This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: myltkqWwrBX+u5Oe/+q8mcnTngYkFIPaD763YblpQpo=
Subject key identifier: 62:96:AD:DA:AD:E6:6D:C1:00:B4:F9:B1:F8:E9:6C:11:0B:AB:74:FE
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019B6B4580F260929632AD9396A2CAA410A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0B8B
Signing time: Mon 29 Dec 2025 18:01:15 +0000
Manifest this update: Mon 29 Dec 2025 18:01:15 +0000
Manifest next update: Tue 30 Dec 2025 18:01:15 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: 1xcTJW2ZRLUaTfMrGwZgdsIx6WKfiVUWrjfgxtCIfUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Dec 2025 15:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6b:45:80:f2:60:92:96:32:ad:93:96:a2:ca:a4:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Dec 29 18:01:15 2025 GMT
Not After : Dec 30 18:01:15 2025 GMT
Subject: CN=6296addaade66dc100b4f9b1f8e96c110bab74fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:75:7c:b9:71:fc:1e:58:3c:d6:64:45:93:
de:02:b0:d8:90:87:fd:b9:da:97:d2:87:f5:eb:a1:
48:22:9a:90:e2:34:36:0a:62:0e:a4:e9:22:1d:a2:
b0:23:60:26:64:5f:9c:66:8b:6c:c8:91:3d:f6:04:
e1:44:3a:ba:c0:57:1c:ba:fc:f4:4f:fc:1b:be:9e:
39:6d:bc:82:93:a6:48:04:90:c2:40:ae:c3:e3:72:
45:dc:a5:f6:be:71:a6:75:6f:a4:06:de:d6:8c:14:
54:f2:3c:81:33:3e:03:e2:ed:63:c4:aa:d8:a4:74:
73:c0:f2:10:ff:af:81:f5:e4:0a:79:c5:9e:bd:9a:
ae:c6:70:6e:c9:1a:f5:9a:bf:ad:b0:a3:5c:fa:2f:
cc:a1:9d:93:b5:6c:6c:f7:cb:00:6f:51:f1:3d:cd:
af:13:3e:81:4f:9e:e6:0c:64:41:55:df:7e:a0:29:
3e:e6:c8:0b:3c:64:02:f1:bb:58:5f:d2:73:09:76:
b5:73:2c:48:65:a3:3e:64:27:4b:26:bf:9f:0b:ed:
ce:10:16:19:d1:94:39:07:bb:4e:85:a7:be:06:37:
be:f3:ca:55:5d:48:9f:05:c7:1c:9e:ba:c3:78:a5:
d3:dc:60:fe:36:42:b3:98:8e:76:35:67:ac:9c:06:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:AD:DA:AD:E6:6D:C1:00:B4:F9:B1:F8:E9:6C:11:0B:AB:74:FE
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4f:04:7c:41:f7:03:a3:0a:bb:04:3d:9a:c0:ec:47:08:9e:
fd:88:12:c8:40:96:75:a4:83:06:a3:86:5b:87:6d:1a:db:53:
e0:38:6d:46:ef:e6:b4:9a:c9:6b:47:94:ca:51:2c:dc:b8:06:
de:3d:7a:6f:30:e7:ed:76:d4:37:1a:3c:3d:6b:9b:d3:7a:ae:
a9:d6:98:9c:71:8d:e9:de:be:98:72:7f:f8:2b:42:e3:7d:18:
f4:81:f9:e5:63:57:8d:56:76:dc:c7:92:49:0b:f5:fe:a0:73:
91:6e:11:09:af:7f:09:e1:1a:73:20:aa:50:f4:17:c8:40:53:
c2:20:fc:90:a4:b6:8d:62:4e:e4:dd:1b:ca:f3:35:b6:92:50:
05:33:1d:ef:fd:7c:4e:e2:ee:c5:50:78:0f:d8:38:12:13:2e:
a0:84:97:a2:73:26:2c:4a:b9:88:a3:d1:6b:dc:1f:1a:08:52:
a9:52:00:b6:24:5b:34:50:2a:d2:dd:f3:3d:d5:f4:f0:09:e9:
50:7c:55:35:cf:37:1d:8c:01:0a:57:06:8f:27:2b:5d:a6:de:
4f:ae:e3:e9:28:e7:b4:71:2b:09:cb:0f:9b:ae:e2:89:7a:89:
7d:5a:41:4e:02:65:d4:33:57:97:39:09:30:6f:66:00:84:a3:
62:e7:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 00:24:17 2025 by rpki-client