This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: Gvx9mXu4Za/CXcVBbpYq+Po9B6d7d0uf7mRB+oDVD30=
Subject key identifier: AA:DD:20:C4:04:DD:D3:05:41:AE:59:1E:23:20:F1:E6:9B:75:17:E8
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019B5D52D65E0C1212C0BB8BF3367378B7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 179B
Signing time: Sat 27 Dec 2025 01:01:08 +0000
Manifest this update: Sat 27 Dec 2025 01:01:08 +0000
Manifest next update: Sun 28 Dec 2025 01:01:08 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 1EVF+aA/wscKtEskwaMu91GPkikOQXwyElHI8sfbQu0=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5d:52:d6:5e:0c:12:12:c0:bb:8b:f3:36:73:78:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Dec 27 01:01:08 2025 GMT
Not After : Dec 28 01:01:08 2025 GMT
Subject: CN=aadd20c404ddd30541ae591e2320f1e69b7517e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:e1:ae:29:41:98:40:b9:a3:88:30:54:5b:
a4:78:14:19:aa:2f:85:26:c5:91:66:62:5e:59:ab:
ec:d6:12:1d:0a:2d:1e:a9:bf:72:8d:0d:c4:5a:fe:
eb:f3:e4:0c:fa:18:91:33:80:ea:d0:58:ce:43:27:
44:3c:2f:54:56:12:af:18:ad:b2:28:2b:92:4b:bd:
3f:39:f7:67:c6:f4:00:a2:64:9a:2e:92:ae:7e:4a:
87:0f:e7:70:43:ee:f4:db:08:23:ae:60:c6:eb:f4:
60:79:de:ee:b1:ad:0c:6c:5a:79:ee:5e:e2:3d:1c:
a4:41:74:56:a4:eb:5e:f2:f0:7f:a0:d8:bd:c9:d2:
e9:9f:46:d0:63:ab:6d:23:f9:9b:ab:06:3c:1e:b9:
bc:df:2b:d0:97:02:3f:aa:72:20:4d:4b:c1:f3:df:
98:54:d6:7b:be:67:d7:b0:92:5a:94:5c:cb:ac:28:
e4:30:02:6f:86:89:0e:89:a1:e6:7e:0d:24:15:09:
11:a6:5d:17:28:e1:88:c7:43:81:ad:7c:5b:15:e4:
fe:88:07:cf:40:58:2d:ac:7a:3b:c0:af:dd:87:a3:
34:d9:7d:49:3a:d2:2b:73:6f:b6:93:f1:26:35:c0:
f0:b2:74:5b:b6:ad:6c:f3:a6:1c:d2:37:41:1c:ec:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:20:C4:04:DD:D3:05:41:AE:59:1E:23:20:F1:E6:9B:75:17:E8
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:db:03:52:d4:4d:07:64:ab:89:88:95:cd:8c:77:83:88:fb:
e8:fe:51:4f:ad:07:e1:09:83:6e:44:df:29:4f:4a:15:09:1c:
e6:ba:ae:e6:4a:d4:f8:b6:7a:88:48:37:06:c1:2c:32:8e:42:
b8:8d:d4:60:fc:d5:df:1c:7e:ea:d0:0e:59:f6:d6:29:a6:28:
4b:ea:96:29:3e:19:99:35:c0:6e:bc:27:4b:ba:3d:1c:a1:78:
8c:bd:b2:51:2e:b5:0d:4d:42:ac:38:ba:75:c0:5f:2c:ec:00:
8f:82:87:c9:be:ba:ba:68:fe:d1:f7:b8:40:ef:e8:f5:29:1b:
9a:d2:73:46:66:ee:d1:c6:30:0a:f2:cb:f8:16:a5:d3:51:5f:
04:42:27:50:95:ec:ba:1d:e8:25:c4:73:c2:7f:07:2a:81:2e:
53:23:7f:e0:a5:56:09:ce:eb:42:f5:f9:a6:c2:8e:66:90:21:
24:3d:19:19:fc:c8:ca:9d:5e:58:9d:91:ff:93:79:99:21:5a:
c5:f9:5f:f2:ec:c1:79:c2:e9:05:85:67:76:d9:2b:ef:c2:5f:
b4:d8:3a:56:8a:f2:a6:c3:d6:ad:23:79:8f:c8:c1:6f:72:fd:
a9:9c:17:2a:5d:93:f3:c2:a3:6a:83:11:e1:e7:5e:78:ed:98:
a0:d9:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:10:06 2025 by rpki-client