This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: cIYT4FfOx8SvelYFzYmqtv4MB2NZWTDsZp/31aHv1WU=
Subject key identifier: 13:2A:99:72:AD:CD:ED:6F:75:F5:A9:D1:34:38:84:0F:2F:4A:21:C9
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019B5CE4F70DB05CC25B5DA2E3BD0AF5D2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 17C4
Signing time: Fri 26 Dec 2025 23:01:07 +0000
Manifest this update: Fri 26 Dec 2025 23:01:07 +0000
Manifest next update: Sat 27 Dec 2025 23:01:07 +0000
Files and hashes: 1: 5TVXDvHrUo9nOaH68rT-eGLsNRU.roa (hash: jeXKydzH35nqP1LdnFoXR93OfanPjGvmI9nXhjmWVwQ=)
2: a2xX_3muv_KdeXmbIcyCSQsy7ug.roa (hash: 7VcYDIFfx6wD/ZfRM5IUR4rKQKovvqIy++rRvyworCs=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: x7BEfdsGH3GroEE9BWbVNGvo8VnptB3WyuDEH6kJTcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:e4:f7:0d:b0:5c:c2:5b:5d:a2:e3:bd:0a:f5:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Dec 26 23:01:07 2025 GMT
Not After : Dec 27 23:01:07 2025 GMT
Subject: CN=132a9972adcded6f75f5a9d13438840f2f4a21c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:dc:59:8c:a1:86:26:dc:d4:0a:39:b6:76:
6c:94:d9:87:f0:28:b0:53:eb:fb:d9:3d:0b:c5:42:
32:8e:c1:b3:0f:fb:5a:78:b8:69:9d:56:cc:44:ad:
90:88:d2:af:87:7f:b4:c8:5f:54:dd:62:98:c7:3b:
82:c4:19:fd:9f:f0:27:57:53:52:8a:99:66:58:b8:
b1:6d:26:8b:ab:7c:f1:8f:44:ec:17:22:81:11:6b:
03:b0:99:19:7d:74:7f:bd:9f:3e:3d:d8:c4:cc:05:
70:c3:07:b7:a7:6d:34:88:23:a5:e8:64:c7:73:a7:
b3:02:5a:98:ba:20:07:72:7d:ad:bf:e5:5c:da:37:
ce:aa:13:b7:b3:39:42:4c:73:6f:a0:ea:47:cf:8a:
ba:8e:fd:e1:51:e1:bf:5a:72:33:92:c7:8c:3d:69:
5b:eb:9e:ab:57:88:ab:70:02:44:cf:a4:45:40:66:
12:60:5f:d5:47:2e:cd:9e:06:76:8c:4a:8f:fa:e0:
b2:7d:15:56:4c:6d:97:8a:79:90:d6:d2:c5:8c:f5:
98:c3:ce:f0:7c:91:f6:24:9e:50:e6:8c:39:0b:8a:
2c:27:d3:11:20:cb:31:44:47:f4:fe:59:33:f0:f9:
1f:f7:e7:77:d8:59:63:d1:58:5f:14:a8:fa:75:db:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:99:72:AD:CD:ED:6F:75:F5:A9:D1:34:38:84:0F:2F:4A:21:C9
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:d4:58:67:e4:3e:5a:9a:13:72:a6:01:38:87:54:94:18:
aa:1d:eb:42:86:ab:c2:c8:a8:08:46:88:b6:01:d9:d1:b5:d0:
2a:63:67:f8:86:3e:a5:49:c6:b6:77:36:80:3f:5f:27:c9:08:
89:61:e6:84:82:6f:36:63:e7:c0:8d:dc:0e:68:f7:71:4f:ab:
fd:cf:89:3f:bf:72:77:fb:b9:bd:e4:25:11:bc:e3:37:2a:8c:
d4:54:69:32:64:17:9f:e5:ec:b3:9c:f9:de:da:80:2d:01:23:
1b:67:ec:52:da:9d:54:ed:01:5c:3e:e3:04:dd:3e:bc:91:3f:
b0:56:03:e5:2b:2e:8d:1e:94:9e:5a:54:c5:c3:73:73:21:12:
e4:27:91:3d:8d:ea:16:e6:01:7e:60:3b:21:d4:08:ed:ef:a9:
02:27:af:9c:db:d3:95:3c:d9:db:3a:16:53:8a:a8:84:77:e7:
cd:17:97:7f:21:8a:1a:15:67:26:1f:b6:4b:15:26:55:8c:c3:
00:bc:64:5d:22:39:d4:c9:a7:03:68:e9:44:63:0d:07:33:41:
56:c4:17:ce:b5:80:62:3c:f0:c1:f1:c0:2e:16:9f:ac:83:9b:
21:17:01:da:a9:b8:fd:ef:73:2b:78:6c:0a:12:2f:61:3b:04:
15:c5:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:39:33 2025 by rpki-client