This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: Tho147UOdw6Xm3rlnrE0z6XCA76t7qJH+vbnIj1itno=
Subject key identifier: A8:83:0E:59:2B:95:AF:68:84:C8:C3:38:0D:FA:62:5E:DC:37:00:14
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019AF2095A45BBC18ADF7031040F33E01F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 1017
Signing time: Sat 06 Dec 2025 05:01:30 +0000
Manifest this update: Sat 06 Dec 2025 05:01:30 +0000
Manifest next update: Sun 07 Dec 2025 05:01:30 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: M9GbDEpf6c7X390JK3PhBpz9o7l8njwCW0TztLoQZMQ=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:5a:45:bb:c1:8a:df:70:31:04:0f:33:e0:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Dec 6 05:01:30 2025 GMT
Not After : Dec 7 05:01:30 2025 GMT
Subject: CN=a8830e592b95af6884c8c3380dfa625edc370014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:c5:31:a7:ec:6a:c2:52:e1:c8:d8:3b:cf:
71:d1:19:07:45:2a:d2:18:ec:a7:70:02:f8:ea:6a:
22:e4:92:4d:0b:95:23:92:e0:90:4c:d1:5f:6e:be:
a4:1a:a3:37:63:12:ef:61:23:06:7d:db:c1:c8:99:
09:ea:d1:39:a3:a9:04:e7:2f:84:e5:0c:43:4a:c9:
c7:85:e9:33:98:02:0a:da:0b:a5:94:71:3d:88:34:
ec:72:e7:4b:1a:2e:19:a5:85:97:92:90:31:dd:91:
49:82:ad:5e:ac:bd:a6:7f:5c:0b:de:a3:46:dd:9b:
05:4f:15:1b:27:8f:5a:20:23:ea:eb:1e:aa:4b:fb:
02:6a:f0:05:eb:75:c5:15:25:29:36:eb:1f:75:74:
02:0d:c3:17:96:91:91:a4:b0:44:c5:f4:8e:b9:66:
c9:cd:22:b8:0d:55:4d:1b:42:b3:2f:5e:c0:9b:01:
38:d5:99:a3:d7:db:0a:24:de:96:1e:10:d9:75:0e:
44:63:86:05:b9:5d:be:fd:79:50:56:9e:e0:e7:f0:
37:87:9b:fe:ac:ab:82:be:00:c3:4c:4d:04:54:0a:
8d:9a:35:77:5d:d4:cf:cf:30:55:2d:fb:74:a2:88:
4d:1f:be:d6:ff:61:07:6e:b4:dd:48:e8:14:50:0d:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:0E:59:2B:95:AF:68:84:C8:C3:38:0D:FA:62:5E:DC:37:00:14
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:b9:a5:18:b8:0e:36:ee:70:f1:1e:e9:13:23:6d:f8:3c:
2d:8a:df:a3:28:7d:58:c9:7f:b0:a9:ef:69:6e:64:dd:6c:8f:
a9:d7:dd:47:85:9f:7e:7d:70:77:9b:58:6a:5d:7d:f1:19:90:
1d:15:bc:b5:e2:be:15:b2:ed:65:d2:14:51:3a:3d:6b:b2:3c:
da:8d:c3:a2:7b:18:53:3b:60:57:d5:5f:01:cd:a3:8f:1a:b5:
59:93:f6:05:60:c8:bf:61:18:67:c8:68:ef:48:2b:7b:04:89:
23:56:89:16:2c:65:ec:04:9f:d2:0d:60:ad:68:c4:b8:9b:83:
82:7b:58:3e:3b:bb:80:f3:50:24:a1:1d:91:b0:ca:b1:2c:e8:
91:ad:a4:7a:98:b5:44:bd:b7:29:af:e8:63:2c:b6:47:14:4f:
6f:e1:77:31:15:09:4c:14:fd:6d:78:96:06:27:34:4d:2f:fa:
20:38:9c:ef:f7:10:4b:81:7f:da:f2:d7:6d:e0:c9:b5:dd:f9:
20:1d:0d:f9:54:d0:2f:4d:a0:21:80:6a:3b:6d:33:61:51:0d:
b1:8a:2e:57:57:cc:1b:d6:ca:68:b6:54:a9:64:f0:a7:4a:f5:
c1:2a:1f:33:db:5f:c9:99:3b:4b:12:97:7f:14:42:af:2b:0b:
36:9b:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:33 2025 by rpki-client