This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: C5KzdiWNqpqRnQ7dte/3s4m8pVigkh8bC30B2iNK89A=
Subject key identifier: 26:7C:21:06:B3:2F:EF:B0:B3:74:70:9E:88:96:2A:D7:0C:D7:DF:36
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 019B424A7107AF5C9D4F705A412EA5AB9A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 178F
Signing time: Sun 21 Dec 2025 19:02:13 +0000
Manifest this update: Sun 21 Dec 2025 19:02:13 +0000
Manifest next update: Mon 22 Dec 2025 19:02:13 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: DtbmAAg0z6OGhNeD7w4CQluFAGbfI0/hzsIxU5yGLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 19:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:42:4a:71:07:af:5c:9d:4f:70:5a:41:2e:a5:ab:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Dec 21 19:02:13 2025 GMT
Not After : Dec 22 19:02:13 2025 GMT
Subject: CN=267c2106b32fefb0b374709e88962ad70cd7df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:a7:4e:9f:ec:4a:bc:97:67:16:d2:fd:34:
f8:27:99:46:90:ee:31:5e:80:4a:d7:0a:ef:d1:68:
68:0d:3c:2e:fb:3f:1c:a7:20:89:1a:39:c8:57:1b:
e7:24:d1:4f:a6:65:e1:65:c9:8e:5b:29:44:dd:d6:
55:46:c1:17:c5:03:4c:67:6a:c0:0a:4e:a1:ad:62:
12:9a:db:4f:50:80:c9:91:f7:9d:5e:be:74:06:b7:
a5:8b:d0:6e:74:83:10:83:a3:9e:d2:31:86:26:58:
01:a9:46:17:b8:56:4d:d8:65:6c:67:0e:30:fe:e4:
72:b8:2e:be:5b:a7:d9:92:df:6e:9f:ba:6d:bd:70:
81:1a:01:71:cb:92:b5:99:49:96:60:33:50:07:cc:
f2:df:4c:43:5a:da:58:d2:0d:b6:93:fd:d9:62:ef:
d2:b2:83:37:29:15:2b:c0:42:16:b7:6e:22:f2:b0:
af:6e:10:ab:f2:f7:2c:e2:d6:58:69:d1:0d:3c:8b:
17:b9:66:c1:b2:f6:0b:cc:ac:49:a8:12:29:8f:db:
63:e0:0c:1e:8a:ed:9a:09:fc:76:a9:b5:5e:65:fe:
2d:44:1b:62:ac:07:1e:36:d7:ee:f4:4a:42:de:f1:
fc:a8:d9:dd:6b:e3:d7:3b:aa:7d:6f:3f:ed:7e:42:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:21:06:B3:2F:EF:B0:B3:74:70:9E:88:96:2A:D7:0C:D7:DF:36
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:0d:f1:66:e8:e9:70:a0:01:0c:99:ad:33:d8:bf:f5:1b:
48:ec:42:b0:f6:56:2b:b9:99:9a:1f:cd:7c:ac:10:fa:f8:4d:
04:0b:9c:64:ac:ce:af:0d:5f:27:df:09:b6:f4:e2:6c:49:ac:
76:98:b2:31:6c:b2:48:1e:00:bb:cd:63:06:f5:14:37:b2:a0:
a1:8b:d4:03:a3:d4:3b:00:e8:29:d6:78:72:e6:3d:3d:df:ca:
5d:a8:7e:4b:3d:a4:49:e4:3d:ab:b5:f4:f4:a7:5a:0f:3d:00:
81:2e:a0:26:7b:f9:3d:3d:56:84:74:0a:89:63:20:93:ae:3b:
6e:d5:b9:c8:ce:de:90:36:5d:7c:0d:e0:6f:fe:47:4a:98:2e:
20:23:3c:7b:b6:bd:92:13:34:79:61:aa:d0:5b:3d:85:85:a8:
2d:b5:a4:35:da:51:3d:85:20:99:f0:b6:eb:e0:ab:aa:25:1d:
68:00:49:f7:b9:73:01:0a:7f:98:24:34:40:82:21:ca:99:da:
78:9d:ae:e0:de:c8:2f:04:de:23:31:46:60:b1:3c:c3:e4:f6:
57:14:08:ca:9f:73:bf:a4:d7:07:7e:f8:1d:8a:ca:19:85:ed:
38:ae:bd:4e:2f:f8:62:07:ca:2b:56:95:0a:27:e1:d0:b1:1a:
85:18:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:19:38 2025 by rpki-client