This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: Y6fjeug7YTZybgMfRi6ADHLkdws4KosHHZYKYsGPlBU=
Subject key identifier: BC:EE:2D:B5:D4:41:05:E7:81:3A:E5:FD:18:3D:0A:5F:14:18:EE:D2
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019AF1D1C64FA44733137932B28C3258CD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 04:00:48 +0000
Manifest this update: Sat 06 Dec 2025 04:00:48 +0000
Manifest next update: Sun 07 Dec 2025 04:00:48 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: 7GUaD9wog+Ij/6VmMYWYoKUCcXo1Ws5eltq4bikmQ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:c6:4f:a4:47:33:13:79:32:b2:8c:32:58:cd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Dec 6 04:00:48 2025 GMT
Not After : Dec 7 04:00:48 2025 GMT
Subject: CN=bcee2db5d44105e7813ae5fd183d0a5f1418eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:30:ab:76:12:b0:ee:d1:e2:8b:1c:bc:67:
ba:ee:ee:ba:ea:d1:dd:d5:99:90:72:43:d1:cb:64:
bc:29:45:56:17:26:b9:f7:b7:fe:49:be:ce:1e:c3:
03:f5:04:19:17:43:a3:af:1b:4c:71:d1:29:ac:3a:
c0:bd:87:23:f0:3c:86:35:ee:8d:20:68:98:a9:22:
b4:5f:80:36:e4:f7:79:00:ef:53:0b:72:5b:ff:61:
07:cc:47:bd:70:b3:a5:05:ce:25:03:b9:e2:8d:4d:
08:c1:f6:70:20:ea:76:77:ae:fb:0d:f8:61:12:f3:
c5:70:d7:89:39:40:07:9a:f1:87:8d:f0:e9:b7:ae:
3d:db:a0:67:5e:ac:af:51:90:55:1a:04:6e:54:71:
ba:4d:87:24:b9:e5:f0:e5:0e:09:e7:5f:1c:90:d8:
13:6a:50:b3:a7:fe:f3:de:42:ff:73:21:5a:53:de:
c1:01:7e:d4:e2:28:7a:78:09:d8:d2:bc:51:22:79:
d8:f7:04:3a:59:42:c1:26:0f:00:35:44:81:1f:c1:
3b:fc:0b:1f:21:24:16:e5:3d:ce:a9:a9:53:8a:b2:
b6:15:90:57:e2:4e:6a:97:88:2b:5b:d4:22:0b:ed:
a1:6a:bc:27:1f:9e:82:2f:94:5a:f7:3a:f5:f6:ef:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:2D:B5:D4:41:05:E7:81:3A:E5:FD:18:3D:0A:5F:14:18:EE:D2
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:97:5c:06:bd:b2:dd:57:a3:9a:01:c8:fb:b9:6f:dc:dc:66:
eb:d9:b6:16:41:6d:25:82:28:74:cc:c0:5f:9a:c7:1b:8f:c1:
2c:c2:20:c6:81:10:0b:6a:43:95:39:f0:6d:1f:b1:a3:f0:52:
f8:7c:28:19:d5:ed:b0:ee:05:89:0d:d1:6d:c6:9b:55:9b:56:
3d:a8:42:b1:d1:53:d9:89:84:2d:75:c3:09:a8:af:6b:f8:7d:
41:7a:7e:11:ca:a8:61:f0:fb:0a:77:31:74:03:30:55:4a:bb:
76:d1:56:d5:33:44:48:c2:5e:5f:57:56:b8:fb:4e:58:7f:4b:
fc:d5:68:a2:a7:11:38:f9:96:db:56:a1:f7:9c:00:c9:c4:d0:
04:eb:df:58:bd:f8:5a:b8:f0:74:e1:e8:24:03:60:f5:70:20:
0b:60:47:c7:5d:82:61:63:9c:c5:31:f9:a8:fc:47:cf:18:9e:
a5:25:96:a4:29:97:36:db:95:cc:cc:fa:7f:65:00:f9:79:a4:
c2:91:0a:c7:f5:21:11:e3:9a:48:c4:e5:d8:45:83:d2:e3:0c:
eb:ae:d3:b6:0f:b4:67:77:a4:eb:73:d6:a4:dd:8b:36:f0:8d:
f7:e0:57:e4:3e:ae:58:29:b9:28:70:de:72:a9:06:3f:89:50:
2e:5d:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:19 2025 by rpki-client