This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: bGBd2Zd0cyW6wGGwTpboUnyDwzFRvI9Dgm4YX5HP3kQ=
Subject key identifier: EE:49:50:56:12:6E:E3:F1:F9:07:14:6D:B9:DE:2E:B6:D9:65:9C:9C
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019AF16418B4C3EE54E03F1C1DA5481C7D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1324
Signing time: Sat 06 Dec 2025 02:01:00 +0000
Manifest this update: Sat 06 Dec 2025 02:01:00 +0000
Manifest next update: Sun 07 Dec 2025 02:01:00 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: SRay80UqAaE79LoDz6s6/Mc6r9lBxYLCHz7D3ts37QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:18:b4:c3:ee:54:e0:3f:1c:1d:a5:48:1c:7d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Dec 6 02:01:00 2025 GMT
Not After : Dec 7 02:01:00 2025 GMT
Subject: CN=ee495056126ee3f1f907146db9de2eb6d9659c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:53:16:e4:b2:4c:99:ab:78:06:72:22:78:
cb:45:f5:fc:0d:21:78:e0:b1:ef:d0:76:7e:26:0a:
39:1c:f4:13:b2:b3:92:85:8b:c7:44:58:7d:2a:ba:
1b:3a:13:8a:43:31:6b:12:e6:86:4a:d4:3e:2c:94:
1f:08:d6:58:18:7a:ee:16:74:4f:83:6c:f4:2b:42:
37:67:0a:1e:a3:2e:c3:60:40:ed:d6:6f:4e:ca:88:
8a:3c:0a:2f:67:e8:ba:28:04:4f:9b:31:ba:64:dd:
a2:ba:66:03:c8:59:e5:65:a4:d1:c9:42:ff:7b:a2:
7c:0a:62:78:e3:67:85:71:48:f2:db:c7:8a:6c:5f:
50:ce:b6:ca:c4:2c:28:3c:53:45:70:c7:e2:35:96:
f6:d2:32:0d:f1:eb:f2:d7:c9:c5:3b:cf:8a:f6:b1:
53:f6:90:fd:aa:f2:69:09:79:e2:48:7c:f3:8b:ed:
6d:28:95:80:49:ee:ab:8e:30:92:fe:4b:ef:3f:b8:
18:01:7a:6c:f8:a5:76:0d:ff:bb:95:69:48:1c:ee:
76:5b:31:92:71:0c:ad:22:5d:36:be:78:83:65:9e:
f4:53:60:40:68:39:d6:3c:d3:9d:b6:3b:08:51:4c:
99:41:83:92:51:bb:2b:11:e5:65:f4:44:fd:04:9b:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:50:56:12:6E:E3:F1:F9:07:14:6D:B9:DE:2E:B6:D9:65:9C:9C
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:26:df:28:8d:62:81:b6:7d:f3:49:69:c7:b0:10:84:3d:
bb:ab:cd:55:08:f9:9f:28:cb:a4:0c:aa:e0:b3:97:fc:07:9b:
5d:ec:fd:15:f7:d5:b3:3f:8a:3a:ee:7e:3f:3a:a8:b6:8b:de:
5e:ea:fc:bc:fb:87:35:1b:fe:7c:bd:d6:b7:80:ab:4a:64:4e:
fd:3c:e1:0e:c5:6f:79:8b:fb:b1:2d:6b:31:01:ef:d3:ad:04:
81:4a:d1:cc:5c:76:9a:30:48:b4:2f:02:df:bf:4a:85:57:78:
c9:04:84:15:0c:78:67:f0:4b:49:cc:64:dd:15:93:ef:12:27:
cf:40:59:b6:71:32:15:aa:81:04:9e:23:cf:ea:32:de:d2:6c:
6c:0c:fb:90:dd:2c:83:2f:35:02:3a:a3:5d:14:c1:80:e5:e0:
e3:57:68:05:d8:80:34:3e:71:56:89:68:5f:a0:71:81:68:3b:
00:54:4e:b3:c1:8f:bc:36:78:be:76:ed:af:85:a6:3d:c5:c2:
b7:08:9a:bf:02:22:db:73:a2:3d:dd:e6:7e:ab:af:80:9f:e7:
98:97:bd:12:49:e3:27:4b:54:8f:da:5f:8d:e0:5b:43:b6:86:
a8:bb:bf:28:8f:11:e4:f9:99:ac:0c:69:bf:2a:fd:9a:fb:85:
69:00:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:40:45 2025 by rpki-client