This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: Ns31PZuttW0yNfj0HdqtODFPnzGgcC+hyMpYKtACnR0=
Subject key identifier: F9:6C:A4:87:44:ED:7D:F3:E1:99:8D:B3:66:D6:D3:78:5B:01:FA:27
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019B3F4870B6B4D59974B89ED2FCBF58477F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 05:01:10 +0000
Manifest this update: Sun 21 Dec 2025 05:01:10 +0000
Manifest next update: Mon 22 Dec 2025 05:01:10 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: /2WrmIpE8yTc6oFhXruHsKIsxeBOjEfzYyggS15RX8Q=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:48:70:b6:b4:d5:99:74:b8:9e:d2:fc:bf:58:47:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Dec 21 05:01:10 2025 GMT
Not After : Dec 22 05:01:10 2025 GMT
Subject: CN=f96ca48744ed7df3e1998db366d6d3785b01fa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:76:c9:3d:d6:b8:92:60:25:79:d0:cf:4e:
d1:92:0d:c1:ab:0d:7b:0a:aa:fa:3a:77:36:85:6c:
33:25:5a:a0:f2:dc:2b:ba:54:da:87:3f:02:cb:df:
01:9c:42:89:09:9f:7c:1a:e3:ed:6e:7e:a7:1d:08:
4c:43:e6:5e:b0:f3:a8:f9:ff:e8:d9:7a:30:bb:c7:
fd:f4:d1:bd:81:98:bd:d6:e5:7d:ea:1b:18:8c:26:
9c:c8:60:f0:99:3d:99:91:26:30:e0:85:1b:05:e6:
ef:6c:ec:c4:ec:6d:61:12:37:67:e7:9a:72:55:b4:
ae:ce:3d:98:38:bb:d3:dc:f0:54:e3:5c:b0:b3:34:
df:29:92:3b:1d:34:41:27:1a:db:82:38:de:97:31:
bc:18:9f:37:9c:c4:04:8a:b1:89:74:d5:ef:39:d7:
79:d6:dc:bb:a5:24:6d:41:be:cc:a5:4f:c9:97:32:
b4:cd:74:16:b9:27:cd:cc:c8:b0:11:4d:37:14:20:
e9:93:7d:90:02:97:2e:69:23:14:1b:69:64:08:bc:
c1:87:2b:87:81:5c:6d:f9:fc:33:40:6c:f2:c0:24:
74:6e:1e:de:a4:d7:6a:01:6c:b7:5e:5b:07:49:75:
93:5f:8d:6d:7f:90:a5:81:32:25:33:32:95:3f:72:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:A4:87:44:ED:7D:F3:E1:99:8D:B3:66:D6:D3:78:5B:01:FA:27
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:26:36:6d:28:92:2d:bc:62:84:46:0c:8d:2a:01:87:ae:6e:
16:44:36:e6:f2:f5:cb:a0:02:da:75:e1:94:b3:45:26:93:ef:
37:4d:c6:70:d7:68:7b:3d:1e:6d:34:6c:81:78:c5:42:b0:87:
38:ff:d4:7b:22:15:4e:50:f4:0b:b6:80:13:56:15:0b:f4:f2:
d8:46:df:8d:28:2c:44:cc:de:8a:a1:70:d8:0b:74:08:f7:23:
b9:d2:d5:a8:8c:b6:60:42:0c:fe:ce:e8:13:35:f8:6e:f1:5d:
99:6c:4b:a9:05:b2:90:ec:6c:95:be:90:ab:c1:21:c3:b4:82:
09:02:36:90:53:22:37:af:ce:cc:83:77:69:0b:a2:f1:d0:08:
00:a8:e9:0b:f3:6c:85:b5:3e:49:6b:e2:9e:db:0e:81:9c:e3:
e1:b8:03:33:48:eb:68:75:9e:32:e2:31:e4:ca:f1:d5:bf:67:
c6:e4:0d:67:91:c3:96:ff:57:19:24:cc:96:1e:87:7d:b8:98:
a8:71:0d:81:d0:6c:ac:6d:d4:c0:32:75:63:6d:3c:43:0a:2d:
24:e3:59:7a:ab:1a:60:55:eb:d0:44:59:61:6c:55:8c:d2:4c:
d1:71:45:96:d7:7b:d5:36:ae:1c:1f:b6:1e:9d:e1:aa:fc:85:
4a:30:36:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/SHC2tNWZdLie0vy/WEd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjUxMjIxMDUwMTEwWhcNMjUxMjIyMDUwMTEwWjAzMTEwLwYDVQQD
EyhmOTZjYTQ4NzQ0ZWQ3ZGYzZTE5OThkYjM2NmQ2ZDM3ODViMDFmYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeV2yT3WuJJgJXnQz07Rkg3Bqw17
Cqr6Onc2hWwzJVqg8twrulTahz8Cy98BnEKJCZ98GuPtbn6nHQhMQ+ZesPOo+f/o
2Xowu8f99NG9gZi91uV96hsYjCacyGDwmT2ZkSYw4IUbBebvbOzE7G1hEjdn55py
VbSuzj2YOLvT3PBU41ywszTfKZI7HTRBJxrbgjjelzG8GJ83nMQEirGJdNXvOdd5
1ty7pSRtQb7MpU/JlzK0zXQWuSfNzMiwEU03FCDpk32QApcuaSMUG2lkCLzBhyuH
gVxt+fwzQGzywCR0bh7epNdqAWy3XlsHSXWTX41tf5ClgTIlMzKVP3LEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlspIdE7X3z4ZmNs2bW03hbAfonMB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiY2bSiS
LbxihEYMjSoBh65uFkQ25vL1y6AC2nXhlLNFJpPvN03GcNdoez0ebTRsgXjFQrCH
OP/UeyIVTlD0C7aAE1YVC/Ty2EbfjSgsRMzeiqFw2At0CPcjudLVqIy2YEIM/s7o
EzX4bvFdmWxLqQWykOxslb6Qq8Ehw7SCCQI2kFMiN6/OzIN3aQui8dAIAKjpC/Ns
hbU+SWvintsOgZzj4bgDM0jraHWeMuIx5Mrx1b9nxuQNZ5HDlv9XGSTMlh6HfbiY
qHENgdBsrG3UwDJ1Y208QwotJONZeqsaYFXr0ERZYWxVjNJM0XFFltd71TauHB+2
Hp3hqvyFSjA2qg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:22:21 2025 by rpki-client