This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File: m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier: of6QQtgTXBQ1NO26cI2RRobMi/OpTA3dmJ9RlIkkBLs=
Subject key identifier: D9:E9:FC:37:D6:12:48:A6:90:05:38:4E:D7:53:84:E2:9D:65:C8:86
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 019AF31D67B5D3684063676F183EAAACDD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number: 0D46
Signing time: Sat 06 Dec 2025 10:03:01 +0000
Manifest this update: Sat 06 Dec 2025 10:03:01 +0000
Manifest next update: Sun 07 Dec 2025 10:03:01 +0000
Files and hashes: 1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: 0EsDRFSjIdcLrYgtoRx2mIr1aNaEZXV2aiOpHQd5qnI=)
5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1d:67:b5:d3:68:40:63:67:6f:18:3e:aa:ac:dd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Dec 6 10:03:01 2025 GMT
Not After : Dec 7 10:03:01 2025 GMT
Subject: CN=d9e9fc37d61248a69005384ed75384e29d65c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:cf:97:13:6a:bc:a0:8e:18:fb:cd:db:06:
82:3f:12:14:0d:d6:69:3b:ab:a6:4b:ba:19:06:d7:
64:88:35:11:70:be:56:cd:2b:51:f5:a0:7d:85:72:
a6:f7:22:b6:b1:d3:52:51:2b:b9:35:61:fb:40:ff:
c0:06:77:30:42:c8:64:cc:93:5a:bb:e3:fc:11:7a:
9b:95:10:5b:9f:ff:c5:3d:3e:d4:b4:4e:06:0b:a2:
af:90:fe:b6:36:6b:9a:a4:05:61:69:64:df:d6:6e:
05:3e:25:8c:dd:67:42:9c:18:c2:14:e4:7a:0e:48:
d4:b7:1f:b4:4c:09:74:8e:3d:57:b0:14:aa:d5:72:
1d:ea:05:d8:d5:41:6a:3d:ac:0b:55:b1:1e:34:38:
b5:fc:c8:20:6a:66:2a:5c:5f:a1:1c:ca:cd:30:55:
b5:f0:07:30:17:5c:86:cd:31:f3:22:3c:9e:01:31:
dd:11:77:a9:63:55:47:d1:77:5b:20:8f:b8:b2:18:
2e:33:a9:e8:97:c4:02:03:9b:4a:97:7d:83:90:9f:
1d:25:52:d6:f8:14:56:f5:69:39:ea:67:68:21:b0:
a3:68:6b:d5:63:e8:97:09:06:4b:4d:e5:f4:93:62:
27:ec:05:1c:13:82:10:c9:55:52:0d:05:08:d7:99:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:FC:37:D6:12:48:A6:90:05:38:4E:D7:53:84:E2:9D:65:C8:86
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:cd:13:11:ec:9f:3d:d5:e8:9b:38:96:84:d0:31:4b:1a:b9:
99:7f:00:b0:6e:42:16:cc:09:e6:bf:c0:02:af:f0:36:e7:f6:
d1:30:c3:09:44:c1:78:56:b0:e2:21:9b:da:4c:16:e8:54:62:
46:df:85:85:c9:b0:58:11:49:63:13:e8:70:03:51:1f:e9:e5:
dc:0a:5e:3b:a0:eb:9c:c4:c7:17:82:3d:57:95:f7:05:d2:ae:
e7:d2:83:45:ae:39:5b:ca:34:5c:66:3f:87:b5:b7:ea:53:07:
00:d6:82:b5:ef:03:68:3b:cb:b7:f3:2b:6b:ad:cd:f7:af:83:
85:a5:cc:77:15:3e:7b:da:11:5c:80:ee:39:fa:4d:91:6e:af:
7f:ed:b3:b9:da:67:ac:7f:c5:0b:84:a6:40:73:3b:8f:d3:12:
da:7c:16:5a:e7:94:1d:b5:f0:42:4f:57:a7:50:9c:d5:fb:4f:
49:6a:52:e1:b1:21:92:1a:c5:d6:b8:18:8f:97:4d:a5:f7:2b:
ef:2f:ba:a7:e3:6f:0c:15:d6:82:e6:5e:f3:5c:05:5b:c9:9f:
e5:e7:70:54:99:f3:0a:88:b0:48:2a:1f:b6:e3:55:01:89:79:
cd:43:57:fb:93:fc:04:8c:fe:75:7b:52:50:df:09:73:69:7b:
cc:0c:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:16 2025 by rpki-client