This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: PFTEWDMebXIHvfi98QGGIItYlujKWMiY75Ce08zksRg=
Subject key identifier: D6:92:4B:54:CB:27:1D:37:B0:18:CB:47:B8:6F:68:9E:F2:DB:73:2C
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019B601D4931C46B167742B5ECBD1A74BAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 105B
Signing time: Sat 27 Dec 2025 14:01:30 +0000
Manifest this update: Sat 27 Dec 2025 14:01:30 +0000
Manifest next update: Sun 28 Dec 2025 14:01:30 +0000
Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: Yvh7zaV4qjVnWgeVeWRF9QaLQgdJhbLHcZ3nzDd8yo8=)
2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 08:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:60:1d:49:31:c4:6b:16:77:42:b5:ec:bd:1a:74:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Dec 27 14:01:30 2025 GMT
Not After : Dec 28 14:01:30 2025 GMT
Subject: CN=d6924b54cb271d37b018cb47b86f689ef2db732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:a3:2d:7e:b3:0a:c8:3d:85:f0:04:9c:b9:
b1:5c:d8:e0:65:10:84:44:37:e0:2a:9b:27:2f:be:
63:92:59:34:7f:66:1f:16:84:a0:a7:92:b5:87:3d:
53:b8:3b:99:af:79:7c:29:be:72:ec:db:49:e9:5e:
3c:44:6f:8c:00:21:66:19:7f:67:35:b9:24:45:c1:
cf:bf:ee:8f:98:95:c2:3a:56:4a:91:18:80:fd:a1:
1e:ea:df:1c:14:e4:1a:98:ef:0b:e7:2e:aa:27:f9:
2d:d5:4b:c4:b2:35:49:ce:90:aa:52:ad:e8:97:f1:
4a:50:b1:11:e9:08:54:ab:18:0c:5a:1b:1b:e6:88:
c0:c8:f2:8a:11:55:86:b8:5d:57:26:c4:5f:66:8c:
2a:54:e2:8e:ef:eb:ef:04:46:5e:3e:5c:c8:67:ae:
a6:67:18:dd:7c:9a:f1:a6:48:75:66:03:6c:bb:f1:
87:b4:8b:2b:ab:b0:57:a5:01:23:00:fa:61:fb:31:
f8:74:c2:42:81:69:e0:1b:2c:0c:29:de:e3:ad:56:
85:64:c8:93:6c:4b:d7:28:b9:e3:d3:25:4a:83:01:
86:89:66:cc:67:e9:b4:dd:79:e7:df:96:db:86:ef:
b0:77:c2:87:ab:a3:b8:a6:cb:21:ce:55:b7:f8:55:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:4B:54:CB:27:1D:37:B0:18:CB:47:B8:6F:68:9E:F2:DB:73:2C
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e3:0d:79:4e:06:21:bf:07:03:61:d1:1a:31:5e:2f:1e:65:
0d:a3:1f:b0:c7:b2:73:4a:a1:91:6b:c9:11:52:87:d1:56:73:
31:56:a4:e8:53:aa:4b:24:40:a0:4b:cb:bf:20:08:92:00:5e:
9d:d5:94:20:04:7f:49:7e:3e:6e:a0:27:9a:8a:ff:d4:26:d6:
54:a1:6f:2c:77:24:0e:83:0f:b7:8f:ce:fe:27:45:93:fd:17:
b7:50:8e:34:bb:5e:5b:b6:53:93:e2:8b:a4:b9:8e:71:40:64:
af:06:fc:d1:cd:93:08:b8:96:1f:29:7c:d1:0f:8a:26:49:a5:
63:07:be:1e:93:d5:cf:02:16:16:9f:e1:b2:7c:e7:33:d7:dd:
ce:22:a9:92:8c:3c:d4:32:38:8e:d0:d1:76:f2:ef:6c:a5:8e:
fa:d8:6d:8c:81:f6:8c:18:be:6c:ec:25:a1:6c:d2:1b:3f:23:
f3:54:a8:11:e2:e1:63:ed:3e:33:f1:23:6f:96:f2:ef:93:72:
67:c6:a8:88:48:48:a9:00:6c:a3:68:df:ea:e0:fd:9e:68:1f:
2a:92:d9:c7:4c:b0:32:68:1f:cf:df:6a:b1:51:68:84:5e:bc:
5e:27:46:ea:a3:38:36:90:fb:b9:82:82:46:0c:6f:d0:d8:62:
cb:5a:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:40:43 2025 by rpki-client