This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File: qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier: 7v/w81Rph8d+MNhAnDKkYQNWqwYBC5zFU+xAhnQ3ers=
Subject key identifier: 92:5D:FB:AA:8B:15:C2:37:3B:2B:85:BC:99:9C:53:5E:86:55:84:FF
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019AF19A9869FD3E22DE3F6F4A4702ABC4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number: 1792
Signing time: Sat 06 Dec 2025 03:00:31 +0000
Manifest this update: Sat 06 Dec 2025 03:00:31 +0000
Manifest next update: Sun 07 Dec 2025 03:00:31 +0000
Files and hashes: 1: 1-C7o4Sg1w_tMM8v1-Zzbx0qKuw4.roa (hash: 5hM/OQJSa5W9fafk6DZMK61IDj/N7aS0aUIw68dp1I0=)
2: b_NE7DVIfDXKb-MpYj6nT1XXano.roa (hash: p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=)
3: bjYWIiRDJQJHClBhm5lHGbc7p3c.roa (hash: 2CHXRgaX05mE8dTCdvnAxjehUb/UlBCUBvMnngQZ4pY=)
4: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (hash: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=)
5: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (hash: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=)
6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: MudHNxtR0JZgyd324kfRHeWkIdfmsQ8WeklL883PKtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:98:69:fd:3e:22:de:3f:6f:4a:47:02:ab:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Dec 6 03:00:31 2025 GMT
Not After : Dec 7 03:00:31 2025 GMT
Subject: CN=925dfbaa8b15c2373b2b85bc999c535e865584ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:82:67:c3:20:33:cc:ca:61:9e:a9:ca:3c:
c2:cf:20:a5:0a:2d:81:5c:9d:a6:d4:04:01:31:14:
76:a7:df:ae:d0:86:08:45:02:56:4a:d7:7f:a0:e2:
e0:7d:46:c9:8a:23:94:f3:6d:78:a3:26:69:e4:ab:
86:d2:22:60:32:28:40:70:fb:8e:96:ef:f0:ed:84:
80:c3:9c:34:4c:fc:11:73:39:d1:a5:44:61:2c:26:
6b:37:47:81:cf:0e:cd:ba:39:61:99:6e:80:ae:0b:
8d:c3:f9:c8:8a:a2:7f:05:be:61:7f:6d:cc:d1:44:
30:1b:f2:1c:bb:19:ca:e5:1d:80:94:10:4c:4e:e9:
b2:28:b8:96:76:ea:41:f2:0c:92:ae:7a:96:98:d8:
49:dd:08:e7:86:a0:93:fe:cd:39:37:ec:7f:39:fd:
55:7a:a5:53:2c:ed:8d:a8:89:8d:71:17:0f:3b:5f:
da:a0:bd:e2:7e:ed:8c:e1:2f:06:b9:ae:8b:ec:85:
b5:ae:b3:ff:ba:b9:35:b0:b7:e4:df:3e:75:36:aa:
0d:47:ce:ee:f0:84:11:31:e2:75:27:f9:e2:f7:7b:
88:88:90:88:80:66:95:e0:c7:3f:39:58:82:fb:37:
d4:0c:36:77:18:e1:33:35:5f:31:44:f5:44:a2:1e:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:FB:AA:8B:15:C2:37:3B:2B:85:BC:99:9C:53:5E:86:55:84:FF
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:ba:ca:78:ca:0c:5d:e0:42:90:ed:05:90:d0:b1:71:05:
8b:95:0b:95:6d:85:53:a6:1c:73:a5:e3:74:01:3f:3a:f0:c9:
95:3d:3d:db:da:77:81:b7:cd:1f:09:29:04:b1:53:90:41:9e:
e1:f2:da:3e:40:03:80:1a:95:62:40:37:28:33:f3:29:44:63:
17:8f:9b:80:38:21:79:30:1f:f8:22:1b:29:fa:f0:ff:47:3d:
ba:f7:0d:7f:d0:8e:a6:9e:68:ad:7b:39:02:66:fa:b9:3e:cd:
6f:62:f1:45:ae:4a:aa:28:41:ee:b8:09:d9:50:4d:f0:bb:ba:
84:f0:73:a0:f3:40:2e:2a:eb:af:63:b4:f6:3b:41:89:bd:51:
88:18:f9:ca:6e:f7:a6:61:e3:a8:61:43:3c:dd:43:d2:3f:8e:
de:8f:56:2e:74:5f:cb:6c:dd:31:5b:a8:bb:2f:d4:de:c3:ec:
22:f4:89:e3:a4:51:b2:4c:f8:1a:8d:79:0f:82:dc:0d:cb:aa:
a9:45:8b:b9:6c:88:0a:5e:65:54:4c:6d:32:23:06:4c:90:b1:
17:4d:2e:64:84:ea:25:33:94:cb:1b:c4:3e:02:e5:f2:27:fb:
cd:c7:01:93:c3:ca:60:05:57:20:3a:a9:f1:b1:59:01:56:9e:
05:16:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:11:35 2025 by rpki-client