This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: xyG+3PjwK/5BpuSJDuManxXX3BtCX7zPf1AjzVxihfw=
Subject key identifier: B5:7E:B1:D4:79:ED:6F:A0:68:BF:8D:F2:99:24:A6:31:E6:96:16:90
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019B649EA0ECA442E85B27AC398AAA332E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 179D
Signing time: Sun 28 Dec 2025 11:01:16 +0000
Manifest this update: Sun 28 Dec 2025 11:01:16 +0000
Manifest next update: Mon 29 Dec 2025 11:01:16 +0000
Files and hashes: 1: 3v4XT_Zkb0JR6zbO2RFLVtIvqcM.roa (hash: aLhicbgV4nIT1UVqMuVw+q4GdC1H71gXhIrWh3frlJs=)
2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: nBxFbSOQQu47N+Dd7AfWfs8gCw3uq67bGz/aeOnV7wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:64:9e:a0:ec:a4:42:e8:5b:27:ac:39:8a:aa:33:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Dec 28 11:01:16 2025 GMT
Not After : Dec 29 11:01:16 2025 GMT
Subject: CN=b57eb1d479ed6fa068bf8df29924a631e6961690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:be:9d:60:7c:3b:63:d6:2a:d6:56:c1:19:
4d:09:26:b1:2e:41:03:23:a3:de:c6:29:5f:3a:3c:
10:6e:8e:e8:75:ba:8b:6d:be:d6:4b:69:35:4c:e3:
c0:13:15:ba:df:05:41:00:96:5f:02:bf:f1:c6:ff:
44:cc:e6:6c:41:52:74:2c:87:5e:34:a4:27:81:44:
83:f7:e0:a3:0c:e6:82:55:e2:3b:47:fe:74:6f:39:
33:e4:d4:f5:4f:2e:38:a3:a6:7e:a8:68:6d:b1:6d:
de:d6:21:3c:0a:0f:3e:70:9b:17:e2:7d:57:e7:2f:
e4:ff:5d:14:88:d0:51:13:0e:3e:b6:a2:03:1c:af:
6b:7c:83:73:07:c3:c6:42:48:29:ff:11:ef:0e:e0:
f5:f7:c3:90:69:23:a8:0f:cf:27:b9:86:52:9b:80:
ec:43:bc:54:0e:9b:6a:9d:a9:d5:54:0d:ec:e3:38:
aa:6f:d2:2a:46:9c:c8:14:34:fe:e9:74:0b:73:dd:
82:bd:b0:4b:94:da:89:ef:b3:56:9e:6e:8c:7d:62:
3a:19:c4:24:bf:c9:d5:f8:9a:ad:08:da:91:3e:b3:
2c:e8:06:86:e9:9a:10:9d:57:d4:b1:44:c5:89:16:
05:12:d9:c0:27:47:3f:f3:1d:e5:70:82:84:1d:c6:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:B1:D4:79:ED:6F:A0:68:BF:8D:F2:99:24:A6:31:E6:96:16:90
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:c4:6a:31:c4:aa:e1:1e:af:06:f7:f5:58:e6:02:94:dc:
4c:9a:77:ab:92:08:df:14:bb:d9:8a:e7:f6:02:ea:49:ee:ce:
2a:1f:10:ec:d9:61:48:4e:3a:5c:b7:82:21:5a:53:1e:4d:f5:
d4:32:29:68:e1:cb:12:3b:3d:0f:4e:a1:d1:8a:b9:42:55:51:
dc:a7:93:f8:7d:a1:3e:fa:f9:78:81:7a:72:a4:dd:a0:76:63:
51:39:7a:c7:b1:d9:ac:b3:70:37:5d:96:5c:36:33:d3:2e:8d:
67:df:7e:66:9b:41:8d:6b:b4:2a:cf:d4:c1:94:58:b8:c6:0e:
42:1c:0e:5e:3c:4f:8f:05:bc:9f:39:da:14:78:66:d3:5a:b1:
92:c0:65:6e:38:f6:0c:64:68:28:2d:39:c7:9a:02:d3:b4:19:
6e:74:29:a7:d2:30:93:5d:f1:3c:d2:bd:35:3a:40:25:a3:cd:
d4:27:29:bc:28:cc:fc:f8:7a:2f:31:8b:fa:5b:a0:20:1f:81:
42:8a:d2:a0:de:fa:74:c5:b1:e9:aa:91:43:9a:98:fa:f5:f9:
00:75:cb:39:47:9b:d0:6f:41:e3:74:0f:35:a5:af:00:97:d2:
83:07:08:80:37:92:88:92:49:a9:57:f1:36:fc:dc:df:55:d6:
19:8a:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 13:02:05 2025 by rpki-client