This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: OqpRLabRDXDTqfalJ5+FPtccr3RXcfunSsiTW1NODHQ=
Subject key identifier: 96:C2:B6:93:34:BA:DE:B3:1B:7E:AD:68:A1:28:CC:E8:9E:9B:FB:CE
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019AF19B293DAB56C3032134C05AA8283E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 03:01:08 +0000
Manifest this update: Sat 06 Dec 2025 03:01:08 +0000
Manifest next update: Sun 07 Dec 2025 03:01:08 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: /gPfMnB+yfakIH8B4DlKOQxr8UQa7KogEZQLbQZAW1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:29:3d:ab:56:c3:03:21:34:c0:5a:a8:28:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Dec 6 03:01:08 2025 GMT
Not After : Dec 7 03:01:08 2025 GMT
Subject: CN=96c2b69334badeb31b7ead68a128cce89e9bfbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:4d:ce:56:2e:89:b2:2d:2b:19:67:ae:05:
5c:ba:c5:3d:96:4c:eb:2a:df:60:57:73:63:29:cb:
1b:6a:75:fe:e0:78:27:02:f3:35:7b:a6:dc:d1:67:
ee:5d:af:4a:a2:e3:29:82:36:06:bd:10:80:59:af:
e7:ed:cb:c0:4a:d3:55:d7:cf:73:37:b1:fb:dd:31:
11:27:60:3d:97:f5:49:39:60:6a:6c:3f:13:fc:9a:
bb:ce:e5:22:87:08:55:20:88:54:08:e2:a7:db:9f:
40:d3:f1:a4:96:e9:6d:cf:eb:8b:a8:a6:c2:7a:1c:
e8:93:9b:39:a1:82:1d:4e:0f:c3:01:fc:47:c0:d5:
ca:ee:92:27:d1:4d:68:e6:b5:c6:e0:6a:df:6a:15:
6a:2e:87:6a:2d:de:9c:52:01:ad:31:ec:b2:c8:a3:
d4:ad:25:8b:e5:76:e2:c9:d1:62:66:25:02:8a:74:
8e:95:74:1a:ba:92:59:0f:da:90:23:ed:bb:0b:b5:
43:f8:93:70:fc:96:d6:40:37:83:ac:e7:89:f8:1f:
84:9c:fc:c9:99:80:36:dc:80:68:b0:ef:3a:b6:01:
dc:23:d6:5f:8f:a0:79:ba:e5:ef:86:2b:8b:4c:18:
ab:45:b7:e7:4d:3c:f0:af:31:26:5a:4b:23:74:af:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:B6:93:34:BA:DE:B3:1B:7E:AD:68:A1:28:CC:E8:9E:9B:FB:CE
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b2:0f:87:20:8a:b0:54:99:93:5d:79:f4:53:80:b1:e0:51:
8a:8d:4f:8f:46:08:51:fe:f4:27:89:15:3c:e8:4a:0c:88:78:
d0:63:1d:f8:bf:5f:66:b3:97:11:fd:4d:dd:1a:72:e3:e6:65:
fc:7d:93:ae:a2:4c:0d:e7:c5:97:5e:c5:94:0b:7f:2e:57:a0:
8b:a2:d4:11:37:4e:b6:2d:aa:da:c0:5f:24:6f:4a:66:9f:8f:
ee:f6:a6:fd:eb:c1:66:82:29:75:bd:ea:c5:b9:3e:e9:c4:16:
4f:75:9d:30:34:cf:b1:99:28:af:21:58:2e:a8:9e:37:4a:b7:
9b:e1:50:86:af:46:86:fc:c8:19:21:62:2e:93:d1:64:c9:53:
dc:ef:c4:ce:57:f8:7b:e9:23:e1:90:4c:dd:ed:bd:66:78:40:
3f:ed:7e:c8:23:41:73:af:59:1b:f7:f3:f4:18:ac:0e:20:ac:
7e:c7:95:39:dc:25:4a:79:a9:31:e5:e6:cf:db:f5:8c:c5:24:
41:05:d9:ae:73:9b:43:89:f4:44:06:a4:6d:45:4a:85:38:ac:
93:a1:49:9f:b5:4e:56:b9:c6:44:21:49:be:44:a9:d6:0b:c7:
79:16:14:18:d7:f8:9d:f0:e3:e9:7d:49:96:d2:a1:b4:63:63:
f0:fa:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:38 2025 by rpki-client