This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: OGBBK/wI5773/m/G30TVVMp8yhkwJhPc8WayRZa6iz0=
Subject key identifier: 69:95:72:01:C9:E8:FA:BE:F5:CC:8D:C3:B6:A5:68:DF:3A:5E:DE:A7
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019B3C46E5A07474C8056447CD570E8055C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0C51
Signing time: Sat 20 Dec 2025 15:00:37 +0000
Manifest this update: Sat 20 Dec 2025 15:00:37 +0000
Manifest next update: Sun 21 Dec 2025 15:00:37 +0000
Files and hashes: 1: 1-L1nuEVviWFgiIBgYUbXcn7cU88.roa (hash: xNFaKqgVfS5ot3fyXEaMEA/Kf4UyeT0PWW6D7lED2Ns=)
2: By5GHZL7xTf-YCGEhzi_2kBjYcE.roa (hash: anUXvOCNIz6ZWvtrE+JSRNQ5x/RJpA1WLXGaNpT4CDM=)
3: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: xhzklHdOnqM6e3cGRNRCMZq6pEbvTs9InG7AMj2UgXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:46:e5:a0:74:74:c8:05:64:47:cd:57:0e:80:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Dec 20 15:00:37 2025 GMT
Not After : Dec 21 15:00:37 2025 GMT
Subject: CN=69957201c9e8fabef5cc8dc3b6a568df3a5edea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:42:79:cc:56:e8:a9:3d:22:60:22:90:3c:
54:5e:c1:1c:8e:8a:4f:ef:5e:3b:f2:eb:2b:d3:0a:
a2:c0:0a:16:40:ff:2e:48:7b:90:bb:bc:ef:18:1a:
37:df:b6:0d:13:0d:0d:9a:16:b7:f8:91:d5:cc:16:
55:ef:52:ea:2f:35:aa:89:e8:1e:fc:c3:82:ca:fa:
36:89:39:7d:42:3e:df:2b:cb:9b:18:2c:d3:43:25:
c6:4d:36:8f:f4:63:93:8c:ef:72:b6:77:7c:d5:69:
a4:5a:d9:6c:f3:fc:a5:43:f4:4c:46:30:d1:21:5c:
89:be:df:35:74:e9:67:95:2f:50:62:07:92:45:34:
4e:6a:ad:ce:6f:9b:25:59:7d:b3:67:96:51:80:e2:
f0:6d:73:2b:42:79:38:92:9f:d4:9e:8c:7e:0e:2c:
b4:7b:71:d4:5b:1d:60:d7:6d:57:6b:56:95:09:71:
e4:6b:8e:ec:0f:c6:64:57:46:34:d7:b3:be:6d:7e:
0d:f9:df:37:86:90:e8:2b:fb:88:57:dc:48:b5:9f:
32:4b:41:89:ea:6f:6b:6d:9a:5d:d7:0a:6d:81:a5:
d2:e9:4c:3d:7c:8d:e1:9e:cc:e5:3e:7b:9e:1b:8e:
13:6d:d1:e6:36:cb:09:1e:77:13:ec:d7:58:d4:1f:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:72:01:C9:E8:FA:BE:F5:CC:8D:C3:B6:A5:68:DF:3A:5E:DE:A7
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:2f:12:51:96:49:b6:66:54:1b:e3:ce:a3:c4:54:90:45:
44:ac:b1:1e:cd:45:b1:99:62:82:46:b0:05:17:79:9f:af:cd:
83:d3:11:36:dc:9a:30:50:35:4e:86:0b:67:6e:69:b7:4d:66:
46:1e:c7:2d:d2:d1:d2:bd:4b:c1:9d:0b:2e:fc:0d:b3:59:45:
b0:8e:28:e9:b7:ca:ea:64:95:33:22:af:bb:27:ef:ff:0e:69:
67:82:6c:83:35:73:28:4b:f9:3a:9c:f4:74:c6:f3:d0:7f:66:
f0:6c:d5:72:13:78:98:b3:fe:74:be:df:2f:0c:7b:ed:75:b8:
00:e3:a0:7b:42:12:41:56:fa:b0:36:06:1f:14:5c:d8:dc:f0:
0b:a6:2a:d9:2c:a3:4f:11:68:91:a0:e0:2e:6e:f7:95:ea:a1:
ae:5f:15:d6:d1:4e:a7:42:af:96:fa:5f:3c:2c:f6:47:dd:95:
00:f4:a1:7d:02:8d:89:ab:d4:d0:bc:d8:72:7f:23:70:e5:cf:
53:07:6b:1f:2b:fd:c9:e6:31:f2:6b:60:aa:69:1b:3b:c2:51:
9f:d7:8a:56:81:67:64:4b:d7:65:6f:a9:48:7f:0c:85:15:86:
95:4d:29:8b:15:7d:22:0f:67:ab:01:65:24:72:4f:96:5b:33:
6b:0d:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:17:24 2025 by rpki-client