This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: hDIwHw5o2z3/A7YWEz8URVnyOJe0fiysFFiBSsPh7v8=
Subject key identifier: 34:15:0E:C6:FB:34:C9:F8:34:13:A1:82:28:69:4A:B4:42:84:F1:65
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019AF540B57533983BAFEB1FC02ACB512EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0B9E
Signing time: Sat 06 Dec 2025 20:00:49 +0000
Manifest this update: Sat 06 Dec 2025 20:00:49 +0000
Manifest next update: Sun 07 Dec 2025 20:00:49 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: Nyq64IToUyHE60KNdxXy9URL5fAvAXAtv5/9wpphhvc=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:b5:75:33:98:3b:af:eb:1f:c0:2a:cb:51:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Dec 6 20:00:49 2025 GMT
Not After : Dec 7 20:00:49 2025 GMT
Subject: CN=34150ec6fb34c9f83413a18228694ab44284f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:9b:a2:1a:5d:01:d2:88:61:92:58:ab:86:
e1:10:09:35:46:a3:d3:cd:93:ad:18:af:f2:c8:b3:
ae:54:1e:a1:67:63:56:17:fe:a1:2c:8f:f2:3d:96:
56:57:6c:8e:13:a0:fe:59:d5:3f:ed:50:35:2d:b6:
00:cd:bb:fe:5a:f0:04:9b:06:3d:1d:6a:69:a8:85:
ae:e2:1b:a7:4a:b0:af:0a:79:71:be:a7:25:8f:04:
c6:36:30:be:d9:34:75:6a:1f:e1:31:79:45:47:76:
8c:66:0a:36:f1:9f:76:22:c2:ae:b8:07:85:b0:36:
83:ca:55:3e:21:1c:ea:7b:05:8d:3a:96:a2:5b:6a:
7d:5b:1c:f8:6e:d4:3f:da:86:f9:b4:e2:fd:24:95:
04:be:4d:e8:8d:ea:75:e2:01:f3:a9:7b:62:eb:8c:
a2:a9:a0:37:c2:74:77:48:44:f1:76:16:68:30:bb:
bb:68:ed:38:8b:20:bd:37:0f:12:84:b9:61:95:57:
12:3d:0d:9b:37:7e:4d:d2:7b:07:97:92:9d:c6:b9:
14:b9:d5:90:42:80:7d:fc:70:81:2d:ec:41:6f:15:
2f:93:5f:bb:9b:00:a6:d6:cf:ae:41:11:b4:15:c2:
d7:35:76:41:4b:64:0c:b4:22:f1:0e:37:a7:80:f9:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:0E:C6:FB:34:C9:F8:34:13:A1:82:28:69:4A:B4:42:84:F1:65
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3a:bb:9f:90:d2:b5:72:83:f1:b1:19:96:06:f8:56:02:d2:
17:77:25:08:d6:4e:49:a9:5c:79:9a:91:4a:f3:94:5c:a6:3d:
9c:a4:a2:a0:0f:20:2d:74:7b:3f:7e:77:39:f4:47:63:64:9b:
b1:30:1e:04:74:85:07:81:69:02:33:8a:ab:bc:fd:c9:d1:97:
21:80:9a:c0:d2:ba:ac:d7:d0:73:42:4c:e8:27:59:71:46:b3:
49:44:12:90:4a:db:2a:ff:01:c4:da:63:6c:b2:27:42:14:ab:
7a:40:da:04:a2:e7:21:f5:fc:95:fe:36:08:01:fe:88:f1:97:
84:b0:5c:c1:11:61:64:7c:b5:9d:54:e0:18:53:3a:c2:cc:bd:
ce:c5:1a:98:97:8b:c0:5c:a3:93:c8:1f:d9:4e:26:33:5f:0b:
60:5b:73:fa:7d:b6:6a:3f:6e:ef:14:17:da:f4:8f:0a:b5:51:
bd:79:6c:a4:0f:4a:c0:e9:ea:36:7f:32:3d:65:52:f7:35:73:
0f:54:a0:69:21:53:62:2d:e0:b1:62:66:5f:72:86:03:64:54:
55:aa:6e:78:37:f8:1f:89:6c:24:fe:b3:7d:ff:58:bf:1b:ce:
7c:b2:93:79:0b:68:57:ee:c0:0a:99:3b:44:25:81:8c:d6:a4:
93:34:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:18 2025 by rpki-client