This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: wedyrWvs/OMVL0NFDj1ZfYo8N30yhPWQp3BcrFNRjjc=
Subject key identifier: E6:47:76:A0:8B:E8:14:26:CC:6B:84:18:07:12:BF:36:65:B2:07:31
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019B424AA2DFD90AE21C0F95E18B7818E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 046E
Signing time: Sun 21 Dec 2025 19:02:26 +0000
Manifest this update: Sun 21 Dec 2025 19:02:26 +0000
Manifest next update: Mon 22 Dec 2025 19:02:26 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: VxOBwzKIEx2C3mtNMiVljRCDRtsQqRKUx4rSY9gFrPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:42:4a:a2:df:d9:0a:e2:1c:0f:95:e1:8b:78:18:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Dec 21 19:02:26 2025 GMT
Not After : Dec 22 19:02:26 2025 GMT
Subject: CN=e64776a08be81426cc6b84180712bf3665b20731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:1a:dc:20:83:7e:08:af:17:1d:15:ab:1c:
6a:02:1a:13:48:28:73:2e:f0:4b:1b:87:76:71:39:
6f:54:be:b5:9d:3e:86:f9:76:b6:cb:08:93:9e:b2:
59:95:e3:18:73:6b:d5:c2:6a:0d:d4:59:3f:ef:78:
1d:72:93:67:9f:66:b6:0c:62:d9:a0:2b:17:70:58:
39:83:b1:84:ac:70:ef:35:21:9b:2e:4f:c8:f8:e3:
d9:c3:d9:85:f4:3e:1e:aa:b8:f3:32:3c:3e:75:bc:
df:90:00:19:21:d7:79:99:f2:f0:5b:9e:3c:92:3b:
68:b6:06:86:6e:d0:24:82:1b:12:79:a6:4f:75:af:
92:c6:dc:76:0a:20:6e:80:ac:7e:80:bb:68:f4:82:
9e:52:45:aa:6a:93:25:54:92:41:46:65:61:33:0f:
27:05:0d:10:81:11:23:58:8c:b8:ae:ca:05:3a:26:
dc:7f:3e:11:00:1c:6e:25:c1:38:be:33:e5:ff:6a:
e1:79:0b:a5:52:9c:71:8e:5b:4b:ae:f6:ff:9e:c4:
9b:6d:3c:ac:fa:b4:b9:c8:c0:5e:c0:63:6f:30:a3:
f4:bc:a8:52:ad:8d:07:3b:94:ad:5d:09:eb:57:1c:
d9:4e:bf:ff:5c:3d:88:ac:21:d0:42:04:66:59:86:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:76:A0:8B:E8:14:26:CC:6B:84:18:07:12:BF:36:65:B2:07:31
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:de:d9:ff:c8:58:a4:fc:c2:00:3f:e1:50:73:8d:1d:1c:
03:21:49:2b:c7:2c:34:4c:18:03:13:c4:9e:5e:ce:81:43:a3:
58:e8:4a:2a:14:c8:c1:4e:47:8b:92:7c:f9:34:5e:81:bc:41:
4b:5c:cd:10:36:c7:54:0f:1e:1f:62:6b:69:11:3e:84:09:b2:
1f:8a:15:3e:cd:b0:a8:72:60:92:2a:80:67:58:15:61:57:1c:
a6:ef:d3:23:da:74:55:3a:22:33:d9:5c:4d:5b:84:8d:d2:eb:
2f:47:77:b5:54:18:55:ef:af:33:37:93:f9:08:11:e6:8b:bb:
43:38:3e:36:b5:8e:91:db:20:c5:6c:eb:bd:c8:58:7d:cb:56:
3a:e7:15:74:bc:02:05:90:3d:f4:d7:5f:4c:b4:e4:a0:d0:f2:
2c:1e:c8:7f:3a:b1:9b:3c:6c:42:5a:49:c0:4c:a8:3c:17:e8:
8f:b2:1c:60:a3:6e:90:c8:56:db:4d:12:4a:e1:3e:d2:3d:4c:
e9:2a:19:f6:f8:36:6f:2d:df:9d:c3:d5:fd:08:1c:10:16:07:
36:59:52:19:49:a2:03:50:80:9e:8f:90:4c:b5:1f:65:5c:8a:
61:2c:c4:24:1a:54:8a:71:9f:fc:79:74:6e:cf:f8:0b:0d:d4:
b7:02:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:13:04 2025 by rpki-client