This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: pTppAMwf39crPmVz+wZPQFKsnaVlwz73IWsCDXuf59w=
Subject key identifier: 5D:44:5D:48:BA:21:09:E2:82:D7:DF:CA:6E:DD:04:DB:40:2F:5E:58
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019B36EA1F6B53B735C044AA13524AF14CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0ECD
Signing time: Fri 19 Dec 2025 14:01:11 +0000
Manifest this update: Fri 19 Dec 2025 14:01:11 +0000
Manifest next update: Sat 20 Dec 2025 14:01:11 +0000
Files and hashes: 1: HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa (hash: 3c9QMN5Lp2jJwJ34jy6AEZD7aoQeLurWKfcN2Uqhz/w=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: odtjEkbyU+PA0dNwgAPSPzSn+mlx6Kxv6dzx+m4Kozc=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:ea:1f:6b:53:b7:35:c0:44:aa:13:52:4a:f1:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Dec 19 14:01:11 2025 GMT
Not After : Dec 20 14:01:11 2025 GMT
Subject: CN=5d445d48ba2109e282d7dfca6edd04db402f5e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:4b:80:61:e6:c8:32:47:81:2e:04:e2:12:
af:d9:a8:ad:5d:fa:68:9e:b9:e7:17:5e:4e:b4:b1:
e5:35:b9:e2:70:f2:c2:82:51:03:00:05:93:28:af:
fa:61:ef:af:3b:d4:76:67:47:8b:c6:90:f6:0a:75:
21:8d:46:f1:86:af:25:90:29:49:50:d3:75:40:4f:
40:b1:28:f3:d1:75:43:0a:db:be:32:11:ae:b7:60:
c3:00:e6:a9:a0:3d:33:80:b2:1c:ff:49:b2:cf:61:
39:2a:23:2d:e8:4d:60:b4:b5:df:eb:bf:aa:57:96:
9c:85:ea:39:8d:a2:60:bf:65:36:29:86:1c:07:bc:
55:be:47:3b:00:4e:04:dd:41:f8:d9:d9:96:46:33:
be:2e:95:6e:cb:47:9b:9c:b5:67:f1:a9:cd:55:ab:
c1:9f:5f:78:18:41:80:93:6c:04:b7:87:f8:27:f7:
df:c9:4b:54:68:78:a6:ca:2f:87:c2:48:e0:e5:6b:
b5:aa:18:57:ff:eb:a0:f8:4f:0e:22:57:49:f9:25:
ae:bb:6e:a0:aa:b0:e7:6c:ef:74:27:81:a4:1d:ec:
da:73:03:ea:be:53:e6:f3:76:6b:90:f3:dc:e4:76:
d8:60:ca:2b:fc:3c:37:3f:c6:ba:5f:6b:e5:84:be:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:5D:48:BA:21:09:E2:82:D7:DF:CA:6E:DD:04:DB:40:2F:5E:58
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6b:5c:e2:df:66:91:d1:1b:be:1e:15:79:14:99:84:bc:7b:
64:7b:31:6f:f0:b5:ec:07:65:82:41:bf:d3:82:ab:1f:5f:c2:
ff:8c:56:82:4f:5e:0e:91:3c:a7:af:98:42:7f:04:02:49:7b:
cb:fd:77:8b:35:df:88:6c:c4:0c:be:09:36:d9:4c:8f:1b:c3:
80:54:97:82:8a:ba:bc:d1:10:e7:17:71:99:3c:8b:b8:6a:21:
c5:5c:80:f5:98:8c:dc:48:3c:4c:92:3d:07:68:d0:83:40:fe:
30:4e:0a:63:9c:3d:41:43:80:46:b5:fe:42:58:c3:06:c5:58:
55:ba:4f:b5:c3:1c:eb:5c:84:34:67:1e:1d:0a:e6:0b:5d:7f:
3e:a5:65:2e:5f:8c:e2:81:6a:f7:e7:83:85:d4:83:26:a5:4d:
4d:e1:c2:e7:cb:92:95:da:2d:16:83:6d:1c:dd:8d:0c:fd:ee:
72:36:9b:c8:91:c8:7a:23:53:9d:72:b4:fc:1d:41:6b:16:0f:
89:88:87:bb:2d:bb:4f:4e:aa:a5:c9:ef:f0:6c:4b:84:ce:44:
53:e0:08:12:ba:67:a5:81:1f:b9:ef:db:59:5a:08:06:2f:6b:
a0:30:ca:c1:58:6c:f1:46:60:87:65:38:8f:b3:37:87:57:c4:
59:23:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:19 2025 by rpki-client