This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: G4E5fvOh1VSZCpixkDz58nyANE7rbJqzfWzkbZcJXVI=
Subject key identifier: A1:73:56:83:10:88:F5:5A:8B:04:13:86:83:19:6B:F2:49:49:96:C9
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019B3C108227D4C2320C909155031DABDC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0E33
Signing time: Sat 20 Dec 2025 14:01:13 +0000
Manifest this update: Sat 20 Dec 2025 14:01:13 +0000
Manifest next update: Sun 21 Dec 2025 14:01:13 +0000
Files and hashes: 1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: ShcXcTzBuTpZRJGfBfgiFtRujM7jgyvAO5D2l9eTIXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:10:82:27:d4:c2:32:0c:90:91:55:03:1d:ab:dc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Dec 20 14:01:13 2025 GMT
Not After : Dec 21 14:01:13 2025 GMT
Subject: CN=a17356831088f55a8b04138683196bf2494996c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:23:6f:bb:0b:a2:a4:ed:65:a8:16:cf:4c:
55:9a:e0:f6:13:d1:d3:e1:a2:1b:23:db:c7:e8:2e:
7f:e6:7f:19:db:31:e3:4a:23:2a:8d:7f:90:4b:48:
df:12:a4:40:06:d4:e6:ce:7f:8f:f2:cf:25:49:30:
49:42:62:0a:5f:88:5b:57:47:94:03:88:b9:91:2e:
df:60:b5:dd:a2:bb:1c:e9:1d:13:fb:ea:1d:b3:29:
a6:85:fb:cf:be:59:6e:b1:ac:65:b2:53:8c:85:38:
48:14:b3:22:8d:dd:ea:5d:68:cf:1e:32:90:82:d4:
a5:eb:56:f0:bc:38:f1:ea:c8:84:3c:0c:d1:a1:44:
c3:8d:a1:6a:ad:72:c4:a9:42:4e:3e:9f:e6:74:88:
31:d8:4f:81:02:a4:c6:0b:b5:cb:b2:a6:c5:6e:d5:
bd:b0:76:2a:44:36:2d:83:3d:04:ba:b4:9a:32:c8:
81:ad:4b:7c:11:1d:9a:42:d1:70:84:27:5b:2e:c3:
eb:cc:d2:ed:1a:58:b3:28:47:84:9d:a8:5e:ca:e9:
a2:1b:30:df:49:f9:81:73:44:a1:f4:62:ba:be:ec:
70:1b:45:b8:bf:54:10:fb:38:a2:f2:3e:c6:45:af:
b6:72:a8:0a:79:33:9b:7d:b1:91:0a:14:36:51:93:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:56:83:10:88:F5:5A:8B:04:13:86:83:19:6B:F2:49:49:96:C9
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d0:18:2e:fc:2e:62:79:e6:8c:68:86:83:10:8e:1e:10:0c:
9a:fd:d1:17:9f:e0:48:a7:73:d5:0a:3f:ff:7b:ec:34:7f:30:
44:64:d5:66:79:7e:c1:58:d6:5f:2f:67:42:20:79:6d:9f:15:
46:e2:34:d5:fb:53:9c:28:7c:e6:97:e6:b5:6d:13:5f:f3:54:
d0:25:04:ed:27:a0:c5:e0:69:3d:4f:e6:43:62:86:6a:6b:ec:
03:85:50:fd:d3:c8:d1:bf:82:a1:2b:82:af:39:0e:1a:e5:a0:
a0:7e:f4:e2:fa:e6:45:d2:0e:6c:8e:78:7c:39:32:63:e4:bf:
2f:d9:96:88:0b:c6:a7:bf:2e:56:80:94:24:55:eb:bf:cf:1b:
47:70:93:13:95:8b:4b:b4:3f:fe:ef:dd:c4:40:15:fb:f0:16:
13:c1:79:65:c6:4e:58:ae:b9:c0:a6:ae:60:98:66:ab:e9:18:
3d:24:be:c6:2c:a8:17:e1:e6:d8:ab:bb:5d:8b:a0:79:c5:33:
38:18:57:a4:0f:80:49:92:d6:ad:d8:b7:9b:3c:cf:2b:ed:b8:
c5:f6:f3:13:77:53:65:4b:f8:d2:26:f1:91:cd:c4:04:e7:e4:
6b:80:1c:1a:1c:a1:42:2c:04:10:35:02:b1:eb:5b:03:38:b4:
8a:ee:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:49:32 2025 by rpki-client