This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
File: 1-N164S0qN_IarG-Btq9n1mF8oo4.mft (raw, json)
Hash identifier: S6d3QqSTGO1XiYKeekJFFcKGg7L41vIvSaeDINeEd8w=
Subject key identifier: 2C:73:1A:06:9F:13:78:79:56:4D:19:A7:8A:91:44:18:B6:8D:87:8B
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial: 019B522A75076EBEFB8EE07BDF27E2AD6987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
Manifest number: 0DC9
Signing time: Wed 24 Dec 2025 21:01:12 +0000
Manifest this update: Wed 24 Dec 2025 21:01:12 +0000
Manifest next update: Thu 25 Dec 2025 21:01:12 +0000
Files and hashes: 1: 1-N164S0qN_IarG-Btq9n1mF8oo4.crl (hash: mpAoeVqLHHxhqL/2B9d28KWZXMK6SOERCNxtXc9pSQQ=)
2: 6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa (hash: TuEDPLOZHzrwGKuGu5WkL6I1wv3+goqCPl2BGjRQIWw=)
3: C_PGOc03jGMSWjD8mAR0igEEyyQ.roa (hash: C4bHsZyQHmYG17oRmY2GwNsr94o4S9tEWANWUmFjfac=)
4: YS8fn_l74imFCNkcNVvUSOlCEEc.roa (hash: 8POCWM71NgjblaW0PGPjWaKSeiuviZ9/gLwwgo+p/hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:2a:75:07:6e:be:fb:8e:e0:7b:df:27:e2:ad:69:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Validity
Not Before: Dec 24 21:01:12 2025 GMT
Not After : Dec 25 21:01:12 2025 GMT
Subject: CN=2c731a069f137879564d19a78a914418b68d878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:3e:19:07:94:ed:54:ab:85:99:87:d7:00:
a0:1d:70:2e:db:70:08:07:e3:ee:f4:0e:49:7b:e2:
16:3d:fe:38:96:c0:f0:b8:94:a7:4a:6e:4c:8e:96:
b3:04:62:50:26:51:49:ba:90:d4:7a:d7:aa:61:48:
76:c6:96:07:e5:9c:02:3b:76:a4:d2:b7:d5:c5:88:
11:5e:a5:da:72:93:be:b9:c9:1e:ef:8a:65:e1:f6:
eb:9e:9f:9e:5f:21:83:44:49:1f:79:ce:09:8f:1a:
01:2c:6d:5c:f9:f3:b4:b8:a2:da:e1:76:76:6f:16:
bc:f0:84:d2:00:59:00:55:d3:9f:dc:68:e1:83:ac:
f2:0d:f0:b8:1b:ad:1e:72:ad:e6:0a:8c:67:20:f8:
03:3c:9a:cb:69:a2:b3:d6:01:a0:5e:e6:e2:56:0b:
a2:db:39:70:92:70:e1:4e:89:60:eb:2e:fd:1c:43:
2b:9f:82:f4:47:1d:c9:45:d9:b9:7c:e9:db:20:54:
d0:5e:41:65:ad:93:1b:2a:5b:5b:9d:37:f5:d3:85:
f0:90:8d:52:af:95:0d:ca:b6:02:cc:98:3f:03:08:
9d:e4:f0:82:30:61:56:a5:d3:3c:8d:cf:ee:74:e8:
b0:ed:4a:d5:14:f1:6c:ca:fb:11:b2:c7:73:eb:7c:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:1A:06:9F:13:78:79:56:4D:19:A7:8A:91:44:18:B6:8D:87:8B
X509v3 Authority Key Identifier:
keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a1:d4:83:04:1d:f0:06:8a:15:64:c6:1a:d0:6b:a3:92:8b:
ad:f9:4c:98:89:c4:58:c6:a7:94:2a:8e:2f:bd:76:ef:94:e3:
5c:80:24:d3:86:9d:36:7b:66:8a:8c:3d:31:a2:0a:c9:9d:49:
64:36:ce:2e:dc:2e:16:89:ee:45:8a:3c:33:6c:ef:85:55:41:
4a:09:9f:e5:03:16:a8:e5:13:c8:0e:f6:e7:27:fc:e9:28:65:
40:01:09:6f:ef:c3:5b:0a:eb:63:e0:4f:74:61:75:65:d2:da:
48:ae:2a:68:93:64:fd:9b:ad:6e:8f:64:c2:06:c6:a5:06:27:
83:a4:c9:0a:78:30:06:94:da:63:38:0f:95:06:90:c6:b2:7a:
2e:8d:aa:ce:da:50:cd:a8:06:11:cb:73:a5:00:0c:c7:b8:1c:
a7:02:8f:13:d8:06:9d:23:85:a8:5b:a4:fd:4b:d8:6c:74:af:
20:e2:ed:80:a7:d7:50:d0:2e:75:ed:fb:6c:76:00:9c:22:5f:
eb:52:fa:86:11:4e:6c:29:c1:f1:a3:86:fb:e7:80:f4:3a:c2:
73:67:c8:a1:33:18:6c:9d:38:ae:89:71:e8:9b:9e:4c:0d:64:
20:61:94:53:ef:64:a9:92:c9:77:fc:0c:68:e2:de:6e:0d:64:
a4:a4:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:35:28 2025 by rpki-client