This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: gPH3TcRreGsb/gpLYH+Wf9yuu587vuBPHiUOy+5X+Cw=
Subject key identifier: 82:EE:D5:2F:DD:49:54:F8:46:54:40:EC:2F:09:A5:EB:76:BE:9F:44
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 019B3F7F5556C499A922346489F7617BBA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 06:01:07 +0000
Manifest this update: Sun 21 Dec 2025 06:01:07 +0000
Manifest next update: Mon 22 Dec 2025 06:01:07 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: LXK7LetZFbshp/CI6h8frk6inWc8y4zY5oNhi+F9/5I=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:7f:55:56:c4:99:a9:22:34:64:89:f7:61:7b:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Dec 21 06:01:07 2025 GMT
Not After : Dec 22 06:01:07 2025 GMT
Subject: CN=82eed52fdd4954f8465440ec2f09a5eb76be9f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:5b:75:22:c4:83:da:fc:50:3a:13:4a:1f:
0a:d4:29:87:52:4a:b0:08:9f:86:c6:a6:22:34:1c:
7c:f3:3d:71:78:fa:1c:f4:7d:18:74:a6:b6:22:ed:
42:a1:b7:6d:35:fa:13:cd:b6:bc:de:72:11:9f:81:
7c:2d:69:f4:e4:7f:dd:8d:36:74:a6:d7:e0:4a:c1:
2d:31:fd:4a:9b:9b:f9:30:42:f3:6a:c3:6a:51:e7:
94:92:b1:14:2c:32:21:1b:70:28:17:84:87:98:1a:
64:c2:3c:77:ed:0e:60:04:8c:48:51:49:75:6b:61:
6d:72:d9:f0:a9:06:88:e1:71:51:37:71:55:62:e8:
3f:ba:25:04:f1:28:77:3b:bb:23:f8:72:bb:70:80:
8e:6c:ce:7c:2b:d8:05:c4:e5:0b:01:6f:76:04:32:
81:03:40:3d:e0:c4:8a:f0:69:f2:04:6b:db:b0:df:
16:33:22:06:7f:fc:3f:94:c6:88:6a:c2:03:38:53:
37:cf:8d:0c:6d:55:05:08:01:e7:f2:71:15:8e:20:
d8:d8:db:66:a8:07:53:72:a6:49:94:75:69:61:b7:
f1:7a:55:05:26:1f:01:13:02:49:8b:82:8b:16:84:
d9:29:7b:53:60:fe:0d:54:32:f6:bf:0d:5d:d6:fd:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:D5:2F:DD:49:54:F8:46:54:40:EC:2F:09:A5:EB:76:BE:9F:44
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d7:97:dc:fa:b3:98:8c:22:46:2c:70:6a:ec:99:00:ad:1f:
67:62:de:d3:00:6c:8f:7b:05:e3:05:b0:f4:26:77:88:ed:d3:
11:74:d0:52:5b:3a:e0:f4:34:fd:6b:3d:c7:34:07:b9:a8:bc:
d7:d6:4d:8b:82:83:bb:5d:4d:b8:b2:af:aa:6f:dd:13:92:8c:
7b:d2:51:b1:d2:b6:45:84:64:d9:2b:2a:24:3e:10:a4:35:af:
ee:d7:f1:1b:0a:01:11:48:a2:a6:70:d8:18:78:f4:79:1c:69:
bc:06:1a:99:91:e9:9d:82:0e:d2:f8:0d:2b:5a:22:5e:9a:bb:
76:60:e3:14:9d:74:c8:ed:6d:5b:1e:b8:07:65:03:53:a4:7f:
67:4f:5f:42:b3:68:fc:69:15:c0:c7:f7:2d:cb:67:68:f2:48:
9d:e2:12:27:8f:72:50:fd:e0:04:60:61:cc:d8:e2:94:be:be:
59:0a:ea:fc:50:9c:13:5e:a7:c8:aa:43:04:3d:61:b5:af:17:
7f:74:85:9a:3c:70:ea:d4:24:df:96:25:d7:d8:50:27:a6:de:
de:a8:dc:dc:d0:ba:ce:b8:32:02:5c:43:10:b2:e9:2d:38:9d:
53:ad:39:be:a8:43:c9:40:fa:9f:2c:88:70:66:21:7b:61:cb:
8e:70:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:58:17 2025 by rpki-client