This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: nxU8bA/HLBp+oUDac7W0Vfk89fKNg5bjL1KugWHAr8Y=
Subject key identifier: DE:72:69:A1:21:D8:B3:7D:D1:2C:20:85:11:47:8F:56:76:27:16:02
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019B37579937ACBB20D082BA4B6630D8BBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 03D0
Signing time: Fri 19 Dec 2025 16:00:46 +0000
Manifest this update: Fri 19 Dec 2025 16:00:46 +0000
Manifest next update: Sat 20 Dec 2025 16:00:46 +0000
Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
2: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
3: LXf5lLnTSduTm8Y4-ZFOkzEWaRE.roa (hash: eOFvk5CuTujGAeTIr7JdTBGuzY2jhTziJfw9wzb3/Po=)
4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: fFhXRp9h87F957LO4qio/DSOnIDE48BLQX/9Xte2YEQ=)
5: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
6: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
7: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:57:99:37:ac:bb:20:d0:82:ba:4b:66:30:d8:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Dec 19 16:00:46 2025 GMT
Not After : Dec 20 16:00:46 2025 GMT
Subject: CN=de7269a121d8b37dd12c208511478f5676271602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:03:7b:10:4f:c8:ca:11:8c:ad:b8:76:cc:
d7:63:2d:7e:23:3a:f4:78:ae:d3:f9:f0:b8:ca:bc:
55:25:1e:da:1f:85:2a:de:c0:bc:87:2a:36:78:9b:
3f:d9:75:49:1a:56:72:e5:e3:90:2d:fe:c1:a6:a8:
87:f0:74:dc:75:48:38:42:d1:3b:0f:5c:93:99:b8:
30:02:f0:5d:14:4b:f0:f0:aa:05:42:4f:6a:6a:f6:
a5:c0:28:f8:98:05:ce:21:0d:d4:4f:5b:bc:dc:8d:
b1:93:6b:f3:d3:bb:5e:21:a0:ad:13:ce:ef:ee:3f:
9c:08:45:a9:66:14:c9:5e:a9:48:30:ba:32:9a:e1:
62:f4:85:2c:27:59:a4:47:6b:42:5d:1b:43:8a:6c:
80:0a:f5:30:c2:b4:18:9d:19:1a:68:ec:f3:8c:b1:
52:18:19:b5:c7:9f:b7:b3:67:6c:d0:14:54:00:67:
51:4d:6b:b1:fc:89:d1:c7:8e:c1:27:c6:50:a9:61:
83:d1:c7:84:05:28:8e:fa:0f:61:b2:49:ba:0e:de:
e8:fb:80:00:29:cd:cc:ac:05:36:fb:d2:d1:f2:42:
f1:78:1e:85:6b:b3:3a:26:3d:e1:7d:00:8e:4f:31:
70:50:8d:7f:9d:16:31:2c:fe:3d:c2:88:44:4a:93:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:69:A1:21:D8:B3:7D:D1:2C:20:85:11:47:8F:56:76:27:16:02
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:cf:47:46:eb:d6:7a:40:d2:98:75:28:c5:22:d1:d4:d4:
5e:59:ee:57:c5:57:39:be:46:b2:72:4a:23:aa:b5:01:66:27:
0c:55:f9:09:0b:51:6b:36:1a:d4:dc:e1:e5:83:39:62:60:88:
32:a9:23:d0:bd:b4:a2:47:78:c0:22:04:a0:5b:77:c5:f5:18:
a5:e3:8a:4d:fb:bf:f8:c4:df:9c:5e:00:0a:ee:13:ee:e0:0f:
73:d4:9a:aa:e7:16:83:9c:cb:90:79:be:0f:e5:5a:5e:ce:a8:
d9:a4:94:cc:ad:9b:36:fa:fa:a3:79:32:5e:64:77:a1:c9:b8:
e2:45:41:56:42:b0:06:25:8b:99:b8:41:d1:d3:c1:fb:da:8e:
85:36:0e:e8:a5:13:98:4e:c6:3c:fc:9f:ec:08:c3:bc:98:6c:
ec:06:10:68:14:cd:81:48:21:a9:fa:c2:cd:7d:20:44:1f:ff:
e1:3b:30:50:0e:c2:7a:dc:59:23:74:84:34:f0:12:5a:99:90:
03:e5:7e:21:27:10:cd:04:21:ce:2f:dd:89:bf:84:f4:cd:fc:
57:f1:01:09:41:70:c9:d0:5b:c7:fa:16:1a:92:19:98:5b:4a:
b2:c7:23:35:ae:76:3d:54:79:46:d4:f3:d0:74:99:45:76:a6:
cc:50:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:02:49 2025 by rpki-client