This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: KTukGfpj9IlbPx2jK1rvERzn8EtybZJq6Yul85NqYMM=
Subject key identifier: 87:61:78:55:0E:0F:D6:15:19:E6:EA:BE:0A:BE:AC:06:EF:CF:58:DC
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 019B4A39EE4619273F97577A1B5B07CF486C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 1790
Signing time: Tue 23 Dec 2025 08:01:08 +0000
Manifest this update: Tue 23 Dec 2025 08:01:08 +0000
Manifest next update: Wed 24 Dec 2025 08:01:08 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: YzXlqbGfVCzFwXtblG2ospQsyyj1zK56SQjBf7XaGCE=)
2: T4oLWvtGkXnIZT9-9x1LOu0VW-U.roa (hash: G6kuFvQwsgczzQTnExC5MPe1xhFcrC4A2B7/fKDah3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:39:ee:46:19:27:3f:97:57:7a:1b:5b:07:cf:48:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Dec 23 08:01:08 2025 GMT
Not After : Dec 24 08:01:08 2025 GMT
Subject: CN=876178550e0fd61519e6eabe0abeac06efcf58dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:14:2e:77:78:0b:43:7f:d9:63:1f:d7:de:
b0:52:bd:2b:29:ed:52:df:49:dc:9d:10:58:9a:f1:
3f:54:16:67:a0:f5:a3:7b:1d:49:3f:c9:3f:e5:f3:
a5:05:51:cf:0b:50:70:09:f7:fc:9c:22:de:6a:e2:
76:6b:f8:a6:ee:12:06:0e:94:0b:ce:a3:76:29:d1:
33:08:ae:a3:30:ed:06:08:90:5b:14:04:bf:9e:d0:
67:3c:f9:31:92:bb:af:0b:f6:41:f6:a6:09:0d:03:
30:24:dd:39:5b:76:48:b2:07:ab:cd:f3:d6:af:72:
d1:d9:22:d8:22:25:bc:72:c7:1c:df:46:3e:fd:0c:
97:1a:1e:02:21:39:72:8d:20:a7:ae:59:7b:b0:c5:
89:83:65:ec:b1:f0:5b:4d:e2:76:11:82:ad:43:4e:
79:2d:90:6f:47:23:ef:66:3e:1c:39:29:96:e2:01:
b0:f3:be:b9:3e:2a:a1:c1:92:10:ed:7e:74:f8:ef:
61:65:b1:7f:82:ba:2f:6d:a2:92:e0:91:a4:08:39:
79:8b:3f:48:bd:d8:5b:4d:1e:32:aa:ad:fc:27:13:
3b:5e:6f:61:3c:ae:49:0c:df:08:09:9e:22:50:14:
6d:b9:ce:68:b0:d9:57:46:4c:99:3d:f9:ed:7b:d5:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:78:55:0E:0F:D6:15:19:E6:EA:BE:0A:BE:AC:06:EF:CF:58:DC
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:d7:5d:0c:b4:df:00:b0:8c:22:94:a1:ff:a0:c5:40:ae:
7c:61:a2:fb:2e:48:27:4e:c0:79:91:2c:43:35:0a:6a:f2:4d:
44:70:75:f9:37:e7:0c:3a:17:af:28:e7:7e:f1:54:7b:2b:0a:
63:4d:cb:9b:98:e8:59:33:9d:e2:f8:04:d4:8c:5e:57:cd:2a:
8e:5a:89:11:eb:db:0c:b2:7a:07:2d:c6:39:3d:df:99:ef:1d:
8f:61:3d:ef:e3:2a:a5:1f:96:32:fd:31:ab:d9:9f:75:9b:87:
e3:bd:f8:06:22:dd:a2:fd:5c:a5:9b:13:d3:93:19:05:fc:14:
96:99:9e:ed:3e:14:46:e9:4b:a2:d2:20:c5:94:7f:cd:81:00:
38:0b:c7:45:40:b8:c7:ca:cf:29:dc:9c:39:f7:21:1e:57:bf:
cf:08:cc:16:c8:6e:af:1d:7c:51:a1:7a:ec:5b:43:a2:22:94:
47:1c:4f:ab:c6:4b:90:29:ba:61:52:83:bb:0d:f9:a1:06:c7:
77:9b:ba:3f:77:78:e4:9e:da:b3:cf:d0:ce:13:81:72:b7:3d:
60:77:ae:10:3b:af:13:80:3c:d5:7e:dd:b5:48:cc:24:b8:89:
d3:81:35:da:04:1d:2f:24:71:84:1b:5b:87:8d:28:72:16:76:
a0:c0:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:15:45 2025 by rpki-client