This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier: KhyIONoFAcgA6WxBw9M3cyCjmvtyfSJVgyhiutXzv0U=
Subject key identifier: 20:E2:E0:BA:D3:9D:29:3F:E0:2B:4F:FA:BF:25:8E:72:16:76:69:D1
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial: 019B2BF863DDB1E205849B5B461DB3AAFB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number: 177F
Signing time: Wed 17 Dec 2025 11:00:57 +0000
Manifest this update: Wed 17 Dec 2025 11:00:57 +0000
Manifest next update: Thu 18 Dec 2025 11:00:57 +0000
Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: 2Ej86Ync6Nm1B5NM+JQL2Gb3zuEyMnXWqeHlFklQOA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:f8:63:dd:b1:e2:05:84:9b:5b:46:1d:b3:aa:fb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Validity
Not Before: Dec 17 11:00:57 2025 GMT
Not After : Dec 18 11:00:57 2025 GMT
Subject: CN=20e2e0bad39d293fe02b4ffabf258e72167669d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:f2:d4:63:68:79:28:71:cc:26:89:02:bd:
72:c5:5f:3a:2e:14:cd:69:35:63:fa:90:d2:78:54:
1f:db:6b:43:ad:88:62:7f:44:c1:9a:51:89:9d:3d:
8e:27:88:13:23:58:06:8c:11:49:30:89:ab:9a:2d:
46:07:35:5b:bb:32:dc:3d:c8:ac:2a:b3:64:7b:7d:
c0:f9:30:21:91:53:2c:b3:f0:a6:95:08:41:7f:fb:
c8:c8:bf:7b:9a:f7:bc:bb:e4:87:4b:a2:f5:a3:f6:
eb:1b:7e:62:bc:de:bb:9e:97:9d:0b:c1:f8:1c:13:
89:39:51:4d:ce:97:fd:a9:bf:b1:76:ad:41:63:5b:
56:1e:59:39:66:37:b0:fb:8d:6c:b4:42:65:10:3f:
8f:3b:73:17:fb:da:3b:f9:ab:9e:fb:e4:3d:7a:95:
79:c7:5e:36:28:ae:8b:41:0d:50:12:27:f2:29:51:
24:fd:38:ea:e2:b1:0c:82:97:31:63:01:cd:40:cf:
f8:89:d6:17:7a:ef:3c:c8:3c:86:67:39:ef:89:08:
c8:99:ea:cf:90:83:46:f4:fd:94:d2:2a:8c:b1:5e:
41:b9:6b:17:a7:1d:85:16:96:af:ae:ce:59:33:45:
f6:75:a7:db:e4:97:b3:97:5e:d2:c8:11:d5:e1:0f:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:E0:BA:D3:9D:29:3F:E0:2B:4F:FA:BF:25:8E:72:16:76:69:D1
X509v3 Authority Key Identifier:
keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1a:59:58:ee:2f:36:0f:cb:d1:16:1d:63:2d:f8:ab:c0:3c:
70:f5:78:c3:06:4b:ca:23:df:f2:73:43:df:f8:d3:c3:32:84:
2e:a5:1a:1a:e2:78:f2:ce:ae:20:e7:82:cd:71:c4:ac:df:00:
31:28:d3:70:78:c5:d8:5f:69:20:17:14:da:1d:1c:19:33:3b:
49:2f:02:6c:5f:ab:95:ea:5c:76:e7:01:42:8b:be:1c:4c:d5:
6d:93:62:27:b7:f3:4c:e9:f5:ea:1f:4a:fe:5c:fa:09:47:62:
22:90:2d:c6:5a:39:cc:4b:06:92:bc:ff:20:7e:ae:35:d9:1f:
d4:59:69:ef:cc:fd:8d:74:b0:37:28:da:ac:c8:61:98:7a:45:
0c:d9:2c:ce:d9:6a:a6:d5:08:75:be:db:da:d2:9e:03:c6:3a:
58:8c:93:c1:3c:0e:0f:72:f2:27:10:a3:d1:d3:78:88:a7:e8:
c2:9e:e1:5c:60:92:2a:c2:fb:9f:83:00:6c:01:49:9c:19:fd:
4e:20:07:26:63:30:63:ba:3b:98:82:6f:66:e3:73:d3:ea:3b:
c0:ed:69:7d:8e:2e:09:5b:31:9b:c6:f7:5c:dd:4b:44:8b:4a:
f7:f8:e5:07:ad:69:ad:e1:bd:a8:79:a6:ce:4b:b7:fa:4b:6c:
30:73:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:46:38 2025 by rpki-client