This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: qPMX1QSwkbewWrH6Kir1PcY6pXCSC//tRCx8kKYT+tM=
Subject key identifier: 91:63:4F:C4:BC:E8:DB:0C:6E:08:25:5A:0D:2B:38:A5:AF:C1:FF:9A
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019B2250B6C68831D04F74B83F83F86C57B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0F53
Signing time: Mon 15 Dec 2025 14:01:13 +0000
Manifest this update: Mon 15 Dec 2025 14:01:13 +0000
Manifest next update: Tue 16 Dec 2025 14:01:13 +0000
Files and hashes: 1: 74i8adSuyk3kRHlH4ayLicT7xOo.roa (hash: Nfrv0YEiRjMeyhh89QiKjse1lGFwS8hysdJzu2cW8w4=)
2: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
3: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
4: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
5: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
6: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
7: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: duJ8HI6TWKXKQGjtXgZ2UAW0im9n4xTvyukI5Z5F//s=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:50:b6:c6:88:31:d0:4f:74:b8:3f:83:f8:6c:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Dec 15 14:01:13 2025 GMT
Not After : Dec 16 14:01:13 2025 GMT
Subject: CN=91634fc4bce8db0c6e08255a0d2b38a5afc1ff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:c1:c9:b7:b2:b8:16:ef:e1:90:6e:01:30:
37:79:34:8e:4b:ea:47:de:22:f5:36:87:81:ea:7d:
1c:13:83:8e:9b:ca:2a:9d:6b:13:5e:a2:37:29:10:
5a:cd:62:11:f5:92:fe:59:f3:15:6c:0e:18:3c:84:
70:33:24:64:43:64:f8:31:a5:0f:f4:b6:dd:ac:48:
36:b0:b3:9f:bc:a3:a6:b7:d9:d0:62:e9:c1:13:96:
68:8f:e0:c1:45:53:0c:a2:5c:89:8b:1e:31:a9:47:
fa:3b:f6:38:35:d7:47:3a:53:6b:8a:d8:09:b0:30:
af:ca:1e:00:88:c5:33:cd:5f:07:55:91:b2:1c:e5:
1c:dd:32:76:e3:8d:9d:0e:8e:9d:fd:71:48:f2:48:
b8:0b:9e:64:a6:1d:ce:9e:b4:f1:18:8f:b6:ce:02:
ff:25:2c:01:09:13:c0:a2:23:69:29:e5:d7:ed:24:
70:4a:48:1d:a1:36:bb:0a:62:1d:00:83:0a:f7:6b:
44:1a:c2:29:7d:3e:16:c1:30:39:a8:88:41:d3:55:
ec:da:b5:cd:05:15:0a:26:b1:e7:14:e5:be:52:f2:
86:e2:03:68:c2:f5:e4:7c:1d:46:ea:18:f3:46:04:
d6:36:8b:e8:77:0b:87:66:48:46:b7:a6:f5:85:3d:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:4F:C4:BC:E8:DB:0C:6E:08:25:5A:0D:2B:38:A5:AF:C1:FF:9A
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:18:08:79:fc:c5:da:75:96:70:be:8f:ad:96:49:00:09:dc:
af:df:45:44:10:6e:07:44:0c:f3:7b:2b:a5:e5:67:89:d3:a3:
44:1b:fd:9b:eb:aa:93:88:7f:61:8c:82:5a:69:4c:4c:95:ef:
ed:f2:21:ae:8d:ce:c3:48:25:c6:2a:13:bd:42:86:50:9d:90:
e0:14:92:dd:15:cb:88:4a:af:f3:86:0d:2a:be:5c:88:ec:5c:
a8:e2:52:cd:7a:72:3b:45:d8:6e:6d:a9:27:32:4e:d3:97:72:
41:8a:bc:9d:91:23:aa:e8:16:da:56:73:91:24:0a:ff:c7:3c:
e8:d3:cd:f8:3a:c0:9a:57:c2:4f:8f:b1:6b:be:df:fb:4e:83:
66:1a:ce:1c:ba:45:51:0d:bb:19:7c:05:44:6b:3c:03:c8:26:
69:e5:d0:da:34:e2:9d:a9:95:4e:77:b8:13:3d:8e:f4:56:d0:
df:cc:03:73:fe:55:29:83:04:e9:5a:e8:e4:e7:3c:42:50:90:
a3:f9:a4:da:64:d0:28:15:48:1d:23:0b:d2:04:96:a3:bb:89:
e8:b8:e5:ee:2e:89:8f:f5:ea:6a:39:50:73:b4:37:eb:b9:66:
fc:5d:36:d6:50:48:12:c3:3e:4a:4c:3b:11:c7:a8:5a:24:15:
5a:18:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:33:45 2025 by rpki-client