This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier: B0wWV7dRXAUcB6Rxrt872cG05phs/VTTyYm4y5R8wEg=
Subject key identifier: 63:AA:88:20:0B:87:4F:85:C4:36:64:77:23:89:F7:06:A0:3C:78:71
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 019B3E6DA7AE30E1B744D35D344FDD3991DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number: 153D
Signing time: Sun 21 Dec 2025 01:02:12 +0000
Manifest this update: Sun 21 Dec 2025 01:02:12 +0000
Manifest next update: Mon 22 Dec 2025 01:02:12 +0000
Files and hashes: 1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=)
2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=)
3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: WsIPZKvg02QZjEATW7nuX0TqhHO1KTTS8WQu1BMz3Lw=)
4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6d:a7:ae:30:e1:b7:44:d3:5d:34:4f:dd:39:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Dec 21 01:02:12 2025 GMT
Not After : Dec 22 01:02:12 2025 GMT
Subject: CN=63aa88200b874f85c43664772389f706a03c7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:86:b8:97:06:47:66:3c:f1:e0:be:93:32:
9b:84:4b:13:f5:e2:a5:40:61:10:f7:c5:5d:2e:17:
1d:41:90:72:49:4f:37:2e:e4:c8:60:75:68:f2:11:
b4:3a:0d:2c:15:d9:f7:fa:e3:69:94:05:05:6e:e5:
25:e1:2d:3b:54:6e:cb:f2:3a:48:3b:99:0e:35:d6:
20:3d:03:b5:38:25:07:7f:f0:a0:b2:fb:43:ac:d5:
0f:f3:2f:b0:78:ab:70:a0:39:21:cc:e8:65:42:3b:
68:91:9b:dd:52:80:e2:5e:4a:08:d6:ee:7b:80:74:
68:af:68:a8:a2:9a:2a:18:ba:59:47:b4:e6:a8:4a:
cb:a3:c6:07:7a:e0:0b:d2:5d:13:68:52:2c:72:17:
db:c1:25:e0:28:8a:ae:e5:bc:32:da:35:77:94:2f:
97:fd:77:28:c9:87:43:3f:c7:5f:be:70:fc:51:46:
e8:05:f7:d2:c6:9a:75:90:94:07:2f:17:4e:32:77:
af:2b:d8:74:1d:c1:e1:fe:35:84:36:50:d6:26:bd:
54:65:15:2f:cf:21:59:9a:ad:c1:d1:1a:97:81:d2:
31:1c:43:65:88:0a:c7:9f:85:ad:12:21:96:c1:aa:
52:4d:43:bd:0e:13:03:04:6e:b9:a6:63:24:1e:a7:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:88:20:0B:87:4F:85:C4:36:64:77:23:89:F7:06:A0:3C:78:71
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:59:e5:63:73:39:1d:0c:7c:3e:6b:25:e7:48:c3:3b:3f:
01:a5:83:a3:ed:45:97:9b:86:ce:73:5e:a7:5e:d8:54:1c:b4:
44:30:67:dc:b1:a7:42:4f:27:fe:f2:65:a3:fc:5c:89:5d:0e:
1a:c6:fb:db:c1:df:d9:9d:c8:9e:cd:98:4f:2e:43:ff:1a:e8:
2e:43:26:29:df:ee:62:1b:5d:af:ac:38:ff:7d:a6:e6:bb:f8:
c4:a4:a4:9b:73:5b:e8:f3:57:0f:b0:54:45:d5:4f:63:ea:91:
37:2e:e8:f7:7e:d0:ec:88:b1:2a:f2:81:bd:76:f6:12:62:24:
b3:58:82:b9:bc:ce:82:14:0a:a2:5c:31:8a:30:33:b9:f1:91:
5c:3b:30:ae:f9:cd:b5:57:a9:d4:d7:da:47:24:c1:83:f5:b5:
54:79:7f:ac:f4:5f:c6:82:b7:83:3e:44:b1:8d:52:fc:a1:ca:
1f:b6:69:fe:0a:55:9d:4c:e6:f6:ed:34:0b:c5:04:1f:64:3c:
5d:87:f9:fd:85:c1:a7:54:31:09:53:c7:e5:f8:b2:5e:ec:08:
84:a6:cc:a9:99:71:16:d8:02:ef:ff:d6:a0:e1:b3:7c:c5:86:
13:81:f1:63:4c:6c:d7:98:94:85:01:59:da:83:e0:b1:02:44:
a9:2e:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:56:51 2025 by rpki-client