This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: C5nCGaX2OI8eyVG8C/SyTQN4SY+iqI/tYGmVEE4dow8=
Subject key identifier: FA:F7:B7:B6:C0:88:DB:30:65:F8:D9:C9:28:DC:85:82:DF:9B:34:A7
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019B3A587446CFDA1C35A46A41A7DD76EA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0749
Signing time: Sat 20 Dec 2025 06:00:33 +0000
Manifest this update: Sat 20 Dec 2025 06:00:33 +0000
Manifest next update: Sun 21 Dec 2025 06:00:33 +0000
Files and hashes: 1: 1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa (hash: cdBNdf7iqKZd9SFWXblKfPWgwOyg7ATIsmgjUz2MrVM=)
2: 7Z41l5GCvkmQM0-AZptE0q-8N2c.roa (hash: W0spFBvn9EFz2Rg+2ALTObth8eVz6Jz8Eki0R5kperk=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: ULjrAU4K46vCkKg+0q/FpbSDpCvGBpI+N46y3pDuVzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:58:74:46:cf:da:1c:35:a4:6a:41:a7:dd:76:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Dec 20 06:00:33 2025 GMT
Not After : Dec 21 06:00:33 2025 GMT
Subject: CN=faf7b7b6c088db3065f8d9c928dc8582df9b34a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:78:c3:cd:38:07:d7:d0:d9:ef:60:61:60:
3b:e8:ff:5b:e1:2d:39:ee:e5:8a:0f:d0:53:bd:51:
83:75:7f:c2:3e:ef:56:b7:fe:3c:7f:e1:72:4b:56:
97:34:5f:e1:54:77:6a:ca:d3:33:c8:3f:4c:c3:eb:
d8:24:c2:10:d0:d6:08:a2:32:77:9b:65:c1:94:81:
88:34:12:20:92:7a:3e:e1:30:e8:3a:18:04:5b:7b:
2f:f2:d5:86:7c:48:19:e6:a3:b7:26:f3:24:48:9d:
47:b3:49:df:1b:f6:39:75:c7:0b:61:92:65:36:47:
84:4d:47:c5:49:96:df:d1:5a:c3:71:d1:3e:89:aa:
6e:d1:48:1b:51:9b:50:37:2c:ef:0a:85:f3:89:77:
18:af:1b:7c:b3:ea:da:65:95:c4:a8:93:d8:09:28:
f8:5d:95:18:8c:31:04:e8:85:f3:b5:d0:4b:25:bb:
b6:30:e1:13:d3:b7:52:6d:30:e0:fd:4b:34:89:9e:
d0:b4:80:e8:ec:2d:ed:2f:7d:42:dd:cc:a3:6c:66:
9f:f9:5c:01:bc:fd:1d:cb:cb:be:20:5a:b4:ff:07:
d2:f2:f2:4d:9b:6e:8e:47:9d:19:1c:11:dd:5e:dd:
0d:6d:a5:d5:28:79:e3:41:86:01:49:e2:b5:3f:40:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:B7:B6:C0:88:DB:30:65:F8:D9:C9:28:DC:85:82:DF:9B:34:A7
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:af:2f:8b:5c:78:89:16:cb:0b:b3:35:d1:48:2f:41:40:99:
aa:a0:71:cf:bc:00:3c:62:a6:6d:f5:45:a3:02:00:92:74:d5:
14:2b:f8:3d:c5:23:05:cb:0e:f0:26:31:4c:3a:04:00:72:9b:
57:2e:5f:f9:e1:90:38:b3:9d:0f:a2:e3:28:8b:5c:0c:c2:81:
63:91:1d:5e:56:14:46:c5:e8:ab:8b:79:32:81:01:c2:35:b0:
53:6f:3a:13:06:26:1b:b9:ba:ab:88:c0:45:70:a5:70:ae:58:
7b:5f:b0:c4:d0:7f:ef:dc:e6:97:ec:53:94:b3:93:4a:74:f2:
48:ff:74:c3:e2:ca:96:3e:9b:08:cc:4f:b2:d7:79:98:2e:30:
d6:51:2f:b4:d5:2e:71:74:57:5b:67:94:1f:92:80:82:29:18:
9c:50:bf:ab:8b:70:66:db:7a:ca:db:08:31:23:ab:2a:e0:40:
f9:51:7e:28:4b:9c:01:36:cf:1c:8d:2e:47:4e:d9:38:58:38:
55:4a:01:2f:30:2f:7b:0d:74:e4:3f:67:5e:df:f9:77:51:f5:
9f:25:63:85:2c:ac:0d:c8:53:c9:f3:d3:be:85:b6:2b:7c:03:
d5:fb:2f:b5:42:a8:3c:60:c6:ff:5c:2d:86:93:26:8b:2e:26:
e0:75:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:53:39 2025 by rpki-client