This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier: r7VECSuXsl5WG7r7B28nctADybPgaHPqoM2TofwaZpw=
Subject key identifier: 68:CE:41:87:97:B1:F1:8B:1A:1A:BA:1C:9B:BF:A2:A8:B8:EB:BA:A7
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 019AF27685976B006F671B6DB81887BF9321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number: 12FB
Signing time: Sat 06 Dec 2025 07:00:44 +0000
Manifest this update: Sat 06 Dec 2025 07:00:44 +0000
Manifest next update: Sun 07 Dec 2025 07:00:44 +0000
Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: fpmf6wCEAiB7/ogLJzKOMwk/LQ2tpngaBeVBvxhMLvI=)
2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:85:97:6b:00:6f:67:1b:6d:b8:18:87:bf:93:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Dec 6 07:00:44 2025 GMT
Not After : Dec 7 07:00:44 2025 GMT
Subject: CN=68ce418797b1f18b1a1aba1c9bbfa2a8b8ebbaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:56:d7:c1:10:cb:a9:f3:b4:7c:b1:a8:fc:
a4:ac:c0:4a:46:25:7a:17:6b:f9:96:f6:60:35:4f:
cb:85:01:cb:2c:b6:51:4d:e4:1f:0d:4f:2a:d7:10:
2e:75:cd:b0:6f:28:a4:fa:d5:7f:da:89:16:b5:8c:
d8:5f:88:04:93:86:26:24:9e:76:62:f6:a5:21:59:
e1:8b:22:25:c1:41:19:61:b5:52:78:0f:1c:ba:5c:
21:46:e3:4b:ac:90:56:cc:df:e8:17:a5:88:d1:d7:
04:10:46:49:f1:6c:c7:50:a4:48:0d:48:92:14:a6:
48:e0:17:c8:cf:a0:79:8a:cd:0a:82:be:c6:33:d8:
ea:6b:01:eb:a2:5e:92:96:ef:39:d7:2d:c2:55:96:
98:07:9b:51:ae:f0:22:9b:de:8f:82:00:a9:04:2e:
cd:d6:58:d0:af:95:44:d5:25:1e:1b:39:21:42:45:
dd:66:60:73:7d:96:f2:ed:70:e9:c3:96:e6:58:7b:
89:23:a2:14:63:d7:e9:2c:1f:3a:77:5f:dd:9f:b7:
ad:37:b4:bd:64:6c:de:ce:05:f9:e2:d6:a7:f3:9b:
3d:7e:d1:48:e5:d5:a3:76:18:95:bc:21:40:72:e3:
59:11:a5:9e:ed:9b:1d:c0:8c:43:ad:a4:2b:e4:ad:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:41:87:97:B1:F1:8B:1A:1A:BA:1C:9B:BF:A2:A8:B8:EB:BA:A7
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:a8:77:76:d4:0e:a8:a2:a7:7d:0e:33:91:66:86:dc:c6:
19:7c:23:09:06:70:9c:ca:79:02:54:20:c6:c4:2e:2d:ed:3e:
d6:9f:61:b6:73:3f:d0:e7:46:28:9b:d7:3d:49:6c:27:eb:4f:
85:09:53:08:a5:4a:f5:07:73:7e:98:55:16:89:63:4d:22:4f:
97:6b:8b:09:44:86:d2:ac:79:69:54:f0:b8:67:24:d0:2b:69:
9a:5c:00:17:60:d9:30:43:8c:f7:8c:f9:16:92:a9:ff:ff:d3:
d1:e4:43:06:d6:29:51:62:44:fc:aa:c5:11:12:1d:af:46:55:
82:73:a8:c1:d0:5a:d7:82:b1:11:7c:d2:ac:aa:45:e3:1d:aa:
58:15:fc:1f:3f:cb:b8:00:a0:d9:77:54:b6:00:c8:dc:29:b6:
c3:d2:e7:63:ec:8c:87:8d:cf:7b:60:43:05:b8:21:b2:c5:b5:
63:49:c9:a8:da:72:5f:40:af:c6:d5:91:3b:47:e9:f4:93:75:
30:09:b5:c3:78:af:60:55:ea:d2:37:a5:18:0e:af:4e:39:0d:
ea:2a:dd:11:68:09:86:48:1a:c0:55:72:1a:9e:06:4e:ad:9f:
2f:19:39:cc:8e:84:67:b0:dd:87:ce:af:e9:ef:07:e5:2f:6f:
0b:9d:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:35:05 2025 by rpki-client