This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: sKW+2OyZjrjCrVtmfIGH4LMtveJ5HZ0jbvCiEhEk//Y=
Subject key identifier: 6E:94:0A:C6:7C:80:0B:48:10:7B:66:23:E5:E0:E0:85:45:B0:43:1D
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019AF208E93A1027085D74B896CEB238C3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 17A5
Signing time: Sat 06 Dec 2025 05:01:01 +0000
Manifest this update: Sat 06 Dec 2025 05:01:01 +0000
Manifest next update: Sun 07 Dec 2025 05:01:01 +0000
Files and hashes: 1: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (hash: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=)
2: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
3: a-k-PpKc_hbf1tf8ym45DzWV9JI.roa (hash: CGjB95jiiaCzW7zL6nSnhujYT7ypy6568fnCUOok1Hk=)
4: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
5: hJ2Q_kNZVtX9DYCp6pRdbULfToU.roa (hash: Bj3orwiHHH0lwtlViSgWz8igoGg/S7618D6XjO8Tllo=)
6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: 76fqP9JTOcbKE8YxaiYYqGQGqLCXPgHhdaC4mowCvm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:e9:3a:10:27:08:5d:74:b8:96:ce:b2:38:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Dec 6 05:01:01 2025 GMT
Not After : Dec 7 05:01:01 2025 GMT
Subject: CN=6e940ac67c800b48107b6623e5e0e08545b0431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:25:70:41:72:7e:1c:b8:be:cd:88:e1:84:
4f:8d:6c:ba:41:02:c0:11:7b:d6:24:ad:35:6d:ec:
8f:31:92:70:4f:7d:9c:e2:21:28:44:98:13:06:19:
2e:7b:5a:0c:f5:f5:8c:64:ee:30:fb:49:6e:a0:2b:
0a:d0:5c:3c:7f:75:94:08:a3:ef:1e:16:9b:9f:4c:
cd:74:ff:17:0e:76:0c:da:ea:1f:8e:8e:a8:ad:68:
8d:e1:a5:00:de:81:3e:ef:08:5d:1b:97:ae:40:aa:
a6:05:77:62:cc:c7:8a:cb:6f:42:b2:6e:e7:e2:0c:
7e:ad:10:8f:f4:ed:5a:14:83:0e:08:ad:81:ae:d2:
05:76:b3:09:69:b2:3f:ef:56:f5:be:77:70:32:ab:
88:4a:1a:0f:d6:b7:72:b0:bd:a6:b1:53:20:ed:70:
89:9d:65:ca:ef:c7:5d:36:25:c4:f2:1a:14:a4:8b:
53:3b:73:55:fb:18:af:93:06:64:54:21:37:b5:8c:
61:b7:05:f5:89:6e:77:e6:f2:dd:95:57:21:5c:f7:
6f:c8:c4:68:82:d9:40:bf:d0:0a:89:b1:c1:b4:ca:
87:d5:55:1c:c1:46:30:82:32:cd:23:13:b7:68:0d:
29:3c:08:5e:59:ce:57:97:31:fe:41:77:bc:9f:d5:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:0A:C6:7C:80:0B:48:10:7B:66:23:E5:E0:E0:85:45:B0:43:1D
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7f:a2:b2:ff:f8:47:ce:f7:09:5a:87:91:31:33:de:ba:34:
77:60:c8:8d:a4:76:24:a6:3c:89:56:95:53:13:a8:e6:8a:d0:
54:28:af:2e:a3:ac:28:bc:5a:49:a6:2c:b8:ee:57:6f:60:b9:
6e:d0:6d:e1:ac:4f:8d:73:45:0c:44:95:d7:ea:f6:f5:08:ce:
53:dc:4b:32:de:4b:94:36:e8:78:74:49:8e:5a:78:b9:d9:cf:
8d:db:2f:44:66:7e:9f:70:5a:ac:29:a5:db:c0:e1:39:4b:52:
46:74:c7:8b:06:30:b8:38:e0:74:1e:b8:f3:d6:89:69:ea:6b:
90:aa:f0:bf:22:97:98:60:f8:33:10:9f:f0:b1:76:9a:b1:f9:
50:dd:a9:ba:e0:57:24:e1:21:95:6f:5a:3a:ad:a7:c3:2f:bc:
b6:1e:8e:3a:55:0f:b9:1a:c3:0c:dc:c1:4c:ab:31:8b:bb:b3:
52:be:f6:67:ce:fc:15:90:3c:94:00:73:30:70:ce:28:f7:1a:
5b:f4:f2:ce:bc:53:99:aa:25:a4:b7:81:1a:5c:86:ba:09:3e:
e2:bc:9a:d4:a7:cc:b3:24:77:2f:36:48:b2:42:a6:db:70:ed:
09:dd:da:46:15:64:0e:9f:3d:ee:aa:54:38:00:97:1d:6a:16:
19:e5:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:02 2025 by rpki-client