This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: 7tNyAFMe1OMxzqU9DnBzu1OKAzIOKQ8ufB172T8wkUA=
Subject key identifier: C6:CB:BF:8A:F9:42:38:85:C4:4B:9F:3D:97:9E:03:65:BA:76:2F:F9
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 019AF3526BAAD3CFC80C9E9D110C4A596E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 09EB
Signing time: Sat 06 Dec 2025 11:00:56 +0000
Manifest this update: Sat 06 Dec 2025 11:00:56 +0000
Manifest next update: Sun 07 Dec 2025 11:00:56 +0000
Files and hashes: 1: 7myDqZoO0D52fYkn1KhaJrD96EE.roa (hash: yHoSO6m/e9uh7PHZ1aPdH1Xie0fMoLfRWey6tzleRjk=)
2: BdJsQb2Wyhj6V0MXrOpAeFMeHNc.roa (hash: BCOWfpe+Hm7MDisoXCkcr8quTvjHMSMJ8WxC+uEAJgk=)
3: EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa (hash: NkQ1CRsw1FEEPmAjWSGetO/iDR/XhUi/u+1jVJdjxls=)
4: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: ZaN3Vvg8H48Swhet+kZZsVbkpfLHizWsUn9ohIXy/O8=)
5: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
6: iUjA5-zowUQNvgRjE68BZNBeaJc.roa (hash: 2YZZJqfjMiJEM/TbJsXYsUjZHG10veLYlz1R58c65kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:6b:aa:d3:cf:c8:0c:9e:9d:11:0c:4a:59:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Dec 6 11:00:56 2025 GMT
Not After : Dec 7 11:00:56 2025 GMT
Subject: CN=c6cbbf8af9423885c44b9f3d979e0365ba762ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:58:10:e7:ad:44:0a:77:73:1c:12:b3:0a:
ed:15:a5:25:a7:ff:d1:d1:9a:e4:ed:bb:95:1c:0c:
37:c6:c3:ac:bd:1d:86:6a:31:7b:d2:5f:00:4e:75:
db:91:4b:09:a9:5a:19:b3:b2:c7:28:d8:34:d8:62:
a7:ff:01:a0:1b:7e:9a:97:96:d4:af:dc:31:dd:fe:
ee:20:50:09:e9:bb:57:6c:9d:a1:6e:1f:da:1a:af:
f9:5f:f9:d4:e4:e4:d9:c8:ac:86:92:36:c2:b1:20:
22:ba:81:cd:0e:fc:0b:7f:f6:70:c2:e5:f9:db:7f:
1d:51:80:c4:6d:84:13:fe:e8:00:99:ae:cb:25:4e:
af:2d:6b:7b:11:9c:fd:0c:46:56:e4:70:08:6b:24:
d3:ad:79:33:f8:f5:c2:fc:d8:d3:f8:48:01:f7:c5:
13:b6:c5:48:4b:fd:94:71:ca:c4:19:53:19:26:20:
33:36:7f:f2:c3:17:e0:36:a9:11:61:79:3d:c5:7e:
d7:0d:0e:8d:9a:96:33:e7:54:66:21:4e:c0:bc:e0:
ec:ac:bc:ad:5a:79:25:2a:84:23:c5:6f:7a:d8:50:
20:bf:11:dd:7b:e3:19:24:4b:b4:ff:01:1b:78:a0:
b8:d8:05:d8:61:30:3b:d2:72:b8:08:83:f7:0c:8a:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:BF:8A:F9:42:38:85:C4:4B:9F:3D:97:9E:03:65:BA:76:2F:F9
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:50:30:78:11:30:91:09:cc:d4:59:2d:7d:0a:9a:5a:01:8e:
cb:a4:23:1b:16:b5:15:71:08:42:e8:98:0f:97:c2:a5:6f:8f:
c8:8f:14:a6:54:f0:b0:79:f0:3e:66:24:17:4e:f7:d7:8f:70:
0e:8e:a1:9e:34:4d:61:d4:4d:5d:75:b3:19:60:de:d9:6b:d1:
ce:03:42:1c:1f:25:83:ba:b5:34:8e:d1:c1:da:af:85:f0:a1:
97:33:d6:9b:50:45:4f:96:45:7b:01:f6:4e:ac:29:2a:09:48:
67:ed:59:f8:7d:10:28:87:29:41:48:ec:8c:1b:65:41:50:ec:
04:e8:69:5b:aa:c8:7c:53:b1:6a:f4:15:21:fb:6f:90:eb:1e:
5c:73:28:64:00:bc:c3:23:af:04:74:84:e4:26:64:f7:35:97:
8d:60:1d:7f:d2:14:45:8a:d5:0b:6d:21:52:38:c1:38:4a:76:
72:6e:5f:1e:35:f6:f7:61:7c:99:2f:99:7c:15:b7:1f:6b:4c:
63:8a:5e:fe:a4:a5:82:32:3c:ee:f7:d8:0c:98:51:bf:17:2f:
d9:c8:45:6e:02:69:88:fa:92:39:82:67:c5:56:7c:33:46:1d:
6c:c4:12:a5:f4:ce:7e:b1:13:fe:36:73:b6:1d:08:2c:e2:de:
65:dd:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:25:10 2025 by rpki-client