This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: mpKL9G32TOuaLEX6CBCT18bclEGw8xPtPDfryllqIz0=
Subject key identifier: 16:7A:F2:AE:74:80:7D:12:67:E3:59:AB:9B:7B:05:CC:35:D1:00:D5
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 019B4815A41DA96198C2F1FD3A53A0CF4B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 179C
Signing time: Mon 22 Dec 2025 22:02:16 +0000
Manifest this update: Mon 22 Dec 2025 22:02:16 +0000
Manifest next update: Tue 23 Dec 2025 22:02:16 +0000
Files and hashes: 1: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: DSFcr8JUf/hhUKznEx0vFEKFvp5ScOl5NBsHj1uDbtM=)
2: UpoRaRKUM_cxz1mUcVdpf2dzj0g.roa (hash: gkhONxi+R49OF3RZKp/33aStKf4NqX/Hm1mDh0fRR2U=)
3: _deNM6L0-gRjzB9Oru0BeDNyfHo.roa (hash: LDo7rHt3sUV11VVSTI9bz2qFEysdcQXIsvCOfT9GJ88=)
4: zWuO-GBcqklRByFpP-KvyxqlmHA.roa (hash: mMGoMj1kmRHV71swlSc1+k5tBlzbfdxCQQL7QyHaoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 22:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:15:a4:1d:a9:61:98:c2:f1:fd:3a:53:a0:cf:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Dec 22 22:02:16 2025 GMT
Not After : Dec 23 22:02:16 2025 GMT
Subject: CN=167af2ae74807d1267e359ab9b7b05cc35d100d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:9b:33:4f:2c:d7:90:24:57:f5:d3:26:b9:
f6:a9:2d:f6:9b:07:81:aa:36:c0:ce:5e:80:42:de:
f2:23:df:f4:80:43:39:3f:c7:d9:5b:3a:24:05:e0:
b1:e0:6e:1f:48:bc:5b:db:91:f4:35:d6:58:b6:19:
7d:09:61:67:33:b1:8c:40:2c:87:db:81:1c:09:82:
76:cf:bd:6a:8c:25:0c:d6:55:5e:21:66:c4:42:d2:
e8:08:9c:68:79:3f:6e:76:94:64:f1:d1:fa:c0:ff:
99:ad:d0:fb:8a:c1:19:82:a0:e1:45:31:2b:d5:f2:
a9:61:79:7c:ed:42:d0:f2:d3:cb:be:e7:17:4b:ce:
fa:ae:71:31:22:b6:04:56:36:c5:21:4e:6e:3a:e5:
1e:02:8f:e7:5f:7f:26:99:84:23:53:f0:13:c1:ba:
4a:59:9d:28:23:52:83:16:87:36:0f:6f:0c:37:a0:
45:da:57:95:e5:ce:71:29:68:75:79:1b:6f:6e:4c:
50:c1:9f:0e:06:aa:a1:96:eb:74:62:8a:0a:fb:97:
51:cd:18:fc:af:c4:30:98:8b:28:60:bf:39:75:e6:
24:ff:55:7f:89:f7:53:1a:04:d8:81:a7:9c:16:f5:
29:cf:27:25:2f:00:11:b7:ec:dc:76:93:ce:96:41:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:F2:AE:74:80:7D:12:67:E3:59:AB:9B:7B:05:CC:35:D1:00:D5
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:17:cb:92:20:8f:97:e0:fa:f5:68:8a:87:5f:ce:b9:81:62:
8c:62:23:4a:48:b4:d5:42:81:c2:f6:fd:98:b0:5b:fb:77:ed:
b3:d9:33:73:7e:14:e1:05:10:74:a0:79:47:c9:28:e2:91:9b:
f5:60:25:15:d8:a2:ef:e3:ba:a6:61:1d:61:5a:41:8d:c3:c8:
c9:77:4c:a3:10:59:fb:9b:66:61:43:7c:5d:8d:81:97:28:99:
30:75:ae:cc:16:31:89:4e:40:8e:2c:d7:15:70:c6:05:cc:7b:
b3:cc:d9:1c:02:ca:c8:87:e0:d2:1e:bb:e6:fb:58:24:4e:c9:
7c:ec:a0:ed:84:1f:36:aa:f9:57:64:92:5d:dd:28:05:6d:c9:
46:82:3e:8c:8e:8d:49:3d:ba:e8:b0:61:ef:ec:19:a7:5d:c4:
9a:e8:30:45:42:18:ab:c4:1d:7b:42:5d:9e:f7:97:a2:d2:dd:
f7:89:84:8d:93:61:3b:5f:cf:b6:4b:1a:75:98:03:c8:08:4c:
05:b8:67:dc:52:ab:13:f9:ad:62:c6:a5:e5:2d:81:73:92:88:
6c:f2:58:d8:b6:a6:93:63:4a:c8:ec:48:be:ea:4d:6b:71:24:
0d:d3:6e:e8:16:f0:d8:e0:9b:22:a7:71:a1:b6:db:36:79:fa:
b4:75:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:54:15 2025 by rpki-client