This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: wOmdj4det/C/jkt76cVxg7RK4+NvXciG6KzODsNUg+w=
Subject key identifier: A6:DA:8D:BC:C3:9D:0A:7E:90:85:0D:21:56:98:3F:18:ED:2F:65:3E
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 019B300C2AA3AB3DB556C5295FA92B8183CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 1786
Signing time: Thu 18 Dec 2025 06:01:02 +0000
Manifest this update: Thu 18 Dec 2025 06:01:02 +0000
Manifest next update: Fri 19 Dec 2025 06:01:02 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: UElCYV8B1h0+ZV0pDLOH5oWH+Y9hWkIK0YtrvWvQ/nM=)
2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:0c:2a:a3:ab:3d:b5:56:c5:29:5f:a9:2b:81:83:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Dec 18 06:01:02 2025 GMT
Not After : Dec 19 06:01:02 2025 GMT
Subject: CN=a6da8dbcc39d0a7e90850d2156983f18ed2f653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:33:f9:aa:b2:d0:fe:f8:fc:76:6c:cf:9d:
3b:c2:73:ca:e8:c1:4b:14:fb:4b:16:c3:8b:8e:81:
4c:4a:34:45:38:52:fc:b8:21:9a:fb:6d:00:53:9c:
52:81:a3:31:df:cb:7c:1a:ae:0c:9b:4f:cb:49:e3:
cb:1a:a9:b6:c9:e5:7e:a0:fe:3d:49:22:9d:77:89:
fa:0d:c1:1e:61:92:f7:56:48:3e:b2:72:dd:0d:c4:
e1:7c:84:2b:46:7c:5b:9c:c7:41:8c:f7:ab:a2:7f:
96:19:f4:17:df:ed:6e:d1:27:4e:c1:de:7e:55:da:
9a:e5:9a:44:93:a8:f6:6e:21:24:40:44:52:1c:e9:
97:88:d6:8f:40:d5:ef:d0:16:94:14:7e:b7:64:94:
ad:1d:1e:d1:2b:0c:51:14:fa:5c:50:c1:02:d2:f9:
42:41:cb:77:6c:b9:a7:c5:7d:82:11:93:3b:93:be:
21:5a:ef:29:ee:2e:46:69:d3:8b:86:f2:87:93:22:
3d:1e:4b:1a:8a:6a:d4:58:72:40:4f:d4:b7:35:75:
70:f9:6b:06:8c:8d:28:5c:7e:37:13:5c:e6:23:80:
b9:e5:2c:11:68:98:03:ee:c6:58:c0:93:d2:50:aa:
fe:d9:b2:f1:b0:5e:0c:5b:bf:4c:92:a5:51:ae:75:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DA:8D:BC:C3:9D:0A:7E:90:85:0D:21:56:98:3F:18:ED:2F:65:3E
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:21:05:29:5d:9b:8f:70:c8:9a:89:49:0a:2b:78:a7:56:47:
f4:18:aa:f4:87:83:85:80:32:b2:76:9a:80:ae:be:a3:bd:52:
34:34:b4:c4:2d:c4:28:9e:a1:c3:83:39:f7:aa:3d:a0:a5:06:
aa:c6:26:b5:bb:b0:1b:2c:c4:3b:06:89:fe:e1:38:f3:fd:f8:
08:82:e2:df:53:d0:72:59:a0:6d:45:de:fd:88:19:91:15:4c:
ca:e0:5e:69:43:12:c9:d0:16:36:fd:78:27:44:11:e5:34:86:
76:b0:ec:0b:1d:a0:ec:70:8b:47:0f:69:4f:23:2a:52:c8:05:
de:31:6f:64:ce:23:e3:f3:d9:8c:e8:3c:8a:c4:fe:58:07:8d:
f1:d7:69:41:63:e5:1b:86:c4:65:ba:e1:3b:5e:91:75:89:6c:
e0:66:d2:7b:f8:e5:9b:11:0d:86:92:17:cf:7a:2c:bd:69:68:
54:af:26:ba:4e:c2:b5:6d:7a:93:6f:7c:77:9a:74:f7:1d:a3:
cb:f0:93:64:95:bc:f3:18:c7:5e:79:68:86:4c:bf:17:52:27:
c6:b7:55:d7:a1:eb:4c:46:3a:b6:d0:74:d0:3e:be:b5:4c:a4:
1d:32:48:b2:56:48:d4:16:d1:b5:ea:87:52:42:c7:32:88:fe:
4e:07:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:24:12 2025 by rpki-client