This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: kbLIMQoBn1vt3Q47CuGth5tncsaFX5quurJhE1flqHQ=
Subject key identifier: 35:C0:82:C5:84:EF:0B:F6:C5:24:43:49:FC:17:C6:F9:8E:CE:4E:25
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019AF1D21BD1B153677C3877893A01659C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 04:01:10 +0000
Manifest this update: Sat 06 Dec 2025 04:01:10 +0000
Manifest next update: Sun 07 Dec 2025 04:01:10 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: AE2sf0XdKtYzvaxyCPjDMjW8jkgM12QnLd61NQC82SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:1b:d1:b1:53:67:7c:38:77:89:3a:01:65:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Dec 6 04:01:10 2025 GMT
Not After : Dec 7 04:01:10 2025 GMT
Subject: CN=35c082c584ef0bf6c5244349fc17c6f98ece4e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:5b:d2:0b:69:02:00:1b:d6:6b:55:7d:2e:
46:76:78:32:30:8b:cd:dd:7e:0a:d3:5d:88:5f:b1:
6c:c5:81:83:6d:bd:3d:07:9f:f7:20:42:b1:2b:7f:
41:00:4a:e5:5c:ca:e0:f4:9f:67:b2:1f:6e:ed:de:
8e:84:24:0b:94:60:de:f7:29:f9:36:e8:a0:eb:7e:
a2:f1:56:0a:b3:53:db:2a:dd:df:e3:a7:21:a0:52:
ea:23:28:cb:77:01:bb:d6:39:6f:1a:0d:32:b4:57:
53:b4:9a:a8:3f:e9:9e:09:5d:ea:44:a2:2c:38:b2:
08:0c:a4:59:59:19:fd:d1:72:f1:dc:97:79:f8:f6:
f8:00:ca:f0:0b:63:1e:d0:b3:bb:ce:1f:e1:fa:6f:
d3:ba:ad:af:f3:ee:16:30:a5:30:fa:3c:08:7d:75:
44:2b:05:e5:b9:0b:85:b8:65:9f:92:b4:8a:ca:ce:
dc:58:5a:39:85:81:11:bf:47:5c:48:26:62:1d:f3:
c2:51:0d:3e:79:5b:9c:d8:23:60:6c:73:d0:2e:25:
d7:fa:b8:31:44:86:ed:ba:f2:68:96:a4:a2:c5:42:
8b:43:41:63:33:23:74:e6:fd:6b:05:49:ee:92:0a:
94:d9:93:f7:8c:a1:e6:ed:a8:ac:5b:8d:f2:1b:77:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:82:C5:84:EF:0B:F6:C5:24:43:49:FC:17:C6:F9:8E:CE:4E:25
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:7e:11:af:4d:3a:5b:89:e6:b7:68:a6:03:07:d6:48:74:
eb:2d:d6:c5:00:38:d0:39:2a:5d:05:e4:38:19:ad:dd:17:3e:
2a:4c:b1:55:90:9a:5c:9e:16:c7:be:59:a2:28:df:9d:d2:10:
7e:20:66:9e:84:1f:3c:04:fa:35:59:f8:86:0a:fd:65:13:23:
0a:79:53:13:13:f7:11:8a:08:87:f8:79:4d:4a:a7:f2:15:07:
9f:37:44:76:d1:d5:9e:d2:59:16:c8:eb:3f:3f:c7:fe:65:f9:
94:44:a9:12:61:74:87:0f:1e:62:25:ef:4a:3c:48:b6:a6:3a:
54:97:c7:d5:cb:53:87:69:17:04:98:80:d9:28:b7:7c:6d:90:
12:3a:fa:60:09:d0:83:35:d9:c3:f6:35:cd:d2:2e:bc:57:34:
d9:1d:fb:66:51:63:f4:b5:88:f7:4e:79:0f:08:98:0f:9b:a6:
a5:ac:5e:3e:65:1a:33:6c:4e:0f:a1:f5:4a:15:83:6b:b9:54:
74:2e:71:eb:d5:de:2e:84:14:d2:a8:1b:bc:32:a4:6d:6c:d8:
ca:d3:69:a8:87:6c:06:c0:af:fb:84:ee:af:ef:43:96:9f:a3:
ed:11:2d:93:cc:bf:81:16:18:b6:fa:43:a2:f9:82:fe:2c:0a:
d7:5c:4c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0hvRsVNnfDh3iToBZZw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2
ZTc5M2MwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD
EygzNWMwODJjNTg0ZWYwYmY2YzUyNDQzNDlmYzE3YzZmOThlY2U0ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSZb0gtpAgAb1mtVfS5GdngyMIvN
3X4K012IX7FsxYGDbb09B5/3IEKxK39BAErlXMrg9J9nsh9u7d6OhCQLlGDe9yn5
Nuig636i8VYKs1PbKt3f46choFLqIyjLdwG71jlvGg0ytFdTtJqoP+meCV3qRKIs
OLIIDKRZWRn90XLx3Jd5+Pb4AMrwC2Me0LO7zh/h+m/Tuq2v8+4WMKUw+jwIfXVE
KwXluQuFuGWfkrSKys7cWFo5hYERv0dcSCZiHfPCUQ0+eVuc2CNgbHPQLiXX+rgx
RIbtuvJolqSixUKLQ0FjMyN05v1rBUnukgqU2ZP3jKHm7aisW43yG3f4xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXAgsWE7wv2xSRDSfwXxvmOzk4lMB8GA1UdIwQY
MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt
NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi
LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPa1+Ea9N
OluJ5rdopgMH1kh06y3WxQA40DkqXQXkOBmt3Rc+KkyxVZCaXJ4Wx75ZoijfndIQ
fiBmnoQfPAT6NVn4hgr9ZRMjCnlTExP3EYoIh/h5TUqn8hUHnzdEdtHVntJZFsjr
Pz/H/mX5lESpEmF0hw8eYiXvSjxItqY6VJfH1ctTh2kXBJiA2Si3fG2QEjr6YAnQ
gzXZw/Y1zdIuvFc02R37ZlFj9LWI9055DwiYD5umpaxePmUaM2xOD6H1ShWDa7lU
dC5x69XeLoQU0qgbvDKkbWzYytNpqIdsBsCv+4Tur+9Dlp+j7REtk8y/gRYYtvpD
ovmC/iwK11xMzg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:59 2025 by rpki-client