This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: Xp4lufXzmuS6JfzzBDfAhyuGNHGDmAebWkX1U+pE7jk=
Subject key identifier: A0:AF:41:41:69:9E:FB:4F:4B:D1:06:AA:0D:07:47:06:99:DC:FA:9F
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 019B1238553900DDF907A73631A575631BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1772
Signing time: Fri 12 Dec 2025 11:00:40 +0000
Manifest this update: Fri 12 Dec 2025 11:00:40 +0000
Manifest next update: Sat 13 Dec 2025 11:00:40 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 4Us1UH+ZG8EX2bFTTVp2v/C5wbZHI/zeeldEpYGBaV4=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:38:55:39:00:dd:f9:07:a7:36:31:a5:75:63:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Dec 12 11:00:40 2025 GMT
Not After : Dec 13 11:00:40 2025 GMT
Subject: CN=a0af4141699efb4f4bd106aa0d07470699dcfa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:b9:3d:63:d6:39:4b:0d:4e:ba:00:44:a7:
f7:0b:f5:f0:e1:e1:a9:2d:03:a9:26:41:2d:60:99:
e4:15:65:de:b0:62:bf:bc:0f:b1:7c:07:0e:e8:52:
de:3c:72:ad:be:95:df:c3:0f:d4:35:5c:7c:2e:7b:
cb:47:2a:d5:15:01:97:07:8e:f4:91:5e:ea:0d:be:
b2:a0:77:9f:6d:7f:d4:21:6a:75:57:5e:3d:6b:9e:
4e:b1:73:4f:dc:0f:83:6e:a2:3c:d2:b7:1b:09:f8:
b5:6f:cb:2d:e8:d6:93:f6:be:77:98:16:1d:37:c7:
a6:ee:ff:55:cf:3f:4b:1b:00:ff:a4:35:95:b1:5f:
1c:6b:22:32:6e:b0:d4:73:d8:4c:ce:66:c3:42:ba:
39:78:d3:e4:1f:a8:87:ee:d0:83:aa:3e:6b:8d:4d:
87:0f:a7:99:91:54:33:de:93:22:21:cf:44:0e:31:
69:99:35:81:d0:62:3f:30:15:64:33:b6:92:0d:5f:
85:2f:26:70:75:87:51:a2:23:e3:41:25:d6:2f:a4:
06:05:3e:87:62:08:7f:0c:f3:ca:19:65:65:92:91:
d8:62:ee:27:3f:7d:1b:fe:5a:da:5c:d7:10:32:e3:
d8:a7:ff:09:03:37:3c:71:a3:50:54:62:f8:22:2b:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:41:41:69:9E:FB:4F:4B:D1:06:AA:0D:07:47:06:99:DC:FA:9F
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:9e:80:78:0e:c0:d3:21:3e:45:af:6d:52:af:05:30:f1:
10:e7:62:69:51:80:e1:9b:29:31:0b:73:d5:17:38:ff:0f:8a:
e5:91:63:1e:c8:7f:22:98:0c:56:6e:7e:e7:f5:39:ff:00:cc:
a8:e0:26:46:34:bc:c1:5b:94:d9:d0:68:40:47:bd:db:fd:9e:
5f:c7:0b:9c:7c:f2:ea:f9:90:b7:2b:22:47:45:22:df:48:d9:
94:ca:83:ed:c8:d6:e3:12:4a:d7:f3:a2:01:5e:5b:9b:d4:b7:
4f:fb:d9:16:e3:df:38:00:5e:f1:57:98:e5:a4:9e:36:d0:02:
23:c4:de:78:ea:9c:bd:fe:86:1f:99:c3:a7:e5:75:13:7b:f7:
07:90:81:0b:19:24:00:e9:f2:46:91:28:ef:a4:3a:88:8d:a0:
11:aa:05:48:71:a4:4e:2d:33:63:1c:1d:a5:14:f7:c9:4c:a4:
9c:96:5b:40:83:b6:57:e4:31:ef:94:4e:4b:f8:60:b5:c0:08:
f8:02:af:e0:d0:d4:58:5d:6e:d5:b3:98:9e:70:a0:a1:cd:16:
fa:af:cc:1c:cb:0e:78:b7:78:04:0d:ef:8c:d4:12:c0:de:cd:
69:a7:1e:a9:bc:f4:e5:03:d1:d3:fa:be:a9:04:49:8a:ca:0b:
dc:6e:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:19:43 2025 by rpki-client