This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: DtsyoM7RDX97hD6DAnNzSLRAP5MVZwGLGgur14Z67iQ=
Subject key identifier: 0C:E5:5C:C1:04:11:61:37:96:7D:50:1B:28:31:C8:F8:3F:12:4A:32
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019B3C7E89C6CA31FCA47523F955BB09AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0F73
Signing time: Sat 20 Dec 2025 16:01:24 +0000
Manifest this update: Sat 20 Dec 2025 16:01:24 +0000
Manifest next update: Sun 21 Dec 2025 16:01:24 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: /FGw7oez694ifcRaSVwl80j1feI5uMjdG1EeG+Qqhz8=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7e:89:c6:ca:31:fc:a4:75:23:f9:55:bb:09:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Dec 20 16:01:24 2025 GMT
Not After : Dec 21 16:01:24 2025 GMT
Subject: CN=0ce55cc104116137967d501b2831c8f83f124a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:21:05:d8:94:08:97:17:5f:e0:4b:c3:d0:
cd:12:43:9d:24:3a:e4:9e:c4:ad:69:8c:1f:d3:11:
66:35:0e:58:25:9b:13:82:0e:17:e8:19:48:0d:90:
eb:8d:41:2a:b6:ba:23:79:58:29:d9:04:21:7e:ff:
f9:e8:aa:86:4b:fa:cb:9a:7f:b6:2e:f2:79:88:b4:
73:29:d8:23:d0:44:bb:40:42:08:80:92:73:0b:bb:
27:ab:0d:d0:46:53:cd:6c:8d:8f:f5:22:4c:9c:e9:
30:f5:50:dc:8e:d5:7e:fb:f5:85:92:3b:9a:57:83:
63:33:13:32:c6:6e:4a:94:76:96:02:cc:82:e3:87:
90:d3:82:91:c5:05:65:52:40:a0:38:91:8a:ab:f8:
bc:80:7f:5d:c8:b4:0f:f0:1a:4e:91:95:1c:5e:3a:
e5:29:c4:bb:64:21:86:3e:fe:68:c6:9b:80:69:a2:
db:e8:58:66:93:62:57:dd:37:4e:ba:e7:a9:d5:9e:
36:4b:42:83:b6:79:05:9e:31:6e:43:72:2c:47:f5:
3e:af:84:46:28:13:2e:91:db:01:72:d9:0c:43:d8:
36:b1:23:df:e2:41:80:23:06:92:5b:6e:b2:7f:0f:
01:26:4a:c2:f4:aa:bd:3d:d0:49:ec:72:7e:6a:91:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:5C:C1:04:11:61:37:96:7D:50:1B:28:31:C8:F8:3F:12:4A:32
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:56:c1:e2:09:f4:b6:47:fd:a3:cc:9d:72:5c:08:4c:52:9f:
eb:61:87:d2:0e:75:4f:9c:c4:dc:51:5c:1a:39:7d:3c:18:57:
27:e3:33:c1:2d:0f:0a:17:46:12:74:c4:2d:49:70:84:36:a2:
09:9c:93:ff:c2:90:53:1b:56:5f:14:11:ad:b7:8f:79:e0:bf:
cb:c5:83:43:d6:83:47:0d:c8:44:95:1f:7b:56:ad:a3:4a:7e:
67:1d:6a:e6:62:f3:05:69:8e:b4:94:b5:e8:45:18:a4:34:e1:
0f:fb:e7:56:04:c7:64:7f:05:28:9c:f3:59:b2:fa:6f:22:58:
ca:84:29:bd:e0:41:55:45:9b:7d:09:40:7f:17:54:20:47:58:
44:16:d5:8b:d0:5e:e6:ed:6b:29:bd:0b:0a:56:33:d6:b8:44:
ea:93:50:d1:f4:b6:a6:20:53:9a:8f:be:b1:ee:74:d5:d2:63:
8a:77:de:97:1a:4e:0b:27:b6:a5:2e:bb:32:d9:42:71:f9:b7:
bd:0a:9b:3f:15:37:d9:d0:28:67:e9:cd:c1:c7:62:26:a5:21:
07:a6:27:ee:47:1d:4c:e4:6a:5c:a1:97:b9:4d:47:fa:71:c1:
fe:d3:06:74:4b:64:98:40:00:75:ec:19:4d:f8:d8:9b:cc:32:
a0:3c:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:41:47 2025 by rpki-client