This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File: _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier: hrA3kXjYyl590sjU/VnSumFNEsH0O/bTqmGNQRLgQUQ=
Subject key identifier: 90:2F:F3:49:3F:AE:5B:0C:80:EE:27:85:EB:29:1A:54:13:95:FD:97
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer: /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial: 019B2FD51CB5405FB28BC4AA8C1BEC708585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number: 1782
Signing time: Thu 18 Dec 2025 05:00:54 +0000
Manifest this update: Thu 18 Dec 2025 05:00:54 +0000
Manifest next update: Fri 19 Dec 2025 05:00:54 +0000
Files and hashes: 1: MiVzKZibX-3It-xgfseflvN2L_A.roa (hash: aH26xuV9XAHKD/zeZjQBB+/hzYVLDuUtsC+DOjTxZxI=)
2: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: s+zfvDlgNxXyXVfD/vYMMuN1mUjMfpKbBGt2n9U7i/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:d5:1c:b5:40:5f:b2:8b:c4:aa:8c:1b:ec:70:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Validity
Not Before: Dec 18 05:00:54 2025 GMT
Not After : Dec 19 05:00:54 2025 GMT
Subject: CN=902ff3493fae5b0c80ee2785eb291a541395fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:00:ba:b3:94:1e:b8:a0:fa:b9:dc:5a:17:
b8:f2:19:89:4d:35:e7:1f:e0:e0:31:47:2f:97:37:
f3:7f:25:18:f3:d3:d4:c8:cd:54:70:8d:c8:6e:e3:
c8:aa:74:c4:58:16:3e:ed:44:e3:d9:a2:f7:e4:76:
fc:3c:e9:62:7e:8e:a7:1f:e6:92:2a:e3:26:13:95:
2b:77:61:5d:62:e1:30:7d:8e:71:35:37:b5:bc:9f:
ed:09:0e:ea:7c:25:8a:35:65:07:e2:75:ee:8c:f7:
dc:7e:75:10:1e:be:9d:5d:48:2a:f9:3a:7f:ae:01:
c5:8a:1f:84:fa:26:0b:05:1c:aa:50:d6:07:0a:d6:
6e:eb:ab:ea:af:42:e4:ae:14:99:89:a7:af:8d:c0:
5e:c2:b9:87:c5:64:02:b2:02:94:cc:51:c1:d6:e6:
1a:83:0a:19:c4:f7:ad:bf:db:af:90:82:dd:7f:d2:
2d:db:69:f1:75:93:13:93:64:10:5f:0b:6c:89:a6:
36:07:26:02:aa:a9:99:d3:6b:52:1e:e0:03:94:fe:
1f:b7:2e:79:a2:10:86:2a:1a:8d:81:6c:18:f8:66:
b4:b4:2b:60:15:ac:af:93:97:c1:e0:95:d5:16:38:
64:63:0a:de:21:44:73:6c:26:0c:c2:2d:a6:a7:56:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:F3:49:3F:AE:5B:0C:80:EE:27:85:EB:29:1A:54:13:95:FD:97
X509v3 Authority Key Identifier:
keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:24:5d:5e:c7:e6:64:c2:ca:9f:74:d6:14:0e:11:8d:eb:c3:
69:df:ab:99:78:f2:90:b6:55:0e:92:a0:2d:30:c9:da:07:43:
7d:6c:6e:a8:30:39:78:0c:75:d1:01:53:1a:55:40:77:a6:66:
27:ef:32:71:26:56:56:f3:84:ac:c0:fb:58:28:0a:96:6b:89:
ad:96:bc:b2:82:95:9d:11:1e:a5:4a:11:08:a8:a1:17:ee:99:
e5:37:3d:a9:02:12:d5:a7:07:50:ea:8d:b6:72:d8:a8:a9:0a:
b3:a1:33:68:ed:9f:e7:b6:50:72:07:c7:4f:12:25:7e:5e:29:
fd:9c:25:cd:d4:e5:74:48:ee:b3:d3:54:51:b7:3d:7b:2b:0a:
b8:7c:50:16:f5:82:29:6f:e2:8c:f3:52:00:82:e3:c7:f4:95:
b8:26:ad:37:31:ac:d5:9d:7c:1d:ca:86:19:c6:3a:48:01:b6:
52:c0:ae:a1:9c:39:d7:5e:dc:22:16:ca:e4:30:33:b4:b8:49:
18:94:80:95:d2:57:f4:6b:46:42:31:9c:57:9f:34:64:6d:a3:
99:80:3a:39:89:e6:6e:3d:7e:c7:00:cb:8a:0c:d3:90:23:a7:
6a:e9:01:7c:07:0c:e4:be:e3:e8:72:ab:67:f0:4e:7b:a0:9e:
24:d8:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:48:07 2025 by rpki-client