This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: +BCmmyuEGcM4mzDhq4p+zYdBwBDfYyzz2iVtkhoDlRE=
Subject key identifier: F7:BC:DD:34:51:9A:48:19:AA:97:6B:7E:B5:54:EB:13:04:FD:FD:6B
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019B443751361155D81E84066376293FD2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 13D2
Signing time: Mon 22 Dec 2025 04:00:34 +0000
Manifest this update: Mon 22 Dec 2025 04:00:34 +0000
Manifest next update: Tue 23 Dec 2025 04:00:34 +0000
Files and hashes: 1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=)
2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: KXVgsApFtrZ/HdyLtfVc52H9JogNqTJ/Qe/Cs0S9g5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:37:51:36:11:55:d8:1e:84:06:63:76:29:3f:d2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Dec 22 04:00:34 2025 GMT
Not After : Dec 23 04:00:34 2025 GMT
Subject: CN=f7bcdd34519a4819aa976b7eb554eb1304fdfd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:56:f5:f9:b4:89:92:af:09:6b:b8:ad:25:
8c:a5:f3:62:52:ef:54:f8:3e:6c:5e:38:da:8d:89:
e7:c0:46:57:b5:af:e9:5d:15:e2:54:c4:4f:21:aa:
39:ee:e2:02:6c:f3:2e:65:d2:87:90:93:6a:97:91:
9a:de:17:6b:34:2e:b0:17:fa:c5:2c:24:4b:cd:3d:
2b:c2:e3:2a:08:bc:00:9c:c7:9d:98:49:f8:8f:8e:
4d:6c:24:00:43:a1:fd:bb:b2:6f:f3:00:7c:08:88:
c8:4a:23:65:01:d4:5c:e6:7d:f2:10:7b:be:75:9c:
ef:f2:23:cf:22:fe:1c:b7:26:8e:d1:28:41:b9:a4:
65:8d:2b:d4:69:36:ab:11:d6:19:26:d6:99:d1:44:
4d:40:0a:dc:ae:68:2b:38:1c:8c:3b:0f:97:b7:ca:
9e:69:e3:57:e0:c7:8c:93:bd:d4:bb:f3:bc:8d:f8:
c4:0c:a2:eb:f6:f7:89:09:dd:3b:f2:5b:95:87:24:
e6:bf:c4:ca:cd:df:70:e3:1f:3b:26:51:21:c4:f0:
f4:58:5f:a8:df:b3:2b:b2:58:b2:b9:cb:65:b1:f3:
1c:f8:41:5c:b3:9f:be:2e:05:5c:bb:b9:32:e4:2c:
89:78:4f:a6:fd:0f:be:2f:ba:de:99:68:5a:bf:e0:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:DD:34:51:9A:48:19:AA:97:6B:7E:B5:54:EB:13:04:FD:FD:6B
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:57:dd:c8:11:0a:b8:69:9d:5d:f7:85:28:34:ed:c1:ef:d2:
f1:49:66:3e:3a:0b:16:1d:4a:43:a3:53:dd:90:ec:52:6c:99:
e5:a2:b3:a4:f9:5e:d3:a5:ef:6b:dc:6d:fb:69:58:ab:3f:56:
d8:9d:cd:15:95:98:85:bb:e1:85:c1:bd:a8:2a:95:fd:02:90:
e2:99:08:db:cb:36:ae:20:3a:af:21:97:cc:da:bf:db:19:0c:
d1:25:cd:09:d0:63:11:de:00:80:d4:26:6a:83:91:51:85:34:
25:c2:e8:b0:3a:12:2e:c4:a7:44:06:13:bf:c6:4f:00:58:18:
76:72:40:84:21:4f:3e:4d:43:ef:e4:4a:ed:5a:ea:dd:ce:82:
19:6c:dd:12:df:29:a9:e7:b2:ac:32:d8:8f:86:2c:65:35:03:
9c:e7:75:9d:14:29:06:ad:7f:b8:38:a5:81:ec:0f:fd:77:e4:
28:be:e9:74:d4:8f:6d:e3:90:1d:b1:c9:a4:99:e1:fc:7b:1f:
da:7b:5a:4c:ee:a2:7f:43:03:3e:43:bb:e1:5b:e9:6b:2c:bc:
12:c1:1a:83:cf:71:28:a3:f5:54:1c:ac:4c:6d:2d:1d:65:8c:
6d:f7:9c:3a:3b:91:3e:90:f4:b2:5b:99:83:43:3e:fe:0a:bc:
b2:20:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:33:00 2025 by rpki-client