This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: 5IozelCkQJw6lUoPLNGc1Ig7PLSr6X8zO6OHEji0aHk=
Subject key identifier: C9:59:60:D0:C4:5A:24:7A:7E:86:F7:81:20:67:40:4F:DC:75:11:88
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019B5C094166F8459C6488ECCE3D25D9E8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 179B
Signing time: Fri 26 Dec 2025 19:01:08 +0000
Manifest this update: Fri 26 Dec 2025 19:01:08 +0000
Manifest next update: Sat 27 Dec 2025 19:01:08 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: R75uWWr26V5HsSLOxRiyKdmSNh1Rmwiv+z2zzMbRaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:09:41:66:f8:45:9c:64:88:ec:ce:3d:25:d9:e8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Dec 26 19:01:08 2025 GMT
Not After : Dec 27 19:01:08 2025 GMT
Subject: CN=c95960d0c45a247a7e86f7812067404fdc751188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:21:b2:ae:58:ea:3d:ea:01:09:3e:02:47:ff:
9b:93:66:a1:de:5a:17:4c:bc:34:4b:39:cb:25:db:
73:41:3f:15:c3:f1:ed:d9:2c:d1:57:5a:e8:2b:0b:
e5:ce:3c:3e:b7:4a:00:27:9a:67:a2:02:30:71:83:
b9:7a:d5:e4:9b:f5:6a:5a:2e:3a:a4:33:35:18:32:
16:97:fa:9f:71:18:87:c8:2d:2e:54:16:5d:9d:a8:
77:8e:97:69:c1:ef:ce:72:8d:23:92:68:46:09:44:
1c:43:1e:2c:0d:fe:45:c2:f9:75:46:7b:e0:f2:7e:
b9:1f:4d:6a:5b:41:51:bd:91:73:9a:e5:0f:d4:a9:
3e:72:da:d5:47:0d:df:0d:17:6d:72:ea:44:2b:14:
3f:e6:35:90:29:7a:e0:20:9e:74:7f:33:98:50:52:
9e:fe:94:e1:ef:2b:ff:c1:48:19:a7:1d:e3:66:f8:
7f:07:e0:fa:8b:d6:79:ba:6a:ee:be:82:36:1a:d4:
71:65:d2:28:63:36:d3:ff:a9:bd:58:17:d8:e8:a2:
32:9a:6c:ca:5f:8a:25:8c:00:e7:62:28:91:9d:33:
d6:7a:4d:ca:0c:16:41:4f:1d:2d:9c:5f:d7:b3:33:
19:ad:77:1c:76:f3:d7:78:6a:7f:a5:24:2e:74:22:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:60:D0:C4:5A:24:7A:7E:86:F7:81:20:67:40:4F:DC:75:11:88
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:f1:2d:41:4c:8f:78:a1:9e:b6:bb:87:6b:3f:ee:ed:1a:
a9:c9:98:5e:81:cb:59:d7:a9:c8:b7:42:1c:b3:dd:10:82:64:
d4:4c:51:85:ca:c3:13:33:4c:4c:72:b1:cf:3a:3b:01:26:a3:
51:c0:2a:8c:7c:34:8d:f0:e3:58:14:a4:32:a6:4c:56:a1:ea:
a1:02:dc:cc:e1:a1:41:9e:a8:e4:2c:79:67:30:ff:5b:14:e5:
c8:56:d4:03:ff:51:d1:1b:34:63:7c:31:83:2b:c2:6f:2b:e1:
67:88:90:17:bc:d3:a0:96:fe:de:66:ec:99:b7:3c:af:a2:70:
90:2d:46:99:c3:3c:e9:19:2a:b1:13:d3:a4:89:1f:b3:02:5e:
7f:d8:a2:87:b6:43:91:a7:17:29:c2:c2:b5:d5:df:0b:bb:a5:
d6:81:c8:1f:89:92:f7:0f:cd:20:dd:03:63:b3:64:6b:dc:0f:
e8:2d:f8:94:01:23:c0:27:39:24:e6:c9:16:03:cf:86:de:30:
a7:62:66:98:40:98:82:98:55:c1:3f:3b:ad:2c:0c:10:af:4f:
8b:b1:e3:be:88:65:0c:27:f3:9e:74:4d:e2:16:16:27:d7:bb:
c3:6a:46:cd:f4:91:da:f4:da:44:c0:22:ba:aa:0c:62:9f:35:
06:ce:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 02:36:12 2025 by rpki-client