This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: 13ulRtIij2W2x337OjYwHJLpEDgrQN1IDjWCgVAChyI=
Subject key identifier: CC:D3:D5:3E:B7:01:68:C6:5D:88:61:E5:36:B3:D1:68:83:F6:7F:EA
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019B22F4E6BA56E5BE1BEC9933F4030C8FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 04B9
Signing time: Mon 15 Dec 2025 17:00:33 +0000
Manifest this update: Mon 15 Dec 2025 17:00:33 +0000
Manifest next update: Tue 16 Dec 2025 17:00:33 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 9CNQfmhqgmvrC6UeiBynQrFP10+97xxGnUkTTorLZXU=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:f4:e6:ba:56:e5:be:1b:ec:99:33:f4:03:0c:8f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Dec 15 17:00:33 2025 GMT
Not After : Dec 16 17:00:33 2025 GMT
Subject: CN=ccd3d53eb70168c65d8861e536b3d16883f67fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:bd:b8:4d:24:4a:68:75:75:e7:5e:1f:86:
c9:ed:1a:b9:33:2c:73:9e:e4:bd:e4:3b:ba:a7:cd:
9d:6e:53:08:02:2b:3e:ba:8d:89:e5:ee:25:ab:c5:
27:33:60:76:28:f5:e7:4c:d0:1c:55:5c:76:f6:f8:
55:b8:3d:c5:31:2d:ff:1a:65:8e:6e:48:99:c9:b6:
ae:b7:70:a6:d7:91:fa:bf:86:c0:a9:d1:66:e9:f1:
ef:b1:f7:0f:86:a7:10:93:11:eb:c1:48:de:d2:47:
08:5d:a8:50:1a:6f:06:96:cd:36:b3:96:23:36:cf:
e3:95:6a:60:0f:61:36:c4:b1:60:01:4c:5f:a3:68:
b3:69:4c:c0:0f:94:77:92:4d:24:1a:bb:cd:0b:02:
96:71:72:bf:e5:71:47:32:c2:d0:18:38:8b:14:5f:
db:a2:05:13:6c:a8:b8:a4:ac:a4:72:42:3c:0e:58:
11:e7:4a:53:65:92:d3:4f:62:b2:99:69:44:ac:b0:
69:d0:8e:ff:05:52:88:c0:a5:78:ff:77:e2:2e:50:
5b:dc:42:54:4e:20:9b:26:c6:c1:96:cc:f6:3d:0e:
cf:de:3d:a8:5b:10:84:db:d4:65:c1:cd:de:7e:be:
b3:4d:84:3b:69:76:b7:37:65:5f:e2:6d:45:c7:da:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D3:D5:3E:B7:01:68:C6:5D:88:61:E5:36:B3:D1:68:83:F6:7F:EA
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:2f:f3:ca:29:2d:43:07:2a:ec:1c:e9:12:23:b7:c4:e7:
f7:64:6d:03:87:ab:3f:4a:72:7e:f3:f9:ef:eb:3b:b1:fb:ca:
63:ba:27:c5:d7:7e:b9:a9:e3:91:b7:6f:b3:56:2c:a7:5d:d3:
9c:bc:08:75:7e:87:64:37:f5:b5:5c:68:25:3e:9f:94:79:1b:
cc:75:71:57:9b:c2:ba:2a:cc:8d:6f:04:65:1c:3c:4b:fe:e8:
8a:30:37:65:ba:e6:b8:9b:1a:cf:1c:43:e4:0e:f6:ce:b8:36:
3f:6d:ed:09:33:98:80:77:db:dc:35:8b:c1:af:26:9b:bb:70:
ef:9b:5c:bc:5b:ab:67:7f:b5:3c:97:d0:04:11:5e:86:4d:4a:
3b:c0:b6:3f:77:11:9f:de:3f:f4:a1:a8:e3:b9:b2:8a:a8:26:
da:a1:64:23:31:0e:98:1d:fb:bf:e4:25:02:10:c6:71:5a:83:
9f:cf:0b:5b:35:b1:6b:73:2a:37:c2:1b:9c:d0:f7:4e:8f:42:
f7:e8:9b:4c:78:9d:25:51:72:0f:cd:44:f4:9d:75:cb:e2:1b:
85:9d:a8:c3:67:32:47:61:f0:20:52:96:38:36:f3:6d:71:80:
50:6c:8c:01:ed:d5:29:27:da:8e:9b:e0:d4:ac:fa:b3:d3:c0:
35:9a:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:14:43 2025 by rpki-client