This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: CyvnvuigLm26bBwdrIvvfyyzPNkgjCNZxkav98nSZws=
Subject key identifier: 2B:9A:9F:15:E1:E3:86:40:82:12:E9:0D:20:A3:5D:4C:56:05:D6:D5
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019B3CB4C407874B1999381E8CFF725F7B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 178E
Signing time: Sat 20 Dec 2025 17:00:38 +0000
Manifest this update: Sat 20 Dec 2025 17:00:38 +0000
Manifest next update: Sun 21 Dec 2025 17:00:38 +0000
Files and hashes: 1: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (hash: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=)
2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: WnhPp4OL0bNPPdAyBPrY6vwl1vKamMN9UQkwJvO0Omw=)
3: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (hash: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=)
4: hfyAz_QYTue5Wbe5vJxSavU_6HY.roa (hash: 4N/5nYpUdCpyKpn/U/R7SrWZ90U5qc3XnEimDy5XhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b4:c4:07:87:4b:19:99:38:1e:8c:ff:72:5f:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Dec 20 17:00:38 2025 GMT
Not After : Dec 21 17:00:38 2025 GMT
Subject: CN=2b9a9f15e1e386408212e90d20a35d4c5605d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:0a:b9:72:52:ed:cc:d7:98:94:f0:98:a1:
29:03:81:1c:5e:cb:c2:29:e5:76:15:63:b3:67:11:
dd:8e:03:93:4b:0c:d5:cd:3a:3d:d7:a8:de:56:88:
84:f6:b7:61:93:76:33:f2:d6:b7:02:c1:33:a1:d2:
49:19:a2:06:c5:e1:65:20:db:3d:33:f0:46:33:3f:
bb:f2:84:cf:88:bc:39:2d:48:3d:92:10:d0:76:c3:
fa:59:fc:7d:02:8b:3b:1c:a7:0b:6f:65:9d:f0:e9:
93:26:71:9d:ea:c2:e2:ad:20:f4:49:71:32:54:10:
89:3f:74:84:40:ff:7b:08:03:46:93:7a:20:e6:f1:
6f:ca:ee:7f:a6:92:d6:25:47:ce:4a:7c:3a:e1:9d:
81:80:8d:1d:a8:bf:f0:d7:fe:46:76:09:c5:a9:c4:
dc:46:16:a1:ef:07:48:dd:3f:36:00:4e:fe:68:1c:
28:bf:de:7b:b5:f4:43:d1:8a:1c:45:8e:0a:d1:1b:
83:8a:25:d4:01:32:94:4d:f9:9b:e9:e2:91:05:9e:
bf:3b:30:d4:38:5e:12:86:6f:d1:93:ad:89:96:b1:
57:88:5d:85:e4:f8:67:4a:cf:dd:68:fd:01:89:38:
dd:5f:22:75:6b:b0:4c:1e:26:a4:77:13:a5:08:0e:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9A:9F:15:E1:E3:86:40:82:12:E9:0D:20:A3:5D:4C:56:05:D6:D5
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6f:03:fc:37:6b:72:7a:63:da:13:da:b8:25:e2:5e:c3:99:
07:24:36:04:15:c3:1c:cc:16:ab:04:2d:6a:3b:cc:25:e4:d0:
cd:b7:d1:79:f9:2b:a8:ac:50:5a:f4:62:9a:dd:cc:4e:df:9d:
50:7a:ca:37:9e:44:65:13:0c:54:f9:a2:2c:98:dc:7f:64:11:
78:19:fb:cb:f3:a9:60:82:b9:82:77:09:37:fe:d6:b6:e1:3f:
9a:20:53:4d:7f:05:3d:b0:e5:39:b0:05:d1:f1:ab:55:bc:ce:
d3:33:86:f3:43:89:4b:13:2e:e3:04:70:45:23:71:b4:b1:1e:
29:68:54:cb:a4:66:24:a0:c8:31:5d:4c:ec:eb:52:c1:65:06:
b9:cf:65:e9:4b:94:8c:51:38:73:7a:e7:ba:ee:92:59:96:a5:
34:7f:e7:06:7d:8d:0f:2d:e4:87:22:be:3a:ab:e3:fd:de:6e:
1f:a2:44:e0:29:b5:f5:bf:03:e5:d8:07:d9:24:a3:f1:9c:39:
b7:d5:46:bd:62:7c:83:df:c6:8d:4f:8a:e5:36:58:1b:08:af:
a9:63:2d:75:a6:87:f0:b4:5d:05:20:92:20:d2:56:51:41:4e:
19:73:04:48:0f:54:eb:10:44:a0:43:7c:71:36:48:65:3d:8b:
f9:89:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:20:44 2025 by rpki-client