This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File: mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier: 5wxX1eeCCYbDvRxCOnJHXszPJOjcJUPrHQCVUteG5xM=
Subject key identifier: 48:D9:6C:FB:4D:4D:17:AA:47:E9:F7:12:A9:66:57:22:94:84:09:DA
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 019B4091C8B95209965518ED3E308CBEA8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number: 09F5
Signing time: Sun 21 Dec 2025 11:00:54 +0000
Manifest this update: Sun 21 Dec 2025 11:00:54 +0000
Manifest next update: Mon 22 Dec 2025 11:00:54 +0000
Files and hashes: 1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: zGz+2BSAGnPXwmcWMLmPHyfEjtF2I+MepEPtTR6NIUY=)
4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:91:c8:b9:52:09:96:55:18:ed:3e:30:8c:be:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Dec 21 11:00:54 2025 GMT
Not After : Dec 22 11:00:54 2025 GMT
Subject: CN=48d96cfb4d4d17aa47e9f712a9665722948409da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:ce:e6:2b:9e:23:52:02:38:19:a8:73:a7:
19:f6:1e:79:cd:fa:c9:af:50:09:fa:5c:b3:4f:35:
75:83:e4:3c:12:56:bb:77:e8:00:9e:a6:54:30:fb:
82:f6:b1:7a:66:80:f9:28:72:6a:e5:32:7b:3d:42:
02:ac:fd:1a:22:45:04:d9:bf:45:ae:e9:49:7d:8b:
b0:04:12:17:a1:88:5b:e7:7f:63:ae:32:2f:5e:7b:
f3:ef:4b:61:94:9e:55:f2:af:64:4a:dc:51:6f:1c:
21:6c:57:9b:77:1b:78:bf:a3:ec:73:6d:57:08:77:
58:b1:04:ed:5d:ac:b9:e3:40:8a:39:e2:3a:e1:32:
09:2a:a6:c0:d7:c2:73:2b:78:13:dc:2d:68:bc:5b:
e9:e5:b9:c4:2b:22:df:40:51:62:a8:ca:6a:0b:83:
a2:97:e8:f4:d5:a3:df:24:18:e5:13:cd:1b:94:24:
4f:2c:2a:29:78:eb:75:ce:1f:1f:77:36:c0:9b:54:
eb:d9:29:c5:a4:18:ab:47:f3:1d:b1:74:32:d9:41:
7e:ce:de:aa:df:81:4d:c3:38:0a:8a:17:7c:f3:7b:
4d:59:a6:d4:61:97:7e:68:de:ec:2b:80:a5:14:35:
19:3b:e9:25:a7:e0:c0:3f:af:5e:55:a8:92:d1:62:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:6C:FB:4D:4D:17:AA:47:E9:F7:12:A9:66:57:22:94:84:09:DA
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:eb:3c:02:91:89:fc:a7:55:a9:f0:ab:a2:68:ba:e9:6d:8f:
71:ed:a5:29:be:fe:42:db:ff:d8:e6:0b:34:fb:09:ec:6b:05:
47:cf:1d:b1:38:13:88:99:e0:73:90:11:8f:e3:c5:07:9e:71:
67:d5:e7:2c:d6:ed:b0:28:e3:f3:44:c3:52:3a:22:40:6c:cf:
b9:aa:1d:0d:98:7d:2e:c3:e5:a4:e5:0e:e0:ea:68:19:c0:79:
3c:94:69:dd:93:5d:59:0d:42:05:6d:c8:59:2e:1f:0e:ce:7b:
86:e6:3e:0d:d4:46:fa:76:63:31:38:3c:54:1c:c0:3f:29:b5:
4d:4d:04:34:94:d5:9e:9b:36:4a:97:76:16:ff:65:00:c9:96:
27:88:78:af:f4:d4:03:17:da:8d:1c:2f:ae:e9:fd:ac:3c:1c:
aa:a1:07:5c:b6:ce:f6:08:72:f7:5b:55:d1:af:8a:d8:33:bb:
ce:81:60:09:db:6f:e9:d5:56:d6:15:a6:19:bc:e6:0f:28:0f:
79:a1:86:1a:ff:f9:7f:e2:7d:4a:59:6d:26:0b:69:a7:fe:d1:
95:52:36:48:ec:a4:cf:28:74:bf:b8:97:17:f7:ca:90:3b:4e:
0e:30:1f:5f:0c:51:d9:62:0e:ce:6e:43:85:ed:e8:20:a6:48:
b7:b6:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:48:11 2025 by rpki-client