This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: zioP+BpR/Cw6We7L217rP9I74BDKoHC9EOx5zFJhV8I=
Subject key identifier: 0B:4D:C2:D8:CE:29:92:14:17:C4:C2:7D:F2:AA:FC:38:D6:F9:37:40
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019B3D236FF788BE5A42A04933594F883B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 178D
Signing time: Sat 20 Dec 2025 19:01:31 +0000
Manifest this update: Sat 20 Dec 2025 19:01:31 +0000
Manifest next update: Sun 21 Dec 2025 19:01:31 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: TlLJGjZtdMwv/z/yBQIN2T0O06ROSWDs1t4TZn0c/l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:23:6f:f7:88:be:5a:42:a0:49:33:59:4f:88:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Dec 20 19:01:31 2025 GMT
Not After : Dec 21 19:01:31 2025 GMT
Subject: CN=0b4dc2d8ce29921417c4c27df2aafc38d6f93740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:c1:ce:84:9a:8a:65:3b:d9:22:d6:52:d7:
f2:e4:91:bb:28:3a:51:04:57:d4:1e:21:93:62:ac:
18:59:ae:95:a2:cb:fa:7c:29:a1:e9:5e:54:1b:80:
64:7a:73:88:62:cd:5d:54:d1:1e:8c:20:76:3e:04:
30:18:d9:1f:aa:42:b5:75:d2:20:3a:76:87:61:e4:
aa:db:70:0a:4e:d6:dc:0f:80:1f:be:e1:be:38:f8:
3f:b1:f1:1d:5e:fd:76:99:3c:c2:91:96:1e:11:ca:
82:38:ab:34:a5:73:cd:4d:0d:d5:53:b4:05:33:b4:
8e:19:b1:3e:41:5f:05:a2:ce:ff:23:f8:a1:51:73:
a5:96:cf:b0:2a:a9:dd:1a:de:4c:2c:a9:2b:cb:ad:
49:e2:25:08:94:ec:20:1d:b8:03:2a:67:83:13:18:
72:f7:66:fe:fd:01:82:b6:15:14:af:f5:02:03:50:
36:b9:09:38:cc:07:36:ac:da:17:95:c0:7f:42:a3:
14:d0:47:ae:8f:51:47:92:c9:22:48:0c:60:37:66:
ed:47:c3:4e:5b:4e:79:dd:38:40:57:7e:c2:6c:e5:
4c:8a:58:aa:d1:3b:ee:20:de:d6:7c:6c:c3:08:ff:
66:83:94:e8:c2:a1:04:a4:17:a6:d2:43:2f:2e:a7:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4D:C2:D8:CE:29:92:14:17:C4:C2:7D:F2:AA:FC:38:D6:F9:37:40
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:af:ef:b0:9c:e5:ef:49:9e:f6:25:06:59:6d:b5:ac:38:
d4:92:2d:8b:c0:c8:05:8a:00:8c:20:18:1c:82:01:cc:98:67:
b2:b4:bf:7a:4e:9c:53:44:b6:06:46:bf:17:d7:5c:0b:de:f5:
fc:27:53:b0:43:15:97:b9:46:65:fd:6a:ee:b8:7b:fc:80:33:
d0:c7:86:23:98:8b:7d:5a:9d:7e:f2:c4:70:a6:f1:d8:ba:75:
dc:e9:89:9a:75:6f:c8:10:7b:84:a8:3b:34:a6:c1:ca:f6:d6:
65:ac:bd:e6:47:01:8d:af:eb:13:e1:d8:8c:de:ae:51:9e:4e:
1a:b2:d7:4d:bb:97:b0:b7:0d:3e:7c:1a:cf:8e:0b:45:4d:1c:
fe:8f:42:ea:36:c0:ce:2a:ad:ed:29:b4:45:6b:93:b7:d5:77:
4a:43:bf:17:0d:4e:33:a3:71:91:4b:42:88:e0:61:34:21:e1:
d4:51:d3:63:5f:08:76:e0:3c:a6:17:13:dd:a9:e8:38:4a:34:
a0:ab:78:ec:db:85:20:e8:2c:f3:62:b7:10:bf:49:c6:67:b4:
98:a1:34:24:db:8b:90:85:2b:c8:4e:d9:a2:89:e6:8c:2c:8f:
98:50:3b:96:9d:ef:1c:2b:b0:4e:54:01:d6:db:c6:55:d4:5b:
ad:08:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:56:39 2025 by rpki-client