This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: ++zSaM4mifqCWUcRU8AWImPGcz8ksZIMkcBkc4vIqUw=
Subject key identifier: 57:94:8A:3B:20:61:44:91:61:E7:83:1D:06:31:1F:91:8D:82:C7:76
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019AFA6787A47F9AB888E81EA530DF4E2FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 35
Signing time: Sun 07 Dec 2025 20:01:20 +0000
Manifest this update: Sun 07 Dec 2025 20:01:20 +0000
Manifest next update: Mon 08 Dec 2025 20:01:20 +0000
Files and hashes: 1: 0OeNkvd-8MMdjkKEPWgT5tWh42M.roa (hash: 14QSl+lc6zLbErHcCROg/UYo6UZFnpjBPJYqshbFvSQ=)
2: FOViJa71bONBPbhwdf8cY26xpGw.roa (hash: acfz9cNHyt0g2+N/TsWc9s6Ju/Ql+2/s0NXKkyXco/4=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: sPX9qLuzkaCsNP+Igpt6NhHHMi+oS0oZZ5JX3AH3r/U=)
4: x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa (hash: HSJMhqY1VPTAA+uSdO1W+IOvhtrhwbuUBVftKZHkGTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fa:67:87:a4:7f:9a:b8:88:e8:1e:a5:30:df:4e:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Dec 7 20:01:20 2025 GMT
Not After : Dec 8 20:01:20 2025 GMT
Subject: CN=57948a3b2061449161e7831d06311f918d82c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:eb:7e:72:3f:2e:2e:5a:a9:46:45:5d:a9:
8c:01:a9:92:24:e1:9c:56:07:24:f4:21:a6:16:f3:
f4:c9:50:2f:83:48:ac:32:9f:c4:1b:e8:23:22:9d:
78:02:57:5c:36:e3:18:0c:9b:f5:f7:97:de:fa:d0:
93:30:b8:98:de:1e:ca:73:a2:b8:e1:5c:55:7f:f1:
eb:ab:72:7a:ed:60:7c:d1:90:a0:8a:6d:e6:14:7c:
41:01:f8:71:19:32:d1:e8:02:47:ae:35:52:a2:09:
30:b3:01:77:df:b2:09:9f:3b:cb:4c:82:68:ff:a8:
fe:6c:95:4b:7d:84:cd:e8:11:d0:6d:cb:5b:3c:f8:
98:38:8f:64:f9:22:43:ef:d1:97:47:ca:66:bb:43:
e3:97:8f:2f:c8:b3:16:01:cb:4f:4f:ae:bf:a5:e7:
c5:cc:34:ba:9b:a8:df:fc:2a:95:4e:43:13:71:08:
e0:2a:33:2f:9a:ac:2d:6a:fc:00:8e:75:06:6b:19:
64:e4:ff:41:86:0c:30:a5:c8:3b:37:57:c2:c8:ab:
5e:7b:a7:77:b5:d3:fd:54:48:98:ae:75:0f:1a:bb:
23:cf:87:3c:7d:65:83:d3:9b:f9:40:46:17:ee:e6:
81:5e:08:73:96:d9:a1:58:9b:0c:3a:d6:36:b6:12:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:8A:3B:20:61:44:91:61:E7:83:1D:06:31:1F:91:8D:82:C7:76
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ef:eb:26:70:62:8c:99:9b:fe:75:55:1a:ac:13:d2:fb:e2:
39:64:b2:69:78:9f:1f:a1:48:eb:c4:03:fd:a5:7b:45:75:bd:
85:d4:94:b3:e9:9b:85:a6:e7:f9:d1:3e:4b:63:60:ba:7a:9b:
63:67:96:6d:7c:75:96:e6:0f:81:b8:87:ee:95:f3:46:18:d2:
d4:a3:90:48:37:f6:7c:aa:76:2c:0f:22:92:01:71:e7:7b:cd:
4f:d8:96:bf:d0:a2:bb:96:d7:31:83:76:ad:cc:8d:e2:e4:51:
e6:be:01:3f:a7:9c:e9:1c:86:64:9f:79:8f:02:20:91:fa:58:
74:c1:bb:4b:ba:9b:5c:2b:6c:fe:68:9e:a9:ac:0e:81:ad:e6:
16:4d:83:09:c1:f5:e3:38:df:77:54:8f:21:aa:22:a4:85:67:
7f:a5:9e:0e:ea:3f:61:46:ee:fc:b5:80:c8:88:25:08:02:f2:
34:e5:18:51:4d:ee:63:dd:55:87:48:90:04:30:41:dc:f3:e1:
ad:11:5a:0a:0e:98:6c:f1:45:1d:7a:e7:df:19:09:d9:96:1c:
ff:f5:4a:ea:98:a1:32:cf:80:ed:aa:1b:33:fa:51:49:9b:aa:
40:ca:29:7e:83:6a:79:6f:7e:48:69:48:33:18:a5:7a:76:27:
d6:b9:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:05:04 2025 by rpki-client