This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: Dm3AgH4MHvSkMzZHj++Mx+pQOeR6UpCiMdn32rOcHt4=
Subject key identifier: AE:DC:6C:8A:1E:1A:1A:2D:AD:B1:32:98:9A:D0:09:23:06:77:74:D4
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019B2EF9125B48CE71A5E24893442141ED80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1492
Signing time: Thu 18 Dec 2025 01:00:33 +0000
Manifest this update: Thu 18 Dec 2025 01:00:33 +0000
Manifest next update: Fri 19 Dec 2025 01:00:33 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: tgwA+H+Sfm2aEZ3VMMU1BvnR+OpZNj67U7dqZS4vaZk=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:f9:12:5b:48:ce:71:a5:e2:48:93:44:21:41:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Dec 18 01:00:33 2025 GMT
Not After : Dec 19 01:00:33 2025 GMT
Subject: CN=aedc6c8a1e1a1a2dadb132989ad00923067774d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:d9:ef:15:97:f2:4a:4b:49:5c:6a:26:70:
69:af:cd:f5:fc:90:66:d5:7b:98:34:61:c9:88:c1:
eb:60:eb:7b:d7:21:f1:4e:4e:ee:b8:6b:90:03:6a:
b0:93:07:c2:cf:3b:61:9d:a3:0e:b9:93:00:1d:33:
d6:67:9b:b4:97:62:dc:68:f7:41:78:ef:c2:ee:6b:
a7:d6:06:49:45:64:9b:89:bb:ce:8f:da:de:94:48:
60:35:eb:2c:dc:60:8e:a5:84:10:5a:91:0c:03:7f:
a3:26:70:b1:3f:a7:ab:cb:31:b6:97:83:ee:bb:42:
c6:6c:a0:44:4b:9b:f3:64:04:57:77:58:d4:2c:72:
dd:63:8d:53:22:17:ef:0f:0c:5e:5e:b4:df:06:43:
38:49:d4:be:10:43:0c:36:3a:55:c3:e6:26:ea:05:
f2:6e:fa:51:2a:1a:90:80:d3:77:29:48:64:68:0a:
bb:73:9a:e6:f4:0d:14:c6:1c:11:61:2c:48:0d:be:
f4:a1:4d:38:51:c3:27:fb:78:f1:00:f7:aa:a0:39:
4e:48:ad:74:39:8c:5f:83:1d:a7:3d:bb:fa:aa:54:
42:d1:1c:41:3f:46:93:b0:89:0e:7e:c5:94:83:b9:
7f:82:6f:46:f2:a3:4d:4b:67:38:96:cd:82:7d:09:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:6C:8A:1E:1A:1A:2D:AD:B1:32:98:9A:D0:09:23:06:77:74:D4
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:ee:4b:fc:a7:33:6c:77:7f:b4:62:af:88:93:16:2e:2c:
92:6e:bf:ad:27:2e:6e:0f:57:cf:36:71:a5:97:e7:3a:c2:77:
8f:b8:99:93:76:3e:f3:86:18:75:4b:19:3d:d2:6a:02:64:78:
eb:a3:76:00:38:b6:e3:e6:a2:0c:70:81:8f:d2:34:3f:6d:fc:
19:29:ac:a9:0e:5f:8e:33:f8:48:40:89:f9:fb:70:3d:97:58:
dd:af:48:8c:6c:ef:86:db:ce:b0:cc:d7:ac:fe:19:1c:c7:d7:
e2:db:6c:3e:b3:0b:5a:7a:5f:37:e5:0c:18:bc:20:b8:08:12:
8c:20:37:57:1b:d7:4e:c7:a3:62:fa:7c:e3:b7:8d:5b:81:0f:
e3:48:11:ad:28:52:b4:e0:26:39:52:cb:21:63:7b:d7:6f:40:
aa:7b:c3:e4:08:51:e3:5b:bb:0b:93:b8:91:10:fe:08:f8:d9:
fd:f4:61:55:90:c3:0c:02:75:13:48:24:01:c2:f5:f4:0f:43:
d0:94:2c:dd:7b:72:e2:19:c9:f2:9d:8c:f2:4e:cb:d9:a2:f5:
16:bf:93:7b:30:64:2e:d3:c2:e4:00:99:87:99:a5:3d:ba:65:
f3:13:60:df:92:f7:c6:39:1f:1e:b6:da:de:93:14:f9:a6:cb:
95:15:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:22:25 2025 by rpki-client