This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: M/Njrfa+Eu/POd6+ZxSPFPjwabI1J2powPNBj5YsX9Y=
Subject key identifier: 2C:9F:2D:3C:BA:7E:31:F2:F9:46:9C:E5:FD:0F:57:81:14:29:45:CA
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 019B5E2E28809B58D26699378E040ABF3F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 179C
Signing time: Sat 27 Dec 2025 05:00:41 +0000
Manifest this update: Sat 27 Dec 2025 05:00:41 +0000
Manifest next update: Sun 28 Dec 2025 05:00:41 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: M33sA7ZgLs66fPi98jbQlsg9yHZ5rGlNVSH80d1zBtA=)
2: zBQZLdLmaGh_-g3P--vX0vIobSg.roa (hash: CKHg12RKerpOenghGOhIchwHfIG43cp9IM1fsSnSC4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5e:2e:28:80:9b:58:d2:66:99:37:8e:04:0a:bf:3f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Dec 27 05:00:41 2025 GMT
Not After : Dec 28 05:00:41 2025 GMT
Subject: CN=2c9f2d3cba7e31f2f9469ce5fd0f5781142945ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:0d:e3:42:f7:b9:82:38:de:89:41:58:89:
62:cb:d7:62:37:5f:5d:c4:70:2c:05:f3:23:18:7d:
50:a6:1d:5a:8c:69:ef:91:3e:17:be:73:58:3e:23:
ab:99:1e:67:9b:22:18:bf:37:8a:3d:9d:56:a4:cb:
01:d9:00:17:e9:1b:94:b5:af:a0:75:1a:ce:3c:49:
92:b8:c3:6d:3b:10:12:f1:84:c6:03:c3:7b:45:f9:
58:7f:d5:10:05:fc:94:71:15:20:fe:fa:99:1f:ec:
9a:e0:6c:98:70:69:e0:eb:a5:21:66:27:60:99:6e:
12:fa:ce:92:93:d6:cd:d7:31:91:de:cb:75:04:80:
30:4f:df:49:97:42:25:bf:cd:5d:dd:b1:57:95:f2:
62:04:54:58:15:a2:f7:59:12:2a:8b:41:c3:20:68:
f6:40:24:d8:43:b2:a8:d4:81:fa:27:2d:d9:06:3d:
59:85:7c:88:5c:d9:e6:d3:b9:79:f1:22:f1:02:6a:
2e:5d:25:4f:21:59:2e:0f:fb:a1:61:d0:2c:1b:4b:
07:e5:fb:08:62:14:a4:e1:be:4a:91:be:45:34:2b:
65:a0:ba:24:03:ef:cb:4c:6f:50:14:f6:6c:e5:a2:
52:a8:e4:ed:69:6b:6a:e0:2e:c3:a5:59:36:e3:37:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:2D:3C:BA:7E:31:F2:F9:46:9C:E5:FD:0F:57:81:14:29:45:CA
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:7b:ea:2f:31:55:18:5b:8c:f4:dd:7b:f4:06:a2:83:8a:5a:
52:e6:1f:9e:69:98:57:aa:1b:7b:1f:96:2c:e0:40:7f:dc:db:
0b:98:51:7e:bd:33:07:0f:73:b3:3f:ac:a0:73:a1:a0:b9:87:
65:b5:05:42:b6:7b:23:79:9d:b1:a9:c4:98:91:46:39:ce:0c:
26:e7:59:e0:61:07:ca:34:f4:9f:46:5b:39:b3:9e:a2:6a:28:
15:9b:6f:d7:42:d7:ef:c3:46:da:83:43:4f:3a:8e:d9:54:9b:
16:6c:0d:46:d5:a0:b1:93:34:30:b5:76:c9:ba:6b:ef:0f:f0:
f5:d4:e3:99:43:4d:05:12:ff:9c:a6:60:09:dd:ea:77:cd:d3:
b7:5b:bb:05:81:d6:fe:8c:b0:3c:3b:6a:09:b0:ab:44:a4:c5:
de:1e:5d:76:0f:17:f9:69:84:ca:78:b7:86:18:f0:dc:a3:ab:
35:64:47:89:fe:67:07:5e:9b:99:0c:15:14:e8:8f:43:1f:a9:
14:8f:ff:27:81:43:3b:e3:5d:84:21:59:bb:99:a8:fe:3f:c6:
95:d0:e2:5c:da:53:b0:a5:61:9b:b6:85:0c:e3:8b:d7:b7:9e:
86:08:36:8b:6e:d3:d1:c9:de:70:cf:e3:4a:f6:c7:17:fe:6d:
3c:2b:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:23:31 2025 by rpki-client