This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier: L8xOcQgbk6ki/06s6JHkWkbah/lIhIU5jAZ8lfeIlcg=
Subject key identifier: 73:5E:AB:0C:75:45:1D:88:92:6D:7A:86:20:F4:93:01:7E:B1:3C:C6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019B3231D04B71647B388B49F19E9D0D5866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number: 12E9
Signing time: Thu 18 Dec 2025 16:01:23 +0000
Manifest this update: Thu 18 Dec 2025 16:01:23 +0000
Manifest next update: Fri 19 Dec 2025 16:01:23 +0000
Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=)
2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=)
3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=)
4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
5: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=)
6: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: nEJAiKrRtysxtJ2BCb60sXFkYs4L6qk275Wdlm0R/0w=)
8: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=)
9: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=)
10: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
11: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=)
12: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=)
13: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=)
14: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (hash: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:31:d0:4b:71:64:7b:38:8b:49:f1:9e:9d:0d:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 18 16:01:23 2025 GMT
Not After : Dec 19 16:01:23 2025 GMT
Subject: CN=735eab0c75451d88926d7a8620f493017eb13cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:16:4b:6d:77:83:69:39:d2:20:e3:11:c2:
0d:01:c4:74:e7:c7:97:67:4c:dd:d6:b4:1c:e9:d1:
89:87:ef:ff:d8:7c:7b:4e:c7:69:5b:b3:6d:c5:46:
d5:c8:6c:75:de:ba:50:f0:6c:37:06:53:54:fc:28:
b3:fb:3d:e1:47:36:6f:c4:29:ed:0b:40:60:9e:ec:
00:42:39:94:e7:83:17:e7:f9:e0:54:bb:8e:d1:4b:
0c:22:34:97:9b:ba:62:79:61:4d:d0:90:1a:45:63:
25:93:ad:7f:87:2d:b9:03:91:1f:3d:20:4b:70:3a:
76:5f:c6:6a:f5:2f:fd:2a:c0:31:db:a8:a8:6c:51:
c1:3d:55:96:cf:d7:d0:4e:f2:67:91:1e:41:8f:2a:
ff:66:47:18:c0:c9:71:7a:93:ea:fa:69:2d:90:b2:
1b:0e:94:cf:cf:93:4b:0a:c1:8c:11:e8:84:1c:30:
a8:c3:b0:2d:94:74:0d:42:4b:f4:c1:6f:fc:8c:9e:
83:c8:03:29:49:25:ce:fc:12:d5:01:3c:9d:88:4a:
b7:00:d2:77:cc:f3:1c:4a:2d:37:08:50:21:cc:a1:
20:8f:ae:5f:4b:5f:7b:aa:a4:32:dc:45:58:ff:77:
6f:12:36:6f:9a:cf:98:1b:c6:5e:67:a0:92:41:ab:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:AB:0C:75:45:1D:88:92:6D:7A:86:20:F4:93:01:7E:B1:3C:C6
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:23:35:e3:ed:9e:78:02:ef:c1:4c:f4:df:7c:5b:a4:71:
66:5a:e5:58:e1:b0:5a:f6:a7:41:84:96:1b:2c:b4:8f:7f:1c:
7a:85:16:fa:e1:8d:c5:79:e8:ad:47:4c:9d:86:ac:0a:5f:34:
5e:46:95:b0:f7:01:d7:e1:7e:c1:3f:84:c4:8a:02:41:7d:4d:
e3:bf:38:27:85:5a:0a:e6:fc:d2:49:0b:f7:62:74:3f:32:c4:
3c:7e:11:6f:81:72:91:16:55:54:6a:d4:9f:67:bc:d3:99:d9:
68:8c:6b:24:8a:92:b6:a3:7e:bf:a4:c8:65:b0:34:ab:29:c3:
21:6f:85:dd:9b:e5:10:54:4f:5d:d1:e1:39:c2:66:0d:cf:ed:
a6:3f:dd:22:ec:94:4e:92:3f:28:31:0a:c0:1f:4f:78:37:4e:
84:2a:eb:cc:30:c8:33:d6:8b:39:da:b5:83:96:90:ba:3a:85:
23:e9:32:83:c3:e2:75:27:57:2c:c2:2b:ee:20:fd:01:0e:58:
9b:f3:bd:40:ea:cb:d2:f3:5b:15:53:e5:f7:11:ef:0b:9f:70:
37:61:4a:00:91:34:48:9b:74:65:40:f3:93:b0:30:95:8a:15:
9b:9c:77:a1:05:0c:61:fc:68:4c:81:50:ff:21:70:57:4a:9a:
6e:e5:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:36:51 2025 by rpki-client