This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: xL010apukwlFK1UYDvCxlwOeo7f6QrdeRZ8+u65+/lU=
Subject key identifier: 64:4F:14:4B:29:F1:3B:C0:E9:4D:4D:9D:48:FC:92:BA:F6:A6:E8:C9
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019B59ACE7D5873E7EF636BBFC559F345F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1796
Signing time: Fri 26 Dec 2025 08:01:02 +0000
Manifest this update: Fri 26 Dec 2025 08:01:02 +0000
Manifest next update: Sat 27 Dec 2025 08:01:02 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 6tv49p6KrozNNCXZoOnmyNypRrtPbSCe0OQTNkuAqzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:ac:e7:d5:87:3e:7e:f6:36:bb:fc:55:9f:34:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Dec 26 08:01:02 2025 GMT
Not After : Dec 27 08:01:02 2025 GMT
Subject: CN=644f144b29f13bc0e94d4d9d48fc92baf6a6e8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:f2:97:c8:15:61:f4:bc:c9:6e:85:d1:4c:
60:31:b8:7f:61:54:1c:17:be:19:6a:8f:76:ad:55:
b9:3b:5f:0c:ad:2d:ad:fd:39:fe:ed:d6:44:70:b3:
8a:d4:8e:c0:34:1b:51:96:80:58:37:64:b4:a5:3e:
e3:a5:b5:86:54:ce:b4:2a:d0:35:cc:54:45:8c:2b:
d2:73:4e:75:b4:24:31:40:1e:79:eb:97:6c:0c:36:
97:93:a7:fc:44:88:3b:e4:5a:20:14:51:6c:f3:67:
00:63:6c:1e:72:fd:d2:f6:d5:40:51:63:0e:cc:77:
b2:42:3d:50:3f:49:df:39:de:81:90:8e:15:0e:94:
73:94:ad:c9:da:9b:01:9c:07:67:6b:95:9c:60:b5:
f4:0c:eb:aa:d8:b6:65:32:ca:e9:6a:bd:ca:af:32:
17:f7:53:93:c3:3a:c6:89:5a:36:b0:c5:12:62:3e:
e3:2e:45:a3:b1:26:ed:2c:0b:b8:af:62:df:4b:a8:
4a:b7:d7:c5:87:06:e3:ea:5b:16:3a:ee:ff:4b:ae:
33:91:bf:97:60:dc:20:08:58:c7:23:b7:a4:45:c5:
9d:c5:53:2f:62:e8:00:5d:17:85:fa:a2:29:a4:f4:
e9:7e:cb:66:f1:f3:5c:3d:b1:d2:a9:75:67:ab:39:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:14:4B:29:F1:3B:C0:E9:4D:4D:9D:48:FC:92:BA:F6:A6:E8:C9
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a8:8a:3e:0b:d8:6b:79:5f:89:cc:4f:95:e1:9f:48:e3:4d:
e6:a0:2f:ef:23:76:63:64:9c:17:8c:c2:70:34:35:d8:46:88:
b3:03:4c:56:2a:f1:66:ad:6b:7d:94:13:0c:52:90:e3:9f:3f:
42:57:e6:2c:8b:f8:d0:de:ae:d4:10:80:b4:b1:49:d6:5a:5d:
8c:69:d3:df:84:05:20:77:cd:71:49:05:15:2a:0b:57:a6:66:
18:4c:ab:ff:9e:0f:6b:a3:f2:9a:59:a9:c8:66:8b:e1:aa:0c:
b9:42:b1:db:40:f8:15:81:7c:85:73:c6:e1:a8:95:eb:f2:67:
42:74:15:a5:51:e2:bd:8f:24:c1:ed:f5:1f:77:58:f0:72:48:
b1:e3:6c:c9:0c:f0:bb:9f:08:4a:91:01:08:ff:03:00:4c:e8:
84:64:9f:09:0d:f4:47:03:21:bf:dd:8f:06:13:ca:4a:d0:cf:
6f:bf:22:04:e5:3e:c8:69:2d:0b:6d:87:2a:7b:45:40:3a:79:
bb:44:67:7a:87:32:8f:e8:eb:5c:b5:45:1c:9a:14:41:1a:f7:
3f:08:82:5c:c6:13:40:6b:41:32:e1:89:68:e3:80:eb:4a:a1:
13:c9:0a:c6:a1:b9:10:8c:df:01:84:93:34:e4:90:1c:47:cb:
33:3b:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:16:47 2025 by rpki-client