This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: +kmLXMv5CKQZQ/qlAs4ey+8rwBofztu9NwK4jluzhzE=
Subject key identifier: BD:D3:7D:96:96:1D:F3:52:B7:34:20:6E:43:73:AA:5A:67:6D:96:68
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019AF23FC1AD739E18D9433DCCBE5611039A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 06:00:55 +0000
Manifest this update: Sat 06 Dec 2025 06:00:55 +0000
Manifest next update: Sun 07 Dec 2025 06:00:55 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: aBeez/puaxGzGwzi3kXZ6l9tIlngDzfNZmqo4UUs3Bo=)
2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:c1:ad:73:9e:18:d9:43:3d:cc:be:56:11:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Dec 6 06:00:55 2025 GMT
Not After : Dec 7 06:00:55 2025 GMT
Subject: CN=bdd37d96961df352b734206e4373aa5a676d9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:df:ae:d9:9d:81:4c:c3:f8:46:82:c5:a1:
92:16:5d:5b:84:d7:71:5e:0d:f5:d1:e4:70:4c:8f:
28:6d:24:62:8f:57:73:85:c2:f7:53:3f:0a:3d:ff:
f5:e7:af:0a:b8:00:dd:1f:61:10:8f:71:28:0f:56:
9d:53:e6:34:25:7f:f4:34:bb:be:d7:c4:79:e2:8a:
69:f4:a5:d5:4e:97:d7:e1:d3:1c:f9:30:f3:74:d1:
27:b4:a1:00:64:68:18:ee:78:59:bc:ef:ee:63:de:
cc:55:08:37:36:a0:28:fd:d3:7e:00:b8:ae:cb:cb:
22:f9:0d:a2:a7:b9:bc:ae:98:57:cf:85:15:bd:cd:
69:1a:fb:01:14:3e:79:f3:ab:28:c6:8c:79:1e:04:
25:81:7a:26:d1:d5:c3:81:36:18:6c:54:23:8a:72:
78:0e:e3:97:8c:0c:c6:a3:94:91:1f:ca:13:59:48:
56:2a:54:ae:b8:40:65:da:53:7b:4f:36:34:a0:85:
3f:63:98:be:27:83:98:b9:ec:06:5e:ff:72:6e:3d:
34:e2:8c:af:c4:53:6e:14:71:a8:6a:64:f6:1e:5d:
69:20:3f:2d:c1:14:92:ad:5c:1c:b2:12:bf:fd:cc:
3a:29:0a:8e:a6:46:2f:8b:3f:9f:25:5d:ff:ef:64:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:7D:96:96:1D:F3:52:B7:34:20:6E:43:73:AA:5A:67:6D:96:68
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:72:92:79:a2:06:99:96:8d:fc:d6:1f:02:e3:02:ba:22:
d4:1c:62:b6:32:04:4e:05:c1:b2:86:25:d0:99:b1:83:36:13:
3a:6a:c8:1d:31:b2:5c:8c:2a:a0:26:b0:76:d9:7e:88:b3:b4:
24:b4:2f:90:67:a9:60:d0:45:97:04:67:de:56:a9:ee:1a:3d:
f7:91:d6:46:63:45:25:ba:57:d9:4b:dc:0d:06:04:9f:45:2d:
65:f5:a6:3d:97:76:88:be:a6:d3:ca:8d:25:f7:67:d0:ae:e8:
96:30:e7:34:8f:1c:67:b7:c5:d7:a7:c3:27:85:01:04:12:47:
0d:4d:ba:9f:e1:22:4b:1c:85:1b:4f:8c:ad:3b:b4:41:c0:72:
39:8d:7f:59:50:91:99:23:35:3b:c4:bc:05:b2:7d:b9:a3:77:
ae:b3:9f:1c:04:38:77:96:01:91:1b:c2:89:4f:0c:23:70:e4:
7a:52:9c:70:15:68:b5:25:7e:29:6f:a8:c8:00:e5:9f:7a:7a:
75:24:d0:2e:d9:61:fd:81:64:44:71:73:8f:a8:b2:a6:76:0b:
f5:99:3d:e6:35:9f:79:95:a0:f7:b7:f2:ec:df:1f:7e:d5:3b:
a0:7d:32:8d:c9:3f:90:b5:5b:a5:52:bf:8b:dd:86:23:44:df:
3d:a9:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:47 2025 by rpki-client