This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: CqWRxfZcSQAnNN8q1Zd009gT4dSkTkJ3e8lUv+1de1s=
Subject key identifier: 8E:1B:2F:E4:27:2F:8E:11:05:95:97:3E:EE:D7:33:20:A1:21:65:6D
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019B42B74087DC5BC19FAC7FE1AB1C2ED487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 0504
Signing time: Sun 21 Dec 2025 21:01:04 +0000
Manifest this update: Sun 21 Dec 2025 21:01:04 +0000
Manifest next update: Mon 22 Dec 2025 21:01:04 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: RO7iwiz8aUQ9xlqSo6IDSEz2WM77l8dkyVK7Iot2uXY=)
2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:42:b7:40:87:dc:5b:c1:9f:ac:7f:e1:ab:1c:2e:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Dec 21 21:01:04 2025 GMT
Not After : Dec 22 21:01:04 2025 GMT
Subject: CN=8e1b2fe4272f8e110595973eeed73320a121656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:6c:b6:8b:88:91:95:a9:a0:39:f6:38:b0:
f4:78:e3:07:59:46:25:44:ca:42:50:1c:d0:2f:4c:
a6:18:7e:a6:7c:da:9f:d8:83:c6:57:96:3d:45:f4:
4f:17:23:60:1d:34:14:30:15:82:e2:9c:5c:ab:4e:
95:31:99:4a:79:21:c9:65:af:db:e3:d2:e9:3f:b2:
44:0c:b8:30:36:52:fd:16:26:c9:8e:f6:e7:1d:93:
36:2d:ed:f0:51:63:d5:69:72:a4:5f:7f:cd:e6:a8:
a0:52:61:87:5b:7b:5e:3d:15:47:c1:81:6d:89:48:
71:1b:90:df:5a:51:71:0e:99:1c:79:15:7a:1b:90:
f0:7f:ac:8c:18:ed:ac:51:cf:bf:51:07:b3:99:6d:
d4:14:4a:a1:c1:2b:06:46:62:29:e2:db:9b:46:83:
1f:a8:6b:ca:fd:2a:31:03:1f:b3:b4:4b:69:e7:e4:
6d:7d:1d:b6:ef:23:97:a5:b2:6c:a2:85:71:66:f8:
df:6f:5f:06:e2:ef:31:80:95:bc:92:7f:17:86:28:
82:7e:2a:d8:c5:66:b9:ed:bb:8f:68:ea:58:e5:20:
a6:20:9e:65:35:b9:c7:bc:a0:d4:5f:71:45:8c:78:
7a:c9:56:05:6f:fd:d0:41:8e:28:68:f7:33:c4:7a:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:2F:E4:27:2F:8E:11:05:95:97:3E:EE:D7:33:20:A1:21:65:6D
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:34:36:1b:34:15:31:9c:b3:80:cc:9e:cb:7e:a0:7e:63:
6f:86:db:9a:48:21:27:0f:c6:ab:52:9c:a4:cd:95:8b:ea:09:
96:d8:a9:fb:4b:65:75:65:77:cd:7e:b3:64:19:fb:fb:69:e8:
9e:db:eb:57:ca:49:9a:29:6b:cb:86:d4:36:6c:8f:4c:50:43:
7d:e7:af:09:32:de:62:ee:8d:14:0b:8c:fe:a3:33:cc:ef:c8:
d8:ad:f7:97:93:b2:f7:fc:99:34:f0:df:0e:40:e8:95:86:56:
aa:cd:77:c8:b0:df:a7:20:ff:3f:2e:9f:0c:19:5f:ee:38:87:
e5:f5:7d:65:8f:1a:80:ae:0a:55:cf:0e:90:7f:eb:22:69:d8:
ce:37:25:71:e5:e3:03:b5:3a:21:b0:9a:33:c8:ae:38:f2:cf:
98:79:3f:87:45:53:64:84:1d:bc:ca:4c:df:35:e3:ab:e8:58:
67:7d:42:de:59:99:a3:28:14:cd:f4:58:40:b1:d0:ab:40:91:
e3:bd:28:23:a6:f7:21:96:4d:17:14:b2:bb:46:73:b1:ed:07:
bd:b9:a3:88:47:67:fe:8e:96:20:a0:b5:0a:1b:af:f9:0c:86:
2d:22:d4:37:b5:03:9d:bc:fe:65:d8:58:93:db:b7:66:f3:5c:
4e:7d:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:51:15 2025 by rpki-client