This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File: mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier: 2r7njOUBip/MAgOQjpg0C1bGlW6dwSsb6jOgDDc5RVw=
Subject key identifier: 3D:E8:F0:FA:F1:39:09:B2:CD:86:1A:9C:14:DA:7D:01:0F:91:A2:A2
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 019B3EA338E227447C7010659E7B41DEE752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number: 09F4
Signing time: Sun 21 Dec 2025 02:00:42 +0000
Manifest this update: Sun 21 Dec 2025 02:00:42 +0000
Manifest next update: Mon 22 Dec 2025 02:00:42 +0000
Files and hashes: 1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: qvCKW4UWgTZVXRcZKNQzdET3iknmH5kUK6rYqz2hvmc=)
4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:38:e2:27:44:7c:70:10:65:9e:7b:41:de:e7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Dec 21 02:00:42 2025 GMT
Not After : Dec 22 02:00:42 2025 GMT
Subject: CN=3de8f0faf13909b2cd861a9c14da7d010f91a2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:28:da:8e:35:95:b2:fc:7d:02:34:90:78:
ed:59:8c:e6:b6:4f:5c:bb:1d:ac:f2:03:96:fb:17:
69:d8:c2:67:ab:49:dc:c4:0e:c2:1d:9a:a4:cc:f1:
6e:be:e3:18:bc:b1:22:d5:05:f2:3b:f5:e7:33:1d:
8f:11:27:2c:0f:26:06:cc:fb:4c:b8:f0:93:37:6a:
30:99:40:42:f9:26:98:f6:17:39:3b:5d:85:e2:ef:
4a:43:f9:08:d7:3a:1e:b3:ef:fd:2e:b2:20:70:4c:
5e:51:7f:44:be:86:4f:45:10:b1:78:04:7a:79:a9:
80:d8:7a:8b:56:91:8a:ee:5b:15:59:bf:f6:16:40:
80:01:88:a6:c0:28:ae:37:bf:3d:ff:c2:61:d6:c2:
06:1a:13:b2:2b:4a:89:f8:4f:94:c3:3d:11:09:a0:
c1:04:6a:61:16:f3:fe:16:50:21:b9:76:5c:8d:21:
7a:bb:5d:cb:66:01:48:dc:0c:08:f4:aa:a6:42:14:
78:e7:6e:f4:9e:4b:e0:8f:da:61:6b:88:50:b4:b4:
f8:8b:e3:f3:5f:cf:45:cd:c8:9a:6c:d5:05:4c:82:
76:d8:b2:ce:b8:6c:f1:54:e0:f1:68:f6:a8:5f:6f:
f2:0d:67:c4:72:a5:6b:90:4c:96:9b:04:34:79:00:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:F0:FA:F1:39:09:B2:CD:86:1A:9C:14:DA:7D:01:0F:91:A2:A2
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:2f:4a:df:4e:75:19:e2:a1:24:19:05:5f:65:2a:86:05:
b6:ed:ed:ff:e9:7c:0d:77:66:e8:27:c3:42:b2:ab:8a:fb:bf:
09:b3:d7:86:6a:b0:2d:80:dc:97:d6:5f:3b:3a:0f:91:6f:e3:
06:ef:a2:c0:6e:76:fa:0b:b4:72:fa:6a:8b:bf:8d:10:29:61:
84:0e:41:5c:7c:1d:08:1a:a2:35:c5:60:cd:a8:7a:1c:da:ea:
47:d9:87:de:5f:39:3a:5d:43:7b:fa:31:9f:37:5e:10:68:53:
f6:99:d7:8c:25:49:4c:c4:24:3d:ef:fc:04:29:bc:4e:f4:2b:
9b:f5:c3:98:f4:7d:2d:13:2c:b3:34:d1:fe:ab:2e:0b:54:a8:
26:83:41:09:bf:92:74:05:00:62:8f:83:f3:fd:c0:c1:a3:ec:
c9:7c:0e:4f:b3:fa:26:82:85:d6:22:cb:76:6a:62:ec:ac:d1:
d9:a6:2d:b2:fe:b2:41:23:36:11:32:63:19:06:eb:10:37:4d:
02:fe:28:74:9f:dd:a7:a9:87:dd:24:19:ab:b0:a8:c3:80:63:
47:9a:9b:6f:e4:27:85:c9:4f:aa:ad:d3:36:b7:e0:f3:07:e0:
a5:2e:38:71:52:7c:48:ca:2f:4c:29:53:25:4f:94:ec:0a:f0:
7d:7f:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:56 2025 by rpki-client