This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: AV9irr/UBvNf8KW6TIBtbwy1I3MjGVAlgv0t0TlVfiI=
Subject key identifier: FF:B9:05:69:C7:CB:F2:13:8F:2A:1F:70:F9:E0:84:F7:5D:8C:43:6C
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019B063415C7ADCB9C1C43F58EA8531056A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 1470
Signing time: Wed 10 Dec 2025 03:00:35 +0000
Manifest this update: Wed 10 Dec 2025 03:00:35 +0000
Manifest next update: Thu 11 Dec 2025 03:00:35 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: n4u+00BrU7FhfOWpO5nDdcPi009H0SebudSPmxTsE48=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:34:15:c7:ad:cb:9c:1c:43:f5:8e:a8:53:10:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Dec 10 03:00:35 2025 GMT
Not After : Dec 11 03:00:35 2025 GMT
Subject: CN=ffb90569c7cbf2138f2a1f70f9e084f75d8c436c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:fa:27:cb:fe:bb:bd:df:22:95:c4:12:60:
6b:09:15:f1:cb:c8:c5:ba:cc:63:c6:1c:4d:9e:21:
39:ec:1f:a7:c2:8a:e0:60:d7:f9:4d:5d:96:2e:90:
41:14:ed:d9:f9:9a:7f:67:42:f6:14:1f:83:8e:22:
81:ac:fe:d9:a5:c7:d4:d6:ce:00:76:0a:fa:0a:1f:
fe:d0:ed:9c:e4:cd:75:82:e2:05:fc:1b:e8:af:67:
82:d4:8e:6d:c0:92:95:8d:2e:9d:cb:16:6f:30:26:
bc:3a:b3:1d:f0:f7:d0:80:a2:ba:e2:f1:43:50:16:
58:22:de:75:b8:36:7c:ad:e0:8d:f4:4d:63:0b:47:
3e:67:cf:13:c6:66:ea:07:70:c5:fc:6f:ee:21:43:
08:b1:60:4e:7a:81:52:2f:9f:9e:9f:dc:ec:99:4b:
d8:0d:15:29:76:62:19:78:cb:fe:fa:87:07:79:a7:
86:c0:da:b9:6d:3b:b9:7e:21:a2:f5:ca:87:95:82:
eb:e2:59:5f:30:30:2e:69:56:e5:7c:04:67:b9:b9:
81:59:da:60:83:47:c7:8c:c9:5c:29:b6:b1:46:19:
eb:f2:eb:00:d4:84:d5:22:ae:92:87:cc:ac:b1:e1:
22:fe:e4:90:4f:c3:b0:70:f6:79:e1:8f:85:08:09:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:05:69:C7:CB:F2:13:8F:2A:1F:70:F9:E0:84:F7:5D:8C:43:6C
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:45:35:a9:91:15:6a:4f:09:b7:6c:13:89:9c:62:0f:76:
8a:59:6c:3d:bd:63:2b:01:36:ae:c7:72:a8:35:1d:1c:4d:c3:
34:0b:0c:55:8e:87:2a:23:9e:0c:7d:a9:24:52:cc:e8:9f:b2:
fe:d5:58:0c:ca:83:a6:60:b4:08:23:94:ee:fa:e5:b6:7a:fc:
05:55:2f:b8:3f:11:71:be:50:6c:e6:d3:c2:02:43:06:ee:60:
01:8e:b3:f0:f9:49:1a:16:93:7b:65:56:bd:74:6c:8b:a1:7b:
3f:cd:a9:b9:06:51:ef:74:59:39:1e:d9:b7:5b:67:c7:86:61:
b5:97:6a:f3:0f:61:fc:33:ea:86:0d:da:c4:c1:8e:b4:54:3e:
df:2d:a3:a3:62:00:dd:21:c5:24:1e:a6:c0:bc:ba:a2:28:46:
4a:9a:f0:a9:47:dc:dc:0a:fc:ea:bf:ba:fb:e5:f8:e5:e5:78:
33:7f:e8:4b:d0:3b:54:97:f8:08:b8:dc:a3:e3:c9:6d:53:c6:
31:c1:a5:8e:72:32:87:8b:9c:65:51:07:15:e9:d1:e7:80:cb:
3b:d9:f4:cc:98:49:b4:79:21:5f:4e:46:5a:0b:ce:61:29:f1:
22:03:0c:a3:6d:6c:01:dd:04:28:34:1a:9d:59:56:a2:51:ea:
ee:94:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:55:03 2025 by rpki-client