This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier: 0qTzgu9AkHYL+i1Ovmb8LnkgKXzVh9m3j0AJ9Ha4YDo=
Subject key identifier: 43:D4:C6:A4:3E:A0:E9:C4:DA:13:73:59:C0:76:C4:38:B1:FC:8B:8E
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019AF50B5D94172BD46977259434E13676E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number: 0B08
Signing time: Sat 06 Dec 2025 19:02:33 +0000
Manifest this update: Sat 06 Dec 2025 19:02:33 +0000
Manifest next update: Sun 07 Dec 2025 19:02:33 +0000
Files and hashes: 1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=)
2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
3: cwXMDwSdPAC7ktKSXsf3XiFrpco.roa (hash: ylL+gpNQ+jWrNaI8CRohFwHRtYlv0vQDPOOLDPraRNU=)
4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: mkz3nV/ltIoCcI0ac9POAGuAB7t3Z80Eb8HKrnt4JN4=)
5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:5d:94:17:2b:d4:69:77:25:94:34:e1:36:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Dec 6 19:02:33 2025 GMT
Not After : Dec 7 19:02:33 2025 GMT
Subject: CN=43d4c6a43ea0e9c4da137359c076c438b1fc8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:e4:df:48:68:76:c2:89:9f:d9:c8:2c:6a:
fe:cc:75:69:01:da:1f:9e:67:66:d5:01:22:88:dd:
91:60:5d:b6:db:1e:ee:fe:b1:bb:34:9f:33:ca:0b:
21:61:76:e5:d9:1a:d2:40:c0:30:fc:c6:3e:ea:53:
3a:14:19:ab:db:a5:3c:2f:ce:c5:6b:49:4d:8d:2d:
2b:4d:c9:03:d3:c8:6a:55:fb:e9:2e:f7:34:a8:e8:
c2:f5:f6:b1:35:ad:68:af:6a:ca:0d:95:ff:15:97:
58:ec:56:f4:a0:c7:4b:7c:d4:2c:31:bf:fc:f5:c5:
24:5d:fd:64:fa:e0:64:57:34:f8:5f:a6:2f:1e:13:
50:27:86:38:59:42:6e:a1:4b:33:26:0c:fc:5a:1d:
31:54:5d:5b:15:49:2f:be:3a:83:fe:b8:16:8e:8d:
2e:08:8a:51:8f:eb:bc:28:79:ac:38:af:5c:f1:2e:
1a:51:29:b0:74:38:5f:71:ca:28:10:c7:8b:09:2e:
9c:81:17:b8:b6:13:ad:fd:13:ba:1e:14:8d:ce:07:
69:69:c8:7e:98:5c:1f:c6:c0:af:b5:1a:3c:da:49:
35:8b:9c:84:6e:95:d8:ae:4a:61:a3:c9:bd:bc:6b:
79:b0:60:f2:96:8f:da:f7:d6:2e:7c:b6:bb:eb:4c:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:C6:A4:3E:A0:E9:C4:DA:13:73:59:C0:76:C4:38:B1:FC:8B:8E
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:8b:73:91:d9:b5:34:c2:8e:d8:8e:30:a6:9e:fd:36:d7:
50:7b:20:b8:bb:19:c7:88:2f:4e:84:42:39:d8:6b:ed:8f:99:
f0:cd:a3:62:21:c0:fb:b1:7e:99:c6:00:ec:5d:7f:cb:9b:26:
3b:ad:e3:0f:24:f9:ca:2d:60:7b:8c:f5:f4:ec:3b:37:29:ec:
b6:3f:9c:d6:f3:f9:9b:4e:bb:28:8f:2f:26:81:e4:a8:62:08:
95:3e:df:f4:c2:07:b4:51:58:9a:5e:39:a8:c2:e2:f2:fc:33:
f5:fb:5b:db:39:4b:82:a9:be:04:e3:aa:08:a1:7e:63:22:ac:
7d:ef:53:2b:63:77:58:6f:65:4c:9b:35:f3:85:03:fb:15:16:
de:b6:06:9f:05:26:b3:60:b7:13:57:63:b4:9f:60:de:ae:f8:
8a:8a:fc:48:e0:70:87:9d:fc:f4:c3:6d:fe:4f:a8:47:3e:97:
3e:9b:8b:f7:e0:8e:ca:8e:1e:98:97:db:1b:2d:9f:5b:2b:a5:
e0:6e:8a:75:1a:14:a0:20:2f:7a:db:32:6a:8f:36:82:5d:e7:
d4:cc:ff:95:d7:90:88:fc:1a:5f:66:45:ac:4e:19:18:64:1f:
4a:01:5e:a9:16:3c:83:77:60:83:dc:bd:c2:b7:ba:a5:9f:2f:
11:52:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:29 2025 by rpki-client