This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File: BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier: VJPwALTwKlgchU1DJHCrNvxKDO4w0CrRwJhxw+x9itQ=
Subject key identifier: 3A:42:07:A2:FA:53:1C:26:92:42:BF:2F:88:14:DE:9E:A9:54:1F:88
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 019B251A4773204D166684F751D1D5CA1219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number: 1783
Signing time: Tue 16 Dec 2025 03:00:37 +0000
Manifest this update: Tue 16 Dec 2025 03:00:37 +0000
Manifest next update: Wed 17 Dec 2025 03:00:37 +0000
Files and hashes: 1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=)
2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: CXHgzevPA1nLZpFaIS84WZ3uSf0V28N5Gy8igyeTgGY=)
4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:25:1a:47:73:20:4d:16:66:84:f7:51:d1:d5:ca:12:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Dec 16 03:00:37 2025 GMT
Not After : Dec 17 03:00:37 2025 GMT
Subject: CN=3a4207a2fa531c269242bf2f8814de9ea9541f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:58:33:2a:6b:e3:13:a0:2c:3c:3d:13:fd:
8b:c0:11:cc:c9:d3:e8:be:2d:9c:ec:03:40:04:96:
ea:e3:f5:24:42:ed:e2:f6:63:bb:e6:6e:d4:20:84:
0a:c1:50:9a:c0:ee:cc:4f:67:5b:26:df:8b:7b:c1:
5f:0c:31:16:16:64:61:6b:61:c4:15:e7:a5:26:b2:
55:b2:50:49:47:05:c0:dc:b5:5f:f2:8f:11:e7:2a:
c5:cc:51:f5:87:9e:9d:52:76:29:b5:90:99:a7:e5:
f9:23:8a:35:85:12:f6:56:8d:d9:a4:7c:16:0e:6f:
c6:72:53:af:72:84:82:92:8f:ba:46:28:9f:e6:69:
64:43:6c:1c:52:44:66:70:da:10:48:84:57:6b:c1:
77:fa:77:14:2a:6a:bd:db:2f:6f:e0:dc:35:f0:ec:
c1:f2:de:3e:94:ce:02:ad:6f:7a:32:20:62:89:52:
f8:40:21:bf:59:40:6c:63:35:34:39:78:f5:7d:5d:
78:7d:39:28:e8:e4:36:15:40:40:3c:a3:00:46:77:
44:91:89:b9:38:d3:32:55:59:72:64:04:1c:cf:f8:
2e:94:df:23:98:62:2e:9d:e8:9b:0f:ac:c9:53:56:
d2:11:25:aa:62:3a:a8:b8:76:c2:93:67:52:55:1b:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:42:07:A2:FA:53:1C:26:92:42:BF:2F:88:14:DE:9E:A9:54:1F:88
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:2b:1e:97:d4:6f:63:a9:01:89:25:fa:0f:58:1a:d9:13:
71:7d:6e:13:d9:54:4a:e8:94:4a:d8:ab:70:05:ce:dc:ea:86:
d0:94:49:76:19:89:c9:44:08:14:ca:6a:81:3c:63:0e:fc:60:
90:20:90:cf:ff:0d:c7:ea:5a:a0:50:18:91:0c:48:a8:a8:4e:
2d:c7:75:ab:ea:2b:cf:1e:ea:fc:9b:53:16:84:bd:60:4b:85:
98:49:7d:e4:85:18:93:fe:46:85:6b:6d:57:2c:45:8f:0f:90:
84:b4:c3:9d:74:55:5d:49:0a:56:3a:eb:d2:c7:e2:1b:c1:87:
46:00:6a:a1:c6:6c:38:fb:dd:f1:74:12:58:3a:cc:40:6a:53:
0c:31:61:b2:00:e7:d0:63:c9:3d:72:66:69:82:d4:90:f9:8c:
ac:52:b7:fa:a7:ff:cc:b4:f3:68:d9:d8:e7:20:73:83:08:4f:
4b:da:ed:c4:10:ef:06:ca:dc:e7:78:8f:bb:2b:88:a8:6e:53:
18:8a:e8:1c:81:a4:5e:9b:58:b3:0c:77:66:db:3c:87:4b:6b:
57:45:b3:66:c2:bc:c3:c7:8a:ab:22:e6:c5:a1:69:3f:45:d0:
a3:12:5b:49:ad:37:99:cc:50:5c:91:11:af:fd:cb:11:05:74:
71:0a:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:47:22 2025 by rpki-client