This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: EGuAhUtS18z2XIA2wqZSi8iU/12tdrvqqBIQqeHaZaE=
Subject key identifier: 9B:4E:2F:68:F8:B0:A3:7B:35:A8:65:4A:8E:D0:AB:32:52:14:71:E1
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019B2407953645D66BC71A22E0C4806D68C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 1787
Signing time: Mon 15 Dec 2025 22:00:35 +0000
Manifest this update: Mon 15 Dec 2025 22:00:35 +0000
Manifest next update: Tue 16 Dec 2025 22:00:35 +0000
Files and hashes: 1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: f9O2jvlQHhBssM3pSX76jpq10CS8bgWZpRzQvV7MIXc=)
4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:07:95:36:45:d6:6b:c7:1a:22:e0:c4:80:6d:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Dec 15 22:00:35 2025 GMT
Not After : Dec 16 22:00:35 2025 GMT
Subject: CN=9b4e2f68f8b0a37b35a8654a8ed0ab32521471e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:43:03:67:4b:eb:96:6e:17:d8:8d:f0:54:
0e:a6:a3:4e:10:bf:18:b7:59:19:11:c5:54:d9:7c:
8f:90:c1:0f:dd:30:d5:9c:60:fb:21:5b:32:83:c4:
4c:27:f2:26:43:c0:75:00:d6:9f:33:9e:b9:32:b0:
35:68:c3:f6:16:2e:2a:f6:a3:88:6d:64:c4:7c:6e:
f0:a6:ba:7c:46:4d:84:9e:93:7d:48:59:92:0b:aa:
c3:e9:41:80:32:d5:9e:d9:51:23:ba:e7:2f:4a:e7:
6c:1f:81:d1:d4:dd:02:90:56:de:a0:c1:68:65:50:
08:98:7f:2a:b2:67:99:38:c1:32:8b:5a:2c:9d:e0:
f0:27:5c:ec:87:82:b3:73:5f:b3:d6:65:10:d1:7b:
38:21:ab:d4:25:19:5e:8e:87:4f:02:77:1e:5e:0c:
16:9a:14:f0:2b:b9:59:5a:c5:ab:87:17:0d:ae:f8:
bf:75:e9:20:16:1c:a6:4b:01:6e:fe:50:9a:a3:a3:
36:af:5b:5a:15:14:8c:f9:9c:5a:2b:95:45:11:10:
85:3e:fb:a7:2e:1c:51:b9:06:57:11:ae:56:56:0c:
a1:88:6c:c7:a3:d2:ca:23:18:7d:bc:83:d7:3a:ab:
b9:77:5b:ec:8c:c1:b1:79:dc:01:18:14:3c:e9:99:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:2F:68:F8:B0:A3:7B:35:A8:65:4A:8E:D0:AB:32:52:14:71:E1
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:77:74:5b:0b:8f:66:05:f3:5b:d8:b3:ee:35:4f:d9:0f:
53:5a:16:c0:24:51:7d:6a:cf:f7:cd:db:04:13:09:a1:95:cc:
90:ff:94:4b:bd:1b:17:bc:1e:4b:45:f2:32:9b:3d:8d:5e:35:
19:35:6a:2e:0e:c6:7f:ea:7c:93:27:54:81:5f:67:8c:94:33:
93:15:b5:29:cc:1f:e9:4d:37:93:69:30:1c:03:bb:d6:7a:a1:
e8:11:c2:6e:27:27:99:f6:99:19:0d:8f:56:24:90:1f:c2:bb:
e2:b0:94:10:6d:d0:6d:b9:87:ba:6c:e8:41:0d:14:c1:d4:6b:
7e:7a:07:85:9d:9b:7e:e4:41:c2:8b:a4:92:44:94:48:41:cc:
1f:ab:1d:e2:77:42:b9:46:0c:43:f3:10:66:f9:eb:e8:f1:b6:
b0:c4:d3:fa:51:4e:54:5d:c1:1c:fa:e6:60:34:f9:69:11:11:
e9:bd:0b:98:a8:23:6c:e2:4f:da:c3:a5:9c:6a:bf:83:24:0c:
04:04:05:67:e7:51:b8:12:da:91:b5:62:2b:ff:5c:8c:a3:8a:
e6:7a:2d:e2:5a:27:96:e1:36:70:6c:e5:0a:57:82:bf:a0:2f:
8a:95:d6:8a:4f:2c:b0:29:44:12:c6:26:ed:d3:39:e6:bd:07:
90:cd:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:23:41 2025 by rpki-client