This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier: TtneFIErvR6XMcYy1/30m/gJc6tlo4HaoOq5V77uJgY=
Subject key identifier: 08:E0:F8:86:B4:13:0D:6C:C6:83:82:72:88:3B:85:8D:CF:49:FD:A0
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019B3BD9AD50A00ADEAC2613E0A0B11BA521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number: 178D
Signing time: Sat 20 Dec 2025 13:01:19 +0000
Manifest this update: Sat 20 Dec 2025 13:01:19 +0000
Manifest next update: Sun 21 Dec 2025 13:01:19 +0000
Files and hashes: 1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=)
2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: f0ZudtP6jGR16wCPulK7Wp80bfTrJMwCIvJGEWfUTMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:ad:50:a0:0a:de:ac:26:13:e0:a0:b1:1b:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Dec 20 13:01:19 2025 GMT
Not After : Dec 21 13:01:19 2025 GMT
Subject: CN=08e0f886b4130d6cc6838272883b858dcf49fda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:93:39:a2:68:e4:ee:ee:8f:5c:94:05:2a:
5c:db:ab:73:a0:b7:05:30:94:9c:57:53:a7:bf:c9:
55:0e:4c:1b:ec:21:00:d2:2f:6f:00:4c:eb:02:3f:
9b:1b:4c:db:a2:b0:0e:54:63:ed:ea:b9:1c:94:cb:
d4:6e:dc:f5:5a:66:f9:15:2a:90:2c:f7:9d:bb:12:
0b:f0:78:b4:8e:b9:c5:c4:94:4b:36:25:9f:da:97:
4c:ee:ac:92:92:4d:5e:68:bb:37:58:b0:0e:66:c8:
3e:d8:41:83:a7:b8:a1:b1:5a:dd:57:ff:50:27:7f:
e8:17:77:61:bf:e1:1a:8e:c9:34:6a:23:43:92:51:
8c:b0:18:ce:97:51:da:ad:2b:70:22:b8:91:71:ab:
00:b8:d6:21:db:e2:ac:21:02:41:01:2e:23:cb:f4:
21:c7:cd:0d:0e:49:6f:8f:77:b2:5e:87:84:07:19:
29:2b:59:7a:fe:f6:f4:d8:63:a7:15:97:57:eb:87:
57:6a:ce:f9:11:30:e8:ff:6a:dd:8b:a0:2e:7d:af:
ec:89:a8:8e:e8:89:a1:c3:28:b3:fd:e7:e2:55:5e:
cd:84:02:62:65:7a:be:e8:60:2c:41:67:95:51:be:
ad:6b:93:c8:d2:bd:9b:85:fb:03:45:5d:de:67:cc:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:F8:86:B4:13:0D:6C:C6:83:82:72:88:3B:85:8D:CF:49:FD:A0
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:d9:a2:6b:ad:a4:06:81:98:6f:f0:2b:95:83:bb:61:17:
d6:8a:5f:ad:41:37:04:7d:10:81:0d:a1:f0:d3:51:c0:98:1e:
1a:3d:c8:4f:1c:35:6b:68:f1:1a:ff:f0:aa:c4:5a:59:f9:a8:
75:ca:35:9d:f6:f2:a3:67:8a:6e:e4:80:8d:6f:e9:24:aa:75:
bd:30:61:c1:55:dd:ef:0d:c8:1f:f6:6b:4e:a3:04:c4:f0:ce:
59:d2:54:49:ac:04:dd:ff:f0:e2:29:c8:4b:6a:b0:ca:f6:ab:
e5:03:0a:43:7c:d8:f5:31:db:c3:7b:32:f7:81:5e:a4:2c:f5:
7b:56:26:c1:ea:ea:bc:0d:f9:38:a1:f3:14:d0:44:93:ba:32:
07:b4:10:04:d3:9c:b6:0f:82:8d:db:68:50:f4:42:29:b9:98:
06:e4:24:b9:97:b3:fc:e5:48:c6:fe:31:ca:e8:4e:04:e0:f3:
c1:b7:b1:db:be:7a:93:d9:16:a1:c3:71:1d:38:8f:66:20:45:
4d:83:64:30:40:0e:74:88:01:3a:00:b2:89:9d:68:bf:70:18:
0b:58:a9:5d:9f:94:19:ee:71:e2:9e:c2:62:87:81:77:e1:a4:
9c:ed:24:89:c6:97:d0:3f:37:02:f6:d6:7f:92:72:fd:ad:65:
22:e3:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:53 2025 by rpki-client