This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: v01wciUalFhO4fwMiNdVgBL332bKCzuekPQrW17L8uw=
Subject key identifier: 74:06:6F:51:EF:2F:EA:BF:86:4C:63:09:A4:A8:21:AE:C6:28:EF:79
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019B330D5FC6D533C29C82568980F5DB0F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1783
Signing time: Thu 18 Dec 2025 20:01:12 +0000
Manifest this update: Thu 18 Dec 2025 20:01:12 +0000
Manifest next update: Fri 19 Dec 2025 20:01:12 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: vTQqeo9wXFZibwNvG5tq2AUvdsmPTkKhctfHlID6dws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:33:0d:5f:c6:d5:33:c2:9c:82:56:89:80:f5:db:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Dec 18 20:01:12 2025 GMT
Not After : Dec 19 20:01:12 2025 GMT
Subject: CN=74066f51ef2feabf864c6309a4a821aec628ef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:76:4a:e2:24:3d:dc:30:ad:73:83:3c:04:
ff:99:c0:3b:e6:bb:5f:8c:0f:9f:e5:bc:9c:8c:44:
3d:38:0d:8c:11:07:f3:59:57:e2:bd:2a:cb:cd:30:
ee:58:34:fc:ba:62:87:44:3d:f0:14:e9:6f:27:13:
88:fc:14:c1:17:54:52:0d:6e:ea:50:9b:6f:07:22:
64:60:a8:1a:af:21:5c:2d:f0:fa:a0:44:0d:90:e3:
1c:bf:e7:93:61:42:33:dc:31:3d:03:8a:5b:47:b5:
35:e2:4a:db:20:35:0b:e2:97:a4:eb:20:e7:8a:49:
6d:9a:72:32:26:07:96:61:a0:3a:a0:7a:d3:72:b5:
c8:41:97:f0:9c:39:15:19:71:e8:25:8a:cd:bf:7f:
c9:9d:56:40:0f:55:fe:56:de:d0:fc:4a:7e:4d:d3:
de:64:25:5a:f3:3c:5a:88:96:7f:2f:18:02:6c:af:
62:45:f5:8c:f5:42:9b:fe:b2:8f:12:69:d0:08:3b:
41:5f:2c:8e:76:bd:47:e0:ff:50:99:99:8c:c7:1c:
f0:84:58:50:40:41:c5:c4:07:d5:8f:b3:50:e9:ff:
a4:c2:c6:6d:6e:9e:47:0b:62:98:8e:e6:9b:e3:12:
e1:0f:d4:f9:df:6c:e0:e1:37:c7:0e:9e:13:4f:ca:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:6F:51:EF:2F:EA:BF:86:4C:63:09:A4:A8:21:AE:C6:28:EF:79
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:b0:f5:38:6f:23:56:38:5e:2d:a6:a3:75:e0:1e:4b:40:
ad:2c:48:8c:98:36:c0:f7:c5:00:ba:cf:52:ce:8f:93:64:10:
41:bf:4d:1f:ef:2b:29:d7:af:8e:a5:dd:5b:01:96:78:cd:1e:
73:c0:99:b9:c9:03:ab:b1:cb:68:28:48:71:4c:75:e2:06:8d:
81:12:7f:11:7f:9b:1b:6b:7e:17:e5:a1:75:67:44:c1:3b:4a:
5c:95:18:af:9c:2a:65:b4:07:01:60:7c:29:d4:92:18:37:2a:
cc:91:7f:d8:d1:69:84:79:8a:60:0e:a9:91:96:44:c5:5f:01:
6e:93:20:d0:e6:66:98:dd:3d:33:73:60:bb:88:16:e6:d8:6d:
0d:c8:8a:0e:7a:1a:ea:41:12:ed:9e:71:b5:9f:f7:9c:b7:14:
9b:9b:82:6a:9b:6a:93:a6:2a:f8:00:44:f9:c9:1b:2f:54:04:
b4:b6:72:1b:27:be:18:98:cf:e4:d0:7b:06:6d:6e:00:c9:d6:
eb:d2:8e:85:08:84:c3:fa:09:7e:11:e5:12:57:25:f1:ef:06:
8e:95:fd:67:f1:cd:82:71:37:e0:83:82:c9:73:9e:e8:91:23:
b8:5a:94:85:40:ce:6f:50:8e:0d:9c:89:2d:fd:ed:2d:ca:41:
8b:a7:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:35:28 2025 by rpki-client