This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File: Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier: 9MPCS9EnVqHipMhwj9S3n2xHMwS5Gv92dEsjHcOt5NI=
Subject key identifier: 4B:58:1D:0D:51:B3:D4:DD:C0:9A:16:59:B0:B3:05:89:8C:7F:87:2F
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019B2D425879FE2C8A6AD0D1BF22ABA057F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number: 13D4
Signing time: Wed 17 Dec 2025 17:01:21 +0000
Manifest this update: Wed 17 Dec 2025 17:01:21 +0000
Manifest next update: Thu 18 Dec 2025 17:01:21 +0000
Files and hashes: 1: 8FA7Lr1UFF21tJ7bN9B79K5CsTE.roa (hash: KI5VwKHEhwpayJ9GtFKeZk7WbRjdECwPDfzDbHJARBk=)
2: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: kxBKUcW7iMm4QKSRGLn6t+vxSJQ3sap6wQQ73OBOKNE=)
3: MxjgQVEyLUBzSi2i-cH1sG1IdKo.roa (hash: 8LNKG3dpw7agrIcT1/uNRMjFLgdNdlZRqC/P4DL6cXY=)
4: blptCtJln9odT-Zd9-yg_1kpfAM.roa (hash: jTOEd7Yoo5SD4hM2M0pRKqn/WaRYdVO39YkKNQ4ET5I=)
5: s_shm9YkkFkzK1BPZaTzoEk1UFM.roa (hash: s6ACGYqES9X/3Ar888X3YakUPHplYVZabmf5m4V68uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2d:42:58:79:fe:2c:8a:6a:d0:d1:bf:22:ab:a0:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Dec 17 17:01:21 2025 GMT
Not After : Dec 18 17:01:21 2025 GMT
Subject: CN=4b581d0d51b3d4ddc09a1659b0b305898c7f872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:5e:f6:85:75:b2:08:80:ea:2f:21:fa:a6:
18:b4:37:28:4f:f9:92:41:f2:1b:98:79:51:67:5c:
23:b1:10:16:e4:7d:3b:97:68:ba:3e:31:53:2e:97:
b6:c9:ba:cf:e3:2b:7b:cb:e8:3e:54:57:50:b1:f4:
ac:57:49:d8:87:48:0c:04:48:7a:40:d5:6c:9e:90:
f2:ae:c1:99:7c:31:55:73:59:d5:c0:3d:9d:ea:94:
2d:4f:86:be:71:de:51:d2:f6:50:d6:81:7c:3a:8c:
df:4c:89:9e:f3:ef:4d:06:69:04:f8:a8:7c:fd:26:
97:e4:dd:eb:ff:58:ac:53:0b:62:ea:8b:de:b1:bd:
b4:b4:6d:5c:1f:77:53:3e:7f:b5:7b:74:7d:62:51:
eb:04:07:fe:c5:27:6a:87:79:60:ba:29:29:d8:5a:
05:8d:41:8b:96:90:d1:ee:e7:65:be:19:57:14:73:
8c:cb:42:0e:cb:0f:48:39:9e:f7:75:53:b9:0a:46:
22:9f:e1:7f:b8:75:d9:21:36:b6:74:3a:67:14:9d:
d3:7c:7c:7a:cb:ec:4b:6b:71:33:d9:aa:d3:44:a4:
ed:0f:e4:30:7f:fe:23:fd:7c:ae:20:ab:b4:21:0b:
2b:26:94:c3:27:9d:1b:2a:91:7f:af:cd:ce:8f:34:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:1D:0D:51:B3:D4:DD:C0:9A:16:59:B0:B3:05:89:8C:7F:87:2F
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:c4:c9:8b:02:a1:b1:0d:7a:29:8e:e2:ce:c7:ca:db:dd:
44:9a:44:f6:a6:0f:ff:3f:be:88:14:26:d3:ea:5e:73:17:da:
01:4b:72:09:99:8c:75:8a:b6:95:50:d5:12:8f:c3:dc:e0:87:
cd:b1:01:cf:31:5b:af:94:2e:5a:55:d3:63:fd:65:1a:81:1d:
28:72:1c:0c:ba:05:69:d7:42:f6:63:ae:a2:02:46:29:a1:47:
b1:30:ef:74:43:8a:b4:21:20:a5:ef:1a:96:1e:fb:6a:25:b5:
6d:4f:5a:56:43:9b:18:07:8c:90:96:7b:9b:a6:c8:79:c1:d7:
cd:87:d0:b0:66:53:1b:f3:43:16:b0:9c:2c:84:a6:85:8c:62:
6e:fe:9e:6c:e7:c7:38:aa:b6:48:c3:aa:0d:6e:c6:11:8a:ec:
0e:43:f6:5d:bc:eb:53:d4:e2:79:70:85:32:d0:90:10:5d:f2:
8c:37:89:da:94:60:4f:18:19:86:21:eb:2d:08:b7:61:47:d0:
13:b5:c0:f6:1d:15:6e:9a:61:7a:dc:fe:1e:89:dd:d8:79:55:
e7:95:c9:b6:bf:18:a4:da:29:95:66:d4:b3:32:4e:40:0f:06:
e6:c2:39:c6:9c:06:8e:43:a0:c8:c0:30:a3:8a:45:d1:e6:8d:
c6:68:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:27:03 2025 by rpki-client