This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: OQRDb4N0n095y9uOei17E5lD5QyUqOFcueXVdVgXNo0=
Subject key identifier: BA:26:B0:75:3D:1D:15:9D:B0:B3:4B:43:AC:38:9F:06:98:BC:AC:79
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 019AF209807733E2B59C0C7320BE93C46917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 05:01:40 +0000
Manifest this update: Sat 06 Dec 2025 05:01:40 +0000
Manifest next update: Sun 07 Dec 2025 05:01:40 +0000
Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=)
2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=)
3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=)
4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: pKo2uAN2XZIPxsnN43Lp8ZnKw9Ge1VPmeLS9NDK5FcQ=)
6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:80:77:33:e2:b5:9c:0c:73:20:be:93:c4:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Dec 6 05:01:40 2025 GMT
Not After : Dec 7 05:01:40 2025 GMT
Subject: CN=ba26b0753d1d159db0b34b43ac389f0698bcac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:7c:92:95:42:40:65:94:3f:fd:82:0b:db:
69:7a:ca:7c:07:46:f5:04:a8:25:0e:22:48:5b:0f:
c8:6a:d4:47:06:12:d6:09:a0:41:30:1b:b2:7d:af:
57:93:32:39:eb:b2:5a:18:af:23:fc:5d:aa:66:57:
ca:c0:da:5f:ab:f4:e9:50:8a:d1:eb:08:39:92:83:
7f:fd:f1:cf:4d:43:d7:78:72:8e:c7:8e:b0:89:5d:
e8:1f:67:b1:a4:c2:ad:57:a8:e7:ad:3c:15:60:37:
02:7f:ba:7c:14:4d:cf:10:66:e7:b3:c9:30:2a:81:
71:32:d8:c6:a3:4a:72:f6:f6:c1:85:19:9b:71:c7:
46:68:cc:e6:2c:be:9a:2b:a7:29:bc:d9:e6:d1:d6:
25:b9:28:2b:0d:27:88:74:e1:9a:d9:2f:38:50:8a:
8c:2b:87:a1:a5:50:60:26:9d:74:7b:5f:f6:6f:39:
d2:c8:77:ff:0d:55:bd:b6:ca:8a:d2:1b:b6:9d:52:
0b:b0:5d:97:47:5e:41:b0:78:d8:cb:88:1c:b4:ea:
3d:5d:96:3a:d7:11:8e:f5:12:a6:fb:a3:ca:cc:57:
85:04:5a:81:a3:a6:f2:c6:6f:84:2d:00:f1:fd:68:
1e:4a:d2:af:2e:ea:eb:29:e1:9b:0e:63:8e:6f:eb:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:B0:75:3D:1D:15:9D:B0:B3:4B:43:AC:38:9F:06:98:BC:AC:79
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:60:16:3a:9e:2b:e6:13:f1:a1:d0:16:25:68:54:8f:14:
45:d5:22:20:90:39:d4:42:84:dd:87:57:83:29:ab:fb:03:fc:
b7:c6:0a:77:21:97:89:51:e6:d2:18:a6:a6:67:d5:06:44:da:
47:4b:8e:9b:22:99:b6:4f:57:ad:c3:9d:f2:bf:bc:99:74:67:
81:aa:07:db:6d:c7:62:f0:62:43:d8:6e:f4:08:fe:72:0c:2c:
eb:33:39:7d:78:fd:0e:76:62:8d:c5:e7:63:8a:a2:83:48:67:
f3:52:0f:4c:36:b4:9d:60:9a:d0:cd:8d:1f:62:aa:22:f8:16:
be:40:41:07:c1:28:a6:c2:62:0c:1f:5f:1f:d3:ae:1f:c1:d8:
6d:8f:b6:e6:3e:f7:60:47:1e:3c:15:31:80:7c:82:2e:d3:ce:
a3:f4:31:9c:9d:4f:a1:9d:78:5e:70:11:df:7b:4b:5a:25:6b:
0c:dd:dc:d8:a1:8a:a4:12:86:43:d4:32:4d:e9:34:fe:08:94:
69:c2:cb:d5:0d:05:ed:07:d1:67:64:53:2d:91:8c:7c:90:63:
eb:e2:d2:e0:f3:e4:ee:41:0a:48:47:0b:e4:7c:d8:67:27:4e:
ec:1c:38:f3:fb:4b:52:af:27:12:26:40:e0:4c:9c:f7:67:e1:
30:3a:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:05:32 2025 by rpki-client