This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: h5G+Bp8vJHgXotoVrjCFTK1nBKu6XxnOYlHVOilIR5U=
Subject key identifier: 2B:FE:95:04:6B:9F:8B:E0:CD:4E:C4:71:4C:42:57:35:DD:48:DE:63
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019B3D5A3F94B2AF4236CAE74FE7A8BDE8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 17A6
Signing time: Sat 20 Dec 2025 20:01:23 +0000
Manifest this update: Sat 20 Dec 2025 20:01:23 +0000
Manifest next update: Sun 21 Dec 2025 20:01:23 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: XwWT1BdmCzh4Zu03/Mg6ioVeqHAYfPzV3NgZ2L/lrFw=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:5a:3f:94:b2:af:42:36:ca:e7:4f:e7:a8:bd:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Dec 20 20:01:23 2025 GMT
Not After : Dec 21 20:01:23 2025 GMT
Subject: CN=2bfe95046b9f8be0cd4ec4714c425735dd48de63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:a2:c3:04:64:01:e4:73:09:2e:38:f9:d9:
fc:83:08:86:fa:77:c5:f5:94:5f:13:55:36:65:d1:
9c:d0:8d:c5:9f:77:85:4a:9e:f7:41:f9:2c:29:66:
f9:1b:b6:12:03:82:15:7f:38:d0:9c:3b:c9:d1:e2:
37:8e:68:27:43:31:e6:4f:62:eb:f8:48:5e:52:7d:
e4:82:3e:39:de:03:b0:21:80:61:e5:25:26:0d:b2:
27:4b:a2:d7:13:80:ee:cf:ba:28:ef:23:d5:c9:c3:
2c:ee:d1:a4:f6:4f:88:a5:2e:cb:10:ac:a9:39:3e:
22:27:21:67:9a:7c:29:b1:79:fd:8f:b8:ee:a3:2b:
79:cd:80:25:44:a3:7a:d6:d4:80:6c:2a:2f:ae:cc:
25:a7:cb:e2:13:6f:ea:dd:90:24:87:c5:8d:25:a4:
b5:12:51:29:cf:19:13:84:61:34:46:4c:a7:c8:5d:
52:a8:fc:5e:bf:7f:b6:c3:a7:89:4c:54:cf:fa:27:
35:51:ad:0d:0a:7a:af:3d:f8:2b:b4:96:85:dd:87:
2b:85:63:04:11:91:c5:a5:f2:12:09:0e:eb:3c:95:
e8:1a:1e:f3:02:eb:0c:71:2e:0b:8b:9e:b4:b3:81:
06:6e:0e:3a:2c:78:7c:7f:10:0c:c8:bc:e7:8c:b6:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:95:04:6B:9F:8B:E0:CD:4E:C4:71:4C:42:57:35:DD:48:DE:63
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:b0:03:4d:ac:79:37:ce:1b:23:5c:a9:0a:bf:da:13:8d:
40:4b:e6:d0:5e:ec:02:f8:a5:3b:9f:ee:28:d8:fc:01:df:3f:
e7:fc:61:4a:12:2b:6b:14:8d:50:bf:7a:b1:67:0f:f9:76:15:
59:da:e6:ef:e8:65:5f:f4:c1:db:5e:95:ff:b1:61:7a:d4:d3:
c1:9b:ae:55:bb:3d:e7:b1:96:be:e5:fb:8e:dd:55:d4:f5:af:
6e:b3:78:d4:73:d7:4a:23:73:a8:dc:e2:29:df:d0:0a:01:9d:
8f:31:79:f3:55:63:27:94:83:a8:79:27:2d:3b:b9:33:36:b3:
4e:f4:ce:c9:f9:21:6a:53:20:ca:92:de:70:5c:3a:47:dd:f4:
76:39:5c:88:3b:04:e6:9d:8e:f7:d1:d5:4d:83:92:fe:2a:be:
cb:0d:aa:ac:ec:47:1e:41:ff:93:46:16:83:0a:e7:48:16:57:
63:89:3d:f1:8c:65:51:9c:e7:af:37:f1:48:3c:49:3e:08:e8:
b1:4d:9d:48:8b:e9:3a:56:27:31:ee:7c:06:47:64:5d:2d:30:
08:67:54:78:c5:d6:1a:48:82:e9:5c:57:5f:08:1d:b8:d2:1c:
26:fc:90:d0:fe:78:8c:73:ea:48:97:b0:9f:83:bb:16:fc:73:
97:70:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:05:18 2025 by rpki-client