This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: oKT/DTiuBxOcN9LTwmZGQZp4tVIziaE696zAssrstNQ=
Subject key identifier: A9:80:1E:86:FD:C7:E4:02:69:66:1A:11:F8:86:BB:17:83:82:DF:EC
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019B3CEC6678C9DF1AB88F57459C6CCE2F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0CF5
Signing time: Sat 20 Dec 2025 18:01:24 +0000
Manifest this update: Sat 20 Dec 2025 18:01:24 +0000
Manifest next update: Sun 21 Dec 2025 18:01:24 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: uAi9x6lZA7lF6pXeORPFvhU4dDe7ZQwXq/5D+SXYfNg=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:ec:66:78:c9:df:1a:b8:8f:57:45:9c:6c:ce:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Dec 20 18:01:24 2025 GMT
Not After : Dec 21 18:01:24 2025 GMT
Subject: CN=a9801e86fdc7e40269661a11f886bb178382dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:ca:c3:4d:00:72:2a:54:63:6b:c0:a5:3e:
26:1a:21:94:cc:17:e1:f8:33:c9:32:0e:ef:84:41:
27:cf:52:5a:99:c1:9c:62:49:cb:8d:37:08:19:8c:
8b:e7:71:1e:c8:83:84:10:40:3a:20:7e:bc:bd:83:
0d:aa:2f:43:31:f9:8b:9a:ce:b3:09:74:8c:67:a1:
9a:9c:d3:36:e9:4c:10:dd:16:8d:f3:1e:9c:88:ee:
73:18:74:80:ac:e7:09:5f:dc:3a:ee:75:d2:de:be:
4b:50:74:d2:25:43:6f:21:57:98:fb:82:36:12:23:
0c:e8:05:8f:ff:eb:a1:9e:e3:41:d0:79:1d:2f:b7:
1b:c6:00:c2:42:54:84:7b:28:2b:00:97:3e:81:e7:
b7:25:dd:5e:1a:cd:e9:54:23:48:dc:70:b3:5c:a1:
b2:ef:41:0a:89:40:d2:ba:44:ed:88:24:4e:78:32:
cc:7d:26:18:f1:86:c6:59:6e:ea:ee:5d:82:3f:5c:
f5:44:51:ea:23:06:b6:4e:38:ff:55:c9:b3:d3:b1:
8b:07:05:14:32:0c:72:89:c1:f6:40:4f:f8:79:17:
7f:3f:f3:42:f8:c4:c3:fa:f7:49:e3:32:a4:f4:1e:
8d:11:ab:60:1e:9f:4f:fc:99:a3:f3:be:b9:6c:f2:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:80:1E:86:FD:C7:E4:02:69:66:1A:11:F8:86:BB:17:83:82:DF:EC
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4f:51:80:6d:cb:61:be:67:1e:c5:2b:a7:ad:e9:25:b2:0f:
8f:c5:81:80:2d:9e:61:c1:fc:eb:1b:a0:fd:25:69:45:8a:82:
42:15:c4:7e:8b:b5:5e:71:e4:fd:08:15:44:29:15:87:3a:f2:
31:2f:16:5b:0e:69:95:9b:51:ac:64:65:d0:0d:21:fe:93:98:
a6:39:ea:ca:1c:b9:2a:32:ca:3f:ec:f0:64:33:da:80:ad:91:
97:e5:05:a1:11:35:d3:c3:40:dd:dd:b8:9e:1f:c9:23:7a:ec:
3d:a8:12:51:07:75:61:47:5c:c3:6a:30:62:5a:84:3d:7f:84:
81:0f:d6:b6:b4:f0:a1:ed:d2:63:cc:a5:35:63:c0:95:21:b4:
ca:8d:7d:20:4c:28:01:eb:a9:8b:ba:02:9a:19:26:f3:e4:78:
74:97:28:bc:86:89:79:b8:7a:26:4b:00:58:07:9c:5f:b8:9d:
bc:9f:65:4f:84:b8:bb:1f:e2:05:5a:fa:bc:56:e2:03:15:00:
cd:a2:bb:96:85:72:d8:48:47:50:c0:68:51:34:f6:57:d3:a2:
8f:02:79:24:ec:5e:2f:da:fe:b5:c6:9b:b1:1d:0a:40:d9:21:
08:3d:1f:ae:6b:1d:88:31:88:9b:30:ef:d8:3f:8c:a4:91:f5:
51:1a:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:35:24 2025 by rpki-client