This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: b0bGvmAF+yR+uZHh/jsMYigQPH3eZX5jLX5EcNnMXuI=
Subject key identifier: B0:3D:96:56:25:C8:94:17:72:3E:5C:5C:A7:0B:E7:09:2C:1C:75:6D
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019AF0F5ED5B22AA876E2FD1D1F1AA6FDCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0AA9
Signing time: Sat 06 Dec 2025 00:00:39 +0000
Manifest this update: Sat 06 Dec 2025 00:00:39 +0000
Manifest next update: Sun 07 Dec 2025 00:00:39 +0000
Files and hashes: 1: RY9h-rx1ZstpJjozDETgohyO7Lk.roa (hash: 0CX3AZGe8LLC0uBgiztbMwk7WnvOC9Yq5FJHH6gri8w=)
2: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (hash: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: 990fbzROgVtoqaXnN4G7b8iLT4EV4WEeo/A9tVaeDRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:f5:ed:5b:22:aa:87:6e:2f:d1:d1:f1:aa:6f:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Dec 6 00:00:39 2025 GMT
Not After : Dec 7 00:00:39 2025 GMT
Subject: CN=b03d965625c89417723e5c5ca70be7092c1c756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:a2:e7:e4:dd:62:f3:3f:21:22:d2:af:a7:
80:55:75:26:4e:46:96:cf:7b:2c:47:1a:6f:aa:66:
13:4b:ee:a2:c3:73:0b:cc:ed:99:d6:99:f3:1c:e2:
11:24:ef:8e:37:44:36:35:3d:de:86:38:ad:3b:38:
f8:a9:a6:26:82:78:8e:6b:49:26:66:37:b5:51:75:
0c:c9:f0:86:b0:82:c9:d8:47:f8:c0:5a:7d:a7:e2:
f1:83:7b:99:ea:8f:d8:f0:c8:f9:41:64:12:bb:d2:
36:7f:f8:17:44:12:bd:51:db:9b:84:54:7c:04:40:
3e:aa:37:d8:68:8d:d4:0e:09:97:8f:82:64:db:aa:
65:ca:2e:b7:b5:da:22:68:1e:c4:b2:54:26:82:df:
cd:d9:26:1d:a7:01:c9:45:ab:52:be:96:55:7d:cf:
e9:a6:06:dd:b1:d1:ee:a7:3d:92:7e:26:c6:17:fe:
82:e7:9d:c0:97:e9:f7:9a:dc:17:97:d7:ae:70:fe:
42:20:9d:ac:b7:72:0c:e8:58:3a:b8:79:e9:0e:4d:
b8:46:1d:c2:3e:f6:a6:be:33:1a:50:2f:3f:8a:b9:
4e:f4:b6:f5:18:23:9c:73:b4:c8:d4:03:a1:fb:3d:
cc:24:75:4d:68:6d:16:91:94:54:f5:c3:4e:69:aa:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:96:56:25:C8:94:17:72:3E:5C:5C:A7:0B:E7:09:2C:1C:75:6D
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:43:d4:5e:81:4e:9c:d2:ea:78:2f:02:0e:f3:f0:db:72:72:
58:c0:34:d0:af:46:8b:8e:f6:16:bf:38:c7:ea:20:bd:e6:4f:
c9:3e:6f:8d:b0:24:ce:83:00:6f:c4:08:93:2c:c3:b1:51:bb:
18:69:85:ec:43:96:a6:95:4d:72:07:fb:9c:c5:a7:a9:18:5d:
7f:37:9c:3c:ee:26:40:47:b3:cc:e2:64:ef:f7:c5:85:03:3f:
62:a8:c6:7c:f2:d1:c5:1f:1b:9f:3c:cb:a6:08:68:76:a3:07:
e3:1a:2f:ab:8e:9a:fa:25:82:f9:75:1a:ab:d9:f4:ea:38:3c:
05:87:0a:3d:fc:03:d5:a6:d4:68:30:11:b9:f4:16:4a:ec:04:
72:06:bb:21:4f:31:c1:d1:d1:1c:50:e5:29:cd:6f:c5:de:2c:
61:44:87:4c:01:83:80:94:26:ac:e0:db:23:bd:63:8e:e4:98:
ba:a6:ad:6b:fd:d2:26:c6:ea:6a:34:77:3b:a3:6b:55:f9:d1:
18:91:01:c9:cd:d3:4c:3f:b1:8c:cc:79:8a:1d:1c:f9:e2:69:
99:24:ab:67:11:f1:98:a6:4f:18:b7:97:c3:cf:60:73:6c:d5:
ff:71:94:fd:47:62:be:30:c1:45:6b:ba:ca:bb:db:c8:e0:fb:
76:f2:1a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrw9e1bIqqHbi/R0fGqb9zFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD
EyhiMDNkOTY1NjI1Yzg5NDE3NzIzZTVjNWNhNzBiZTcwOTJjMWM3NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ai5+TdYvM/ISLSr6eAVXUmTkaW
z3ssRxpvqmYTS+6iw3MLzO2Z1pnzHOIRJO+ON0Q2NT3ehjitOzj4qaYmgniOa0km
Zje1UXUMyfCGsILJ2Ef4wFp9p+Lxg3uZ6o/Y8Mj5QWQSu9I2f/gXRBK9UdubhFR8
BEA+qjfYaI3UDgmXj4Jk26plyi63tdoiaB7EslQmgt/N2SYdpwHJRatSvpZVfc/p
pgbdsdHupz2SfibGF/6C553Al+n3mtwXl9eucP5CIJ2st3IM6Fg6uHnpDk24Rh3C
PvamvjMaUC8/irlO9Lb1GCOcc7TI1AOh+z3MJHVNaG0WkZRU9cNOaaq2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA9llYlyJQXcj5cXKcL5wksHHVtMB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkPUXoFO
nNLqeC8CDvPw23JyWMA00K9Gi472Fr84x+ogveZPyT5vjbAkzoMAb8QIkyzDsVG7
GGmF7EOWppVNcgf7nMWnqRhdfzecPO4mQEezzOJk7/fFhQM/YqjGfPLRxR8bnzzL
pghodqMH4xovq46a+iWC+XUaq9n06jg8BYcKPfwD1abUaDARufQWSuwEcga7IU8x
wdHRHFDlKc1vxd4sYUSHTAGDgJQmrODbI71jjuSYuqata/3SJsbqajR3O6NrVfnR
GJEByc3TTD+xjMx5ih0c+eJpmSSrZxHxmKZPGLeXw89gc2zV/3GU/UdivjDBRWu6
yrvbyOD7dvIaRw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:05 2025 by rpki-client