This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: JgyqopLggVLO6Sp/kusIcY3ARdj9QoecTtKodlR7efg=
Subject key identifier: 34:67:4C:5F:27:D7:F4:66:DA:AE:B3:81:D9:29:DE:E8:9B:CD:3A:30
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019B37C5B93E9BD915E877E05E4F17C30ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 17B0
Signing time: Fri 19 Dec 2025 18:01:03 +0000
Manifest this update: Fri 19 Dec 2025 18:01:03 +0000
Manifest next update: Sat 20 Dec 2025 18:01:03 +0000
Files and hashes: 1: L4yM2pAG-Lu_8H3cgDGWtb473_k.roa (hash: t3Xcn5JwvdP3hcDj9YLTcK+I61CT26G16e4uXCxUa+Q=)
2: c151k3uuTX4II7cb_BeXaTE8a6o.roa (hash: vg0Y4dCfkVk5WEQ8dOFPXb6A3roAiuMWS+ic6c9s7qM=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: nJcOcjtJCHadAHdNAK5YYZiFoVWslrOJtDrybD47Nrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:c5:b9:3e:9b:d9:15:e8:77:e0:5e:4f:17:c3:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Dec 19 18:01:03 2025 GMT
Not After : Dec 20 18:01:03 2025 GMT
Subject: CN=34674c5f27d7f466daaeb381d929dee89bcd3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:2c:75:7d:dd:6b:b3:c9:65:57:b6:8e:b8:
fd:69:6c:4b:7d:82:9d:47:9a:fa:fe:f5:ba:b1:85:
b3:54:4f:b4:cb:6e:85:89:b4:b3:d7:29:c0:a5:c7:
cd:e9:c8:41:8b:75:f4:5e:76:d6:43:62:ba:f3:bb:
dd:10:75:bd:49:32:d0:dc:a5:15:1c:29:60:a6:dd:
e3:01:3a:bf:2c:54:3e:6f:01:e6:48:c4:20:46:40:
53:26:31:62:48:ff:bb:ae:b9:f2:fa:a8:f5:7b:b0:
c5:6b:33:5b:1b:2c:08:fc:3e:6b:b7:0d:ca:e9:f5:
54:3f:b3:e6:90:8d:68:d4:e7:87:b1:47:d9:32:02:
99:64:29:fa:ec:6f:23:8c:33:29:40:d3:de:f4:49:
72:72:14:5f:e6:df:c9:00:a9:2f:c1:c2:eb:5b:a0:
aa:ce:c9:87:ec:22:91:85:75:5d:c9:a9:4a:5f:12:
0c:83:f7:63:5f:c3:f1:61:13:0d:10:df:1d:9e:6a:
55:c6:28:cb:4e:0e:b9:30:35:19:9c:ad:ce:b7:77:
38:30:e8:39:d5:53:5b:a5:db:40:ad:66:6c:5f:df:
06:1e:49:2b:f2:3b:0d:73:32:e5:10:b2:ef:cd:b6:
84:77:53:13:72:35:f2:02:99:95:af:8e:17:57:f9:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:4C:5F:27:D7:F4:66:DA:AE:B3:81:D9:29:DE:E8:9B:CD:3A:30
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:55:bc:0f:70:18:e3:b3:65:e9:cc:d0:5e:72:d5:04:db:
4b:ad:b6:67:e0:a3:62:41:26:c8:02:7e:e5:02:b7:fe:2a:e4:
c3:00:96:45:9a:ff:cb:19:3b:2b:79:4e:4d:a7:ae:6e:47:c3:
c7:c0:d3:a6:03:31:8b:cf:b4:94:c7:8d:3f:a8:c8:5a:b5:32:
55:8d:f8:78:82:42:6a:93:fe:c9:15:3d:cd:e1:63:c1:69:ae:
33:19:73:8c:dc:d8:d1:fa:df:9a:8a:fb:1d:d7:68:0a:c3:4f:
79:46:b7:3e:82:2c:5f:73:cc:2e:9a:57:27:f0:5d:69:55:c6:
c8:ed:59:48:75:19:0a:95:8f:93:e5:3a:b6:7a:4a:2d:a6:ac:
e6:cb:a8:aa:b4:f0:5a:38:0a:e6:6e:0c:73:0f:00:6a:ad:fd:
40:3f:c7:76:0e:16:1e:a1:92:72:70:c1:84:96:ef:64:4f:87:
b3:08:20:70:53:b4:74:07:4f:7b:c1:78:e6:e4:27:14:1b:8d:
84:1b:9a:9d:77:f8:ac:6c:73:9d:b9:23:bc:d2:67:91:fc:2c:
15:93:9e:d3:ba:d4:8e:d0:ab:0a:74:48:42:67:af:ab:77:6b:
3e:96:b2:25:f4:d1:36:54:fa:56:70:1d:ec:ae:46:e7:13:27:
84:d3:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:23:51 2025 by rpki-client