2e:dd:12:24:fd:4e:
c0:1d:b2:dd:75:27:26:78:a0:20:4b:54:a5:83:0c:62:de:df:
e1:aa:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 21:01:28 2025 by rpki-client