This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: 0oVjfWKl1THrdfj94hcsYFrNE9hi1opeKv6QIrEN/p0=
Subject key identifier: 06:09:DD:7D:9A:A6:78:52:38:09:B5:7F:33:18:DE:1E:93:A7:B0:78
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019B3C46DA5687CBEE8DF0A74214C59DC149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0755
Signing time: Sat 20 Dec 2025 15:00:34 +0000
Manifest this update: Sat 20 Dec 2025 15:00:34 +0000
Manifest next update: Sun 21 Dec 2025 15:00:34 +0000
Files and hashes: 1: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: ENV8nj8BfDu8oat3oBKnjoObK24fBlQmYhemVVK27bY=)
2: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
3: x35TZBfjRzydIntP1wj4bzkffVI.roa (hash: m3lAcV9738Nh7P2x7upDgBTiTVZP/HAse993nyHmPOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:46:da:56:87:cb:ee:8d:f0:a7:42:14:c5:9d:c1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Dec 20 15:00:34 2025 GMT
Not After : Dec 21 15:00:34 2025 GMT
Subject: CN=0609dd7d9aa678523809b57f3318de1e93a7b078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:af:0d:d0:06:1d:d6:cf:4c:88:e9:8a:e2:
d0:8e:cb:a0:28:80:71:90:7d:3b:85:1b:3f:3a:21:
7a:4b:f8:d2:c4:9f:8e:2a:b6:8f:89:da:a3:08:41:
78:77:f6:4f:5f:ba:9a:b5:6b:e1:70:2f:17:74:6f:
b9:c8:65:b4:e5:6f:d9:9e:e9:69:76:c6:aa:4a:a4:
70:a3:4d:e2:34:59:9a:b3:7f:b3:ba:e9:fc:9f:69:
e5:59:66:b7:01:60:6f:48:cb:c3:31:42:b5:e6:02:
74:6b:38:3a:26:7c:6e:ea:09:6f:1d:ab:fb:88:15:
63:da:24:b6:44:d1:7b:5e:a2:71:15:b5:f0:21:96:
71:e9:a8:50:b5:98:c4:20:22:fd:f5:9a:0e:07:67:
b4:62:0c:98:88:3a:66:88:9f:55:e4:65:47:f7:e0:
f5:c9:6b:93:ee:63:01:63:61:15:2a:d4:50:ca:00:
cc:7f:fc:66:d4:67:24:15:c1:9d:6b:61:38:3c:bf:
fc:3e:63:85:01:aa:d1:bc:f3:af:1a:36:f4:87:10:
1b:73:8f:c1:2b:98:e0:06:00:68:9c:cc:88:9a:f6:
5c:c4:a5:13:7a:7e:89:e6:aa:bb:cf:7e:f0:30:f3:
b7:44:43:0f:dd:14:8e:2d:14:1a:16:9d:40:ff:0f:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:DD:7D:9A:A6:78:52:38:09:B5:7F:33:18:DE:1E:93:A7:B0:78
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:17:2b:d8:a0:bf:e8:91:57:bf:28:33:03:32:53:97:43:
56:ed:19:cb:79:b4:73:79:36:cd:53:de:90:38:3a:7b:95:20:
77:62:59:2d:13:2a:c1:1a:8d:2b:bd:ae:bf:b7:d5:db:60:d8:
a5:6e:35:e7:ea:21:a0:12:f6:c4:59:c4:ce:50:92:72:ea:bc:
d0:a4:4e:a8:be:a2:f1:80:05:41:df:2e:44:bd:f7:97:24:ee:
26:5f:11:4f:61:af:78:ff:84:0d:a1:ff:0a:a2:c2:d2:8a:09:
48:92:27:be:fe:1c:ff:19:70:95:3d:18:88:ab:8e:d3:7b:cc:
71:e7:30:d0:b0:dc:be:c0:94:03:e4:f3:99:40:bf:72:2b:94:
23:60:12:a1:99:92:01:ca:8a:15:ce:fe:4f:78:72:d7:72:18:
ed:f4:5e:3e:9a:ff:aa:aa:40:ab:69:ac:6c:ab:5e:a9:6f:0c:
56:21:63:4c:ab:75:8d:99:53:57:31:a5:ab:7b:ce:14:02:3a:
82:29:4f:b0:7f:e7:e3:89:4e:ba:96:1d:81:e2:5d:42:30:fb:
70:80:d2:23:1f:1f:02:9d:69:d9:a2:51:4b:fb:58:be:c5:47:
6d:1b:2c:e8:6d:fb:ff:eb:62:50:ee:4e:04:ec:0e:23:a1:24:
2c:e7:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:10:04 2025 by rpki-client