This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: M4960jB0PXtyFx0tU4B+P6uQvyTYhIdVR+Fb4Eutx9I=
Subject key identifier: E7:15:B5:27:19:59:D2:05:AE:EB:E7:94:15:C8:8B:13:EE:1A:FE:F3
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019B0FDC1B525F79483F2FC1290DFB63C713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1469
Signing time: Fri 12 Dec 2025 00:00:41 +0000
Manifest this update: Fri 12 Dec 2025 00:00:41 +0000
Manifest next update: Sat 13 Dec 2025 00:00:41 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: /tkNWA70g78+XPfwI/Od8R21dP68i9KobMgozIBE2pM=)
3: kusmDsO8Uw_ySSs2hEPQ-H13FYM.roa (hash: 1rGB+aRAXuMa2bU+lVn68pSMVNrMTSXd48nfTvzXVGk=)
4: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:dc:1b:52:5f:79:48:3f:2f:c1:29:0d:fb:63:c7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Dec 12 00:00:41 2025 GMT
Not After : Dec 13 00:00:41 2025 GMT
Subject: CN=e715b5271959d205aeebe79415c88b13ee1afef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:68:0f:37:6e:03:90:4a:eb:47:95:07:e9:
f6:ef:1f:64:db:72:d8:8b:ba:61:8a:f3:44:77:9f:
25:e0:0d:b7:23:a8:17:05:53:12:d6:3f:b6:73:cd:
1c:55:33:0b:9d:9f:b5:c4:1d:a7:c4:5a:26:a1:1a:
79:bf:c1:c6:2b:a3:35:7f:eb:a4:0f:d9:68:65:9c:
fb:91:13:8b:c8:46:88:15:7c:9a:f5:bb:26:d0:f6:
96:7e:20:2c:ae:a8:28:89:da:a0:58:72:3e:54:1d:
71:24:fa:3c:c3:46:18:a3:1d:ce:15:72:e5:9d:6f:
f2:e3:c5:93:21:d9:b6:97:5e:dc:b5:3d:08:59:1f:
16:21:1b:fe:6c:61:d7:af:c2:e8:8a:eb:13:b5:c6:
8f:e0:79:79:2a:88:bf:e4:dd:23:1f:60:75:b8:32:
a5:dd:73:61:b3:d6:9b:1e:2c:41:17:82:c4:cb:60:
20:f2:23:7d:c8:ae:6c:eb:a4:dc:2f:7b:45:ec:58:
73:a9:44:08:55:7a:3a:bc:7a:03:41:15:e3:b8:a9:
d0:c7:03:64:6e:68:32:24:c3:99:a8:16:dc:f1:13:
45:34:ca:f2:1d:41:a7:6c:c3:bc:42:99:12:19:54:
81:e4:16:08:21:69:f0:ed:13:4b:63:78:0b:5e:fa:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:B5:27:19:59:D2:05:AE:EB:E7:94:15:C8:8B:13:EE:1A:FE:F3
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:c6:3f:96:9b:48:74:59:16:db:cf:2f:af:49:a1:e5:69:
24:bb:33:8b:60:ec:48:9a:94:d0:6e:d2:92:27:a2:a0:d8:cf:
9c:86:20:9b:90:cd:87:6f:da:0b:22:e9:3b:e5:95:eb:d2:93:
13:88:eb:dd:1b:1f:33:0c:18:db:f6:75:d1:53:35:f7:b8:3f:
29:62:f3:3c:3b:bb:03:30:12:07:ee:5f:c1:c2:99:27:50:b5:
8f:73:40:2b:1b:df:de:fe:2c:29:df:00:d9:d8:8a:c2:0e:da:
32:b8:cd:f0:75:27:87:af:18:f7:99:8f:21:4e:4e:42:bc:3f:
57:da:b8:df:53:fa:5d:2c:c7:a1:45:69:d1:cd:72:fb:e3:52:
17:7f:31:48:78:47:ac:84:e1:09:74:94:fb:15:fa:28:c9:58:
8a:eb:62:3a:97:57:7d:ed:09:5f:15:a6:2b:81:1d:ce:62:bd:
d8:35:bf:44:b4:81:18:e8:7f:d6:94:e1:16:b7:23:fc:d7:4c:
75:11:53:ed:2f:66:42:12:c8:2d:fb:37:83:29:ff:c2:73:e4:
46:0f:1d:cd:c7:83:f8:8e:96:80:61:7b:f3:72:85:25:e5:c2:
1d:42:5f:04:13:80:8e:b4:0b:29:e8:bd:35:ea:d1:55:32:36:
f4:ef:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:29:25 2025 by rpki-client