This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: Km0MYh91eO3hUcGRDERBbFWxivXkp2z6FB8Rhda2KUA=
Subject key identifier: 9A:E2:88:2C:A4:EB:72:83:0E:24:1E:96:37:7F:39:0F:35:19:E6:EA
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 019AF6536251E8BA5AD3136453612DCF88F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 1764
Signing time: Sun 07 Dec 2025 01:00:51 +0000
Manifest this update: Sun 07 Dec 2025 01:00:51 +0000
Manifest next update: Mon 08 Dec 2025 01:00:51 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: h72V7elHNOE1C0+t0Cm8mKcQ4doP+VlZ1UKv7Ejpn4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:53:62:51:e8:ba:5a:d3:13:64:53:61:2d:cf:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Dec 7 01:00:51 2025 GMT
Not After : Dec 8 01:00:51 2025 GMT
Subject: CN=9ae2882ca4eb72830e241e96377f390f3519e6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:d7:1f:ac:00:df:08:f8:00:90:cd:42:17:
9c:e8:38:dd:bb:18:1e:5e:d9:88:03:30:4f:a3:01:
5d:9c:13:2b:53:60:2c:08:2e:3f:08:02:5c:fc:3a:
63:24:4a:32:1b:28:88:c8:56:8e:c6:1e:b8:61:76:
8a:a2:48:fa:00:4c:3c:a1:46:0d:f6:0a:8e:70:47:
4a:e8:74:1f:50:21:2d:b3:c0:2e:d0:8c:f1:01:5a:
e0:46:1e:95:df:d7:36:27:3c:04:bb:5a:52:47:bb:
77:d9:3a:5c:62:19:e5:22:c9:bb:5c:bf:94:d4:a1:
85:3f:ae:99:15:38:51:a6:4b:5b:d0:c9:4a:2f:e3:
b6:8e:f3:a1:1e:6d:ec:64:c8:bd:bd:ae:a7:e1:4e:
72:aa:60:29:db:82:e4:30:b5:3c:5d:70:cb:0f:f0:
70:aa:3e:54:7e:1d:84:43:e1:d0:62:94:00:33:37:
4f:2a:f3:fa:14:7d:1c:a3:69:4e:9b:30:36:fd:39:
83:51:54:f5:a3:0f:48:0f:8f:2f:0a:3e:e3:cd:66:
0a:6a:7d:ea:17:f0:4b:26:a8:47:da:48:b7:5e:51:
21:71:47:36:78:fb:90:5a:36:7d:4a:fc:d5:20:2a:
db:93:29:b0:86:14:61:ec:66:4d:0b:44:2a:20:07:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:88:2C:A4:EB:72:83:0E:24:1E:96:37:7F:39:0F:35:19:E6:EA
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:38:fa:ce:0e:e8:a2:28:f8:d8:ef:b6:e6:0d:da:1e:fe:
f1:b5:a6:fe:1b:c0:39:29:af:7b:0d:ac:b9:be:0f:1e:11:be:
f4:67:7f:16:00:5a:a6:50:e7:02:50:c5:5d:b8:21:2a:3e:4a:
0b:8e:53:e9:6d:84:aa:90:de:db:19:17:31:eb:e5:e5:fc:a9:
38:13:4b:df:67:5d:cd:8a:9c:b6:81:d8:e0:b3:0a:fc:29:67:
69:ef:64:69:2a:90:9a:35:ff:ce:72:6b:18:02:40:56:49:80:
1d:90:6e:a0:12:44:0e:16:33:8a:f1:c5:37:45:5a:8a:02:b5:
86:2e:f5:8b:df:c5:a2:e6:b4:3f:42:06:22:cc:df:6c:79:64:
dd:6a:58:64:69:76:69:f9:ef:04:08:e2:3e:1e:ca:55:df:2d:
b9:36:57:ce:a0:fb:0a:e3:85:dd:f9:f0:28:35:a3:84:5c:c3:
d0:1a:66:38:de:49:7b:90:74:e7:b2:f6:48:28:ac:82:c5:cf:
43:62:41:9e:f5:39:73:0f:28:16:c8:73:4b:c8:65:7c:83:84:
86:f5:25:78:18:56:2e:ae:48:83:63:a6:ee:fb:82:90:70:3c:
a0:a5:97:66:2e:6c:1e:51:b6:32:e5:8f:5f:25:c6:25:18:75:
f3:13:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:00 2025 by rpki-client