This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier: qr1l6lhyWAqNy6YtQ2BVYtw/Xe8/9+jbQorE7hFKIhc=
Subject key identifier: BB:E6:C1:2B:DA:5C:14:29:7B:36:7A:85:8F:D8:3D:42:9E:0C:DD:2C
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 019B19BC982AB2DFE32F8C9D2BEB1C4D5550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number: 177D
Signing time: Sat 13 Dec 2025 22:02:28 +0000
Manifest this update: Sat 13 Dec 2025 22:02:28 +0000
Manifest next update: Sun 14 Dec 2025 22:02:28 +0000
Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: Apdb7xvxrPXMeR50/RqJ/9D+33N1AKPzAlF2XybHQ6s=)
2: FIrgG9lOckS2whhTIp5aX9dzDrk.roa (hash: w3cwGYtOKvfw8oY9fh8sMYPgttcg8puA2TGSCPuXrrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:19:bc:98:2a:b2:df:e3:2f:8c:9d:2b:eb:1c:4d:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Dec 13 22:02:28 2025 GMT
Not After : Dec 14 22:02:28 2025 GMT
Subject: CN=bbe6c12bda5c14297b367a858fd83d429e0cdd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:b1:cc:f5:77:fb:82:36:94:29:cf:ae:33:
f1:b1:a6:40:af:e0:e4:f4:e8:e7:b8:9b:86:c9:fe:
01:28:be:cb:84:37:48:e9:27:7e:2e:52:e7:f8:e8:
a9:ba:f9:53:a6:d8:45:ea:c2:18:bb:f2:5e:b1:27:
8f:76:c0:2a:f9:19:a5:d1:b1:14:66:db:58:8f:3d:
88:69:46:a2:1e:10:b9:4c:5d:b5:fa:aa:8d:b0:8f:
fb:c2:47:2d:41:ff:b0:79:54:5a:86:e6:fc:16:00:
49:3e:b8:97:e6:a9:4f:16:2a:98:9f:8b:1b:74:ae:
58:b5:90:39:54:17:7c:ce:68:12:07:f5:46:14:da:
df:96:a8:43:e3:e5:ca:e9:65:3e:21:34:4c:99:bf:
8d:71:e6:61:d8:18:37:fe:f0:e0:42:9e:fa:2d:da:
48:d3:c9:c7:24:05:9d:19:e8:a4:a4:da:92:60:bf:
0b:65:47:65:e7:76:ee:b6:ac:7a:86:24:57:34:89:
a9:78:06:8b:7b:4f:3e:70:cc:a9:e7:23:75:f8:dd:
67:b4:f1:21:36:43:c2:24:cf:fd:50:4b:a1:56:9f:
87:f3:ec:40:e0:1a:4d:cb:1a:04:72:35:17:75:6f:
04:7f:aa:5b:c0:bc:0f:0a:86:2a:9c:22:0f:d8:b3:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:C1:2B:DA:5C:14:29:7B:36:7A:85:8F:D8:3D:42:9E:0C:DD:2C
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4d:8c:15:9a:36:b5:b8:8b:ce:1a:d6:a7:1b:51:e4:da:37:
97:cd:0b:4f:e8:67:d7:06:24:23:97:29:4f:fb:26:48:a3:8e:
e9:27:81:b0:4b:09:cc:02:b2:8f:b3:a8:35:08:04:e1:a3:67:
55:4b:d4:8f:cb:34:54:59:9f:24:0c:73:13:28:03:89:d8:b9:
cc:c2:59:8a:e6:45:f2:87:1e:fa:31:af:60:1e:15:54:eb:82:
27:d9:de:52:9b:4a:29:3a:86:2e:be:8d:69:73:a8:37:5e:64:
62:1d:02:34:bc:dd:75:da:bc:3b:3e:61:a9:24:68:48:c5:ce:
d7:43:f0:14:c5:32:73:d8:47:7d:9e:19:5c:32:47:c1:5b:75:
60:ec:ba:a4:5c:4e:e5:22:81:dc:35:8e:dc:70:11:43:62:a7:
88:5e:69:39:50:57:10:85:6a:75:05:a9:dd:c0:7c:79:95:ca:
46:30:04:c2:31:99:a6:c4:0b:80:e1:00:65:2d:a0:da:c8:2f:
1c:b6:90:eb:d2:5f:96:01:c6:4f:a0:ab:f3:83:99:94:9c:32:
de:ad:2d:42:84:f7:8c:7e:35:bc:23:3a:4f:89:04:d6:51:08:
a0:5f:32:10:8f:4c:94:ff:6b:91:92:c0:d7:24:2a:7f:08:37:
ed:d8:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 05:07:44 2025 by rpki-client