This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: i9QUwA9dDa1y1JsVTPz7Ne7lyQuMcutv4mvxPIyrX7c=
Subject key identifier: F4:17:8A:D2:F2:06:FD:30:3E:A0:5F:A9:2F:82:D1:11:7E:40:B0:96
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019B06D94CBD3D2167325B219023F14F19A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 1775
Signing time: Wed 10 Dec 2025 06:01:02 +0000
Manifest this update: Wed 10 Dec 2025 06:01:02 +0000
Manifest next update: Thu 11 Dec 2025 06:01:02 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: eEjb8DAP9bahq2O5j_HQb2xzlO4.roa (hash: fOyU7lhmD+ZIHBvuQudHEnoFTSwbSNrbIy4UHUxoCs0=)
6: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: JLYtuWdwARScc9VaT/EbhDhfBbnCiKkAZP3ohnvJgC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:d9:4c:bd:3d:21:67:32:5b:21:90:23:f1:4f:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Dec 10 06:01:02 2025 GMT
Not After : Dec 11 06:01:02 2025 GMT
Subject: CN=f4178ad2f206fd303ea05fa92f82d1117e40b096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:5f:6d:d2:8a:4c:5d:93:22:95:12:e6:62:
ec:da:a3:0d:46:ba:5a:ea:28:56:22:3e:d1:ef:c1:
68:eb:e4:11:65:84:fd:17:55:22:4e:d4:d3:47:92:
8f:9c:d9:64:0a:b8:cd:a7:55:09:44:2d:27:ee:8f:
a9:9d:1c:66:cf:c5:02:29:ce:ed:18:07:b5:0e:99:
95:98:78:cb:ad:6d:e6:25:a7:7d:61:44:98:33:a6:
7d:46:ec:2f:60:cd:66:84:84:c7:5c:f5:e3:ea:e9:
be:a6:c6:46:d2:fa:7f:2e:7c:ff:51:60:d7:7d:5b:
ad:34:a5:38:59:e4:40:ae:a0:53:7c:b2:76:cf:72:
9b:e2:b5:9f:19:0c:d6:38:ee:2d:73:93:d1:c9:73:
3b:ce:cb:20:f7:cb:88:28:87:a3:16:1c:c0:c6:18:
2d:cc:d7:db:33:bd:67:cf:58:35:05:e0:55:44:0e:
1d:61:af:0d:c5:60:cf:5d:13:2c:c4:45:3e:0a:69:
ac:5c:1b:6a:13:d9:16:b2:a8:a4:7b:a7:d7:d3:59:
e7:a7:4f:46:b1:31:2d:c1:e2:db:bc:22:ad:07:03:
49:b2:ee:a4:d9:34:9e:1c:33:a0:5f:aa:9e:85:d4:
57:4d:91:24:0c:a1:d8:5f:27:68:1c:5a:aa:af:52:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:8A:D2:F2:06:FD:30:3E:A0:5F:A9:2F:82:D1:11:7E:40:B0:96
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:36:6e:7e:3a:64:98:20:6a:8e:b6:34:05:bd:2f:c2:0e:
a2:cc:ec:95:32:32:8a:6f:5a:a6:de:69:7e:3b:40:3f:a0:0d:
79:ab:be:d9:79:42:48:87:23:a9:f2:a2:7b:a8:dd:25:b1:6a:
cd:c1:ca:ee:7d:23:64:72:fe:79:85:5f:60:11:c5:3f:3c:97:
b0:42:c3:e2:ed:9a:4b:73:03:2d:29:cd:0c:fe:27:01:7b:0f:
a3:76:ed:d5:53:4b:90:31:f7:77:33:29:b3:1e:4f:b4:70:06:
9a:76:61:a4:98:78:bd:5e:6c:83:17:61:f0:78:43:d1:41:28:
51:89:86:96:45:17:f9:7c:c7:f9:77:46:6a:0a:4f:36:0f:93:
4f:ea:a2:34:95:08:1e:a4:8a:ca:fa:42:0a:1f:ce:77:ec:ce:
84:02:b9:b0:2e:91:18:85:9f:60:6c:c5:08:99:63:09:16:52:
4b:5f:14:56:04:34:85:d2:1a:08:c9:b7:5c:b5:eb:fb:d2:94:
b2:9f:e5:f6:bf:b0:d3:fa:a4:44:b7:2b:5d:a1:53:12:48:85:
86:78:13:c0:59:76:97:7a:21:e3:44:81:1a:5d:6c:e3:6c:2d:
b7:c4:63:53:26:23:ac:c0:96:0c:39:0c:5b:dc:0f:1b:62:a1:
1a:89:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 09:05:04 2025 by rpki-client