This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: BzrJHhy9IM56t2LUDoUCZqF4FI4WM2XBaMoxOBzlAzg=
Subject key identifier: 31:71:2C:16:B1:36:61:83:32:FA:B2:4E:2C:89:8C:72:B2:07:D2:F6
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 019AF1D1E4738BA03655A2D9FDE20A4B67DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 086E
Signing time: Sat 06 Dec 2025 04:00:55 +0000
Manifest this update: Sat 06 Dec 2025 04:00:55 +0000
Manifest next update: Sun 07 Dec 2025 04:00:55 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: 379FQx+XMjjf6Ug9Ei9TBNGJJ3DPxOf8bLGyK6EgCC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:e4:73:8b:a0:36:55:a2:d9:fd:e2:0a:4b:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Dec 6 04:00:55 2025 GMT
Not After : Dec 7 04:00:55 2025 GMT
Subject: CN=31712c16b136618332fab24e2c898c72b207d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:8e:a3:7d:ff:90:43:af:40:58:4d:6f:1a:
f7:ff:fe:b4:ee:0b:22:55:1a:2a:ac:d8:48:12:2f:
89:56:e4:83:07:96:2d:3b:59:d6:74:23:d4:01:ae:
dc:eb:9a:0b:5e:22:80:84:a6:61:11:c7:2c:6d:c1:
82:77:16:b7:19:3a:89:d0:20:f8:8e:40:b9:14:db:
ea:71:33:6f:f8:46:4d:aa:a3:c2:f7:82:39:8c:28:
d0:d8:c7:4a:7f:af:ba:f0:0d:d8:11:b0:d1:e1:15:
bb:6e:9a:d1:30:30:b2:37:ef:35:5e:ef:2a:ad:9b:
6b:f0:db:e7:76:71:8d:d3:6f:91:08:b2:af:d0:b0:
24:0c:73:c4:fb:1c:61:f4:87:84:06:74:02:e8:c8:
7e:10:99:cd:85:bc:85:57:48:b5:96:a3:86:63:bb:
12:94:31:f5:a7:af:ed:62:8b:02:12:b5:5b:b5:d2:
bf:be:69:f5:5a:31:ed:4e:65:b3:7a:32:85:86:76:
c5:c1:5b:90:72:e9:c4:04:b3:84:70:38:4c:22:cc:
7c:f2:8f:30:0c:ea:b5:32:55:a6:30:2f:93:0c:9f:
59:7e:30:e4:91:81:12:7e:e3:5b:6f:de:54:d8:eb:
69:33:1b:47:19:44:8d:a3:df:8e:6c:f6:f4:5a:b9:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:2C:16:B1:36:61:83:32:FA:B2:4E:2C:89:8C:72:B2:07:D2:F6
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e7:de:73:03:ea:bc:7c:7a:dc:26:c8:c0:2e:56:25:67:e8:
05:fc:9e:12:9b:f6:28:fb:a2:27:73:15:6b:b4:04:bd:6f:09:
94:49:16:07:2a:0a:39:80:27:d1:0f:af:e0:2d:e1:d6:2b:fc:
9c:e4:39:94:76:57:d1:ad:9e:41:e3:6d:a9:2d:a9:8a:53:01:
ce:fc:8d:6d:d3:d2:29:0d:ce:3b:fb:d0:da:c7:6b:4e:2f:6c:
38:a7:ad:31:fa:de:4b:24:3b:d4:db:ba:24:06:bc:f4:5d:53:
dd:dd:a5:b8:e1:51:dc:67:b5:11:72:aa:d9:cf:96:b0:8e:5d:
8a:05:8d:9b:72:62:0b:2b:a2:37:0c:e9:ff:98:99:cc:b6:bb:
2c:e2:77:7b:2f:9d:0a:73:26:53:15:ff:c9:d7:8f:0d:19:37:
b9:7e:71:12:5e:d5:40:1a:68:db:70:59:8a:97:fa:d1:d1:b3:
9b:75:01:ca:ce:66:9f:2a:f2:73:21:93:a9:8c:70:10:4a:16:
58:75:04:53:64:26:86:0c:3b:98:76:e4:27:55:83:6b:7b:76:
35:33:b9:c8:3a:73:c5:96:8c:05:73:37:48:0b:7f:5a:2a:0f:
d5:e9:04:62:db:34:40:e4:64:45:b3:69:38:86:be:8f:98:37:
9f:a2:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:44 2025 by rpki-client