This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File: rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier: ZB/zvpwoh2dXq5XShUCz54vJinARv6tgzy0xmGatLhk=
Subject key identifier: 39:55:F1:C5:7B:30:5F:C7:0C:64:36:B7:4A:41:C3:66:A3:C9:8B:D6
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 019AF2402AD4560653BB9257D4BD891FE7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number: 8E
Signing time: Sat 06 Dec 2025 06:01:22 +0000
Manifest this update: Sat 06 Dec 2025 06:01:22 +0000
Manifest next update: Sun 07 Dec 2025 06:01:22 +0000
Files and hashes: 1: C9L0K7yADXrU4jDJkBoJNOO2HpA.roa (hash: IZHkzjvb/corGaUQQ3F7DNaW6MeAZqyNKvnYJHFn6Fc=)
2: DE_i3YbUnbC2cLmxhuDjCehEIsc.roa (hash: KQTIz5aMB/Dipb9RY19esIa3DhRhV0i+ChiUWRW8mIs=)
3: e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa (hash: seoVMpKmPgqnMRcR+q+n2pzafdcrF6s2SXMZuzyjNMM=)
4: k2RsgnNATRdsZby8HZxnGhKnANs.roa (hash: 76bn38GnHIBhsZiOIgIibibZGV42Ok2NhN+2GBLOKFk=)
5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: P/tFcEsi0/VXLkdDxZhN0p+B8UzgTZAndzgmDJHXhpg=)
6: t7SXLRUmFb5t5I9r73TwbTY-5pE.roa (hash: BGWbcx/GvTTCMEoIE5yivXCW8dbDmm7s6miW+i/VEEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:2a:d4:56:06:53:bb:92:57:d4:bd:89:1f:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Dec 6 06:01:22 2025 GMT
Not After : Dec 7 06:01:22 2025 GMT
Subject: CN=3955f1c57b305fc70c6436b74a41c366a3c98bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:18:cd:d2:04:96:96:00:6a:49:a8:ab:c3:
d8:aa:21:a8:53:0f:40:81:40:d5:45:9e:e8:8e:99:
6d:59:ab:a2:8b:eb:f8:e9:97:1c:94:90:44:50:40:
a5:7f:d5:f7:0a:91:a0:5a:e4:0e:33:09:51:34:52:
50:81:75:03:4c:32:ff:b1:dc:ff:f9:bb:6b:e3:28:
65:6e:27:91:bf:81:32:72:fd:c9:40:5f:40:f4:56:
72:ce:ed:fc:b0:f7:12:8f:a5:76:b1:99:ee:09:59:
69:d5:67:2a:83:26:15:fd:92:55:f9:bd:4f:8a:5e:
e6:6c:0a:86:2a:8e:0c:a6:c0:6d:f8:df:7b:e0:3e:
e7:69:34:f3:c0:91:09:1c:9a:be:a1:b5:68:29:64:
81:dc:47:a2:49:31:a1:1f:c9:f7:ef:c8:04:0a:8c:
83:fc:43:02:ff:b6:a2:f0:fd:6d:fa:59:31:cb:ea:
fc:a0:e7:98:53:da:ee:d2:43:81:2e:fb:b7:85:2b:
b1:ef:74:67:fd:65:21:b0:15:19:b6:97:ed:41:93:
05:fc:ce:51:e0:b9:6f:0e:d4:c9:4d:d1:ed:75:f6:
39:86:12:34:e6:1a:de:b9:8f:91:4f:e6:4d:b4:d4:
c8:d8:27:e1:32:03:07:bc:dd:8d:de:ee:e1:9b:ef:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:F1:C5:7B:30:5F:C7:0C:64:36:B7:4A:41:C3:66:A3:C9:8B:D6
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:aa:d5:ca:27:83:33:80:9f:00:ff:22:99:6a:f8:1d:0c:3e:
63:54:11:b9:84:fa:f1:ff:31:e6:88:6f:4a:5b:7f:6f:28:0c:
3a:61:02:fb:70:af:c5:82:9d:e8:f4:b2:4c:b6:8a:ae:15:16:
b7:27:34:03:b5:d1:ea:82:88:64:91:9a:77:95:d1:82:13:c8:
75:b0:a8:b2:ac:18:fd:98:12:f4:45:83:9f:7f:a6:62:a6:52:
3c:55:a2:6c:e6:54:87:0e:ab:b0:74:6c:48:ed:27:22:a0:02:
32:e5:9e:e6:f0:c2:9c:fd:d0:eb:d7:1d:26:81:a4:57:ef:ae:
a2:d9:cf:58:b2:8b:f2:53:77:66:2f:b0:cd:7f:28:0b:55:40:
61:00:24:10:f9:49:da:bd:ce:e6:3f:b9:b6:d1:61:be:2b:c5:
1d:b3:07:86:9d:ed:c0:d8:6c:66:75:43:96:6c:ee:f8:31:58:
98:2f:ca:e3:75:6a:cd:6a:a7:cd:bd:10:3a:1d:20:eb:ab:5e:
88:a4:38:e1:6b:39:ad:48:bc:3d:19:b9:eb:8d:68:9e:d3:e9:
d2:e8:80:7b:54:98:24:c3:22:e9:dc:c5:4d:38:e8:3e:50:b2:
57:54:0c:19:b4:37:bf:88:07:86:9c:5f:23:56:76:d1:d3:fa:
2f:b2:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:11 2025 by rpki-client