This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: rwS4ZorPjgxiwEOUHhJxPJ90/3K83gR/oUO0hnYtkPM=
Subject key identifier: 26:B9:AB:C2:3D:A4:93:88:2B:D0:24:FD:4D:12:62:3D:99:52:E0:4B
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019AF12DE582736E845C6250A2E660827DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0456
Signing time: Sat 06 Dec 2025 01:01:48 +0000
Manifest this update: Sat 06 Dec 2025 01:01:48 +0000
Manifest next update: Sun 07 Dec 2025 01:01:48 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: ecGynFn2daLqu+PbJ6TJW5u1pN0yV1enY54zunPdbbA=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:e5:82:73:6e:84:5c:62:50:a2:e6:60:82:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Dec 6 01:01:48 2025 GMT
Not After : Dec 7 01:01:48 2025 GMT
Subject: CN=26b9abc23da493882bd024fd4d12623d9952e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:f0:74:41:cf:1e:df:6b:4a:a3:ed:cb:03:
87:90:3b:b4:8b:6c:32:51:47:ff:e3:61:a6:bb:32:
1e:ca:17:1e:15:3b:68:1f:94:40:c6:3d:98:e8:a1:
c3:82:1c:22:ab:ca:c2:d2:dd:ce:a6:66:e6:93:50:
05:7a:ad:18:01:f0:12:0d:09:6a:c5:11:5c:7a:4d:
01:21:97:32:6a:4b:59:52:c3:85:da:aa:c1:05:50:
f5:8f:57:2c:fa:e7:af:37:ef:58:6f:ea:0d:e1:7a:
85:eb:5b:18:a6:a8:aa:ed:72:0d:8b:63:3b:e3:14:
32:39:7f:1c:bd:08:f0:cd:fe:5e:21:08:75:5f:ae:
08:f4:6c:ed:b7:75:f1:ab:11:ac:4d:9f:04:6e:e3:
0b:c7:cf:c7:8b:46:5e:d7:91:f4:fa:b9:1f:ed:3c:
12:dd:21:1e:60:10:a9:b2:8b:07:d6:b7:05:31:71:
53:8e:fa:9b:37:e6:1c:1f:c2:2c:f4:bd:9d:7f:9a:
e4:69:63:6e:59:1d:f8:26:15:1f:48:30:31:6f:fb:
31:e0:e4:20:0f:a5:01:88:0f:5f:64:d8:ec:75:cd:
f9:00:36:c2:f5:ed:0d:31:41:94:32:72:8d:d9:41:
a3:5f:38:94:5f:c3:a6:8c:f9:b6:20:58:1d:94:97:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:AB:C2:3D:A4:93:88:2B:D0:24:FD:4D:12:62:3D:99:52:E0:4B
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:cd:a8:7d:09:fa:15:da:2a:5c:6a:30:a1:51:99:5e:a7:
2b:0a:7b:8e:49:77:d9:70:eb:d9:77:24:2e:db:e5:01:ee:77:
52:7d:a6:6d:40:d5:b9:66:06:80:b5:10:02:5f:2b:c3:1f:ea:
6f:fc:0e:44:5a:49:0b:6f:18:eb:3d:0b:3f:b0:cd:10:ec:d8:
70:55:6e:1a:81:7f:f7:39:97:0e:63:6a:b7:6c:69:f2:b2:11:
07:88:a9:c7:27:38:07:59:08:42:19:61:22:3d:75:15:b9:9b:
01:91:d4:2d:4d:2e:6b:79:b2:89:e9:3c:af:b1:b0:02:69:88:
28:99:a9:e1:7f:d7:eb:ba:39:fb:ed:a0:b5:7f:63:90:1e:76:
2d:f6:cb:36:4a:96:4c:74:c4:44:57:1b:5d:99:72:a9:e2:b1:
94:55:49:f5:90:75:01:8e:a6:68:46:f6:db:59:0d:83:2c:05:
81:ce:2a:6f:0f:2a:f8:dc:25:90:ea:2f:4d:2b:54:1f:eb:54:
d7:a0:5a:2a:ea:9f:1f:e6:be:bc:0f:6f:95:98:93:c4:d0:8b:
5f:ad:ed:6b:d8:2f:6a:50:87:32:b2:94:f5:db:5f:b6:f9:3b:
cb:2b:d8:a8:51:fe:96:86:55:ff:82:04:63:2c:8b:d8:d7:4f:
93:2b:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:56 2025 by rpki-client