This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: unLyLc3pH5eF3e+yMGv37dB001OifWqXHwTsV0y8IQ0=
Subject key identifier: 59:65:88:6F:A5:18:8C:E9:A6:F9:E5:DA:63:0B:6D:D4:23:56:82:BA
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 019B59E401D6C79F53F9042F965288845C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 1793
Signing time: Fri 26 Dec 2025 09:01:13 +0000
Manifest this update: Fri 26 Dec 2025 09:01:13 +0000
Manifest next update: Sat 27 Dec 2025 09:01:13 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: SS9fpgQcwJUF1zArinqLPlhBAF0F5/6JlQFUNzdNjr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:e4:01:d6:c7:9f:53:f9:04:2f:96:52:88:84:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Dec 26 09:01:13 2025 GMT
Not After : Dec 27 09:01:13 2025 GMT
Subject: CN=5965886fa5188ce9a6f9e5da630b6dd4235682ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:61:37:66:f5:eb:b4:b1:3a:40:9a:c4:4e:
d2:00:4d:db:5f:db:67:f9:d6:d8:d0:ee:aa:41:2f:
7d:04:a1:ae:ee:41:30:be:e4:f6:c2:9a:61:45:cc:
c3:39:a9:51:d8:bb:62:00:4a:67:93:67:60:30:95:
37:de:5c:b6:4a:dd:e0:2d:5b:b7:8a:fe:77:a2:68:
61:8b:bf:6a:e1:e1:1e:db:8f:b2:a7:8f:4a:49:3b:
68:50:bf:5a:8d:fe:ba:6a:a7:ad:9a:f4:69:42:2a:
2e:8f:76:e6:0b:3e:e9:02:4e:a5:e5:7e:0a:a4:d7:
1e:71:dc:d4:e2:5a:56:33:c2:c1:d7:0b:1c:c2:54:
9f:d5:82:0b:2f:50:7a:25:a7:cd:82:66:a7:34:4b:
d2:0f:26:0e:06:3d:a0:bf:52:3c:0d:0a:c1:09:3e:
29:dd:7d:fb:ee:4f:17:ed:9a:8c:5e:cb:58:15:4b:
3e:22:11:97:0e:ab:5d:2e:1d:3a:80:35:c2:13:a6:
0f:e5:16:6f:d0:00:8b:18:1e:4c:d9:e9:35:73:ff:
c3:c8:77:60:31:57:24:19:5d:e1:f7:79:ef:34:49:
cd:dd:76:37:92:ce:7b:46:8d:97:4f:a8:38:cb:d4:
b5:66:50:ac:6a:56:22:31:9b:4f:f1:8f:72:64:b1:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:88:6F:A5:18:8C:E9:A6:F9:E5:DA:63:0B:6D:D4:23:56:82:BA
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1f:a2:d4:6b:56:09:45:10:59:7e:24:b1:87:cb:25:0b:57:
5f:3a:01:97:19:a7:df:c8:8a:53:4f:e7:24:9c:df:65:ba:75:
41:d4:8a:3b:89:aa:69:0e:26:09:ac:42:43:4e:2a:0b:80:23:
cb:c4:8d:a2:cc:83:f8:79:c2:61:a4:98:6d:85:c4:1a:d3:c3:
a7:f9:f8:a9:cb:63:e0:bf:57:02:df:ba:7c:78:48:62:86:c0:
ef:33:27:fb:ce:72:f6:16:66:ed:a4:8f:be:87:6c:b1:2a:c1:
5d:8f:ca:4f:c3:ed:7e:be:69:f6:67:3b:20:5a:fa:d2:d6:d6:
16:81:26:63:02:06:19:88:69:18:4b:63:65:1b:39:42:23:90:
2b:be:70:55:10:ce:4f:8e:71:ce:cc:c4:6b:50:67:42:f1:f2:
33:bd:d1:3d:f1:f0:ef:c3:d6:e8:46:c7:51:7b:5d:6b:06:72:
96:c7:c4:7d:36:da:a0:c7:29:67:7f:f4:39:69:e1:57:cc:9c:
63:12:af:85:b6:69:9a:1d:93:38:bc:08:fc:2b:38:26:2b:03:
58:b3:5e:79:0f:9c:d9:c4:fd:6c:bd:34:2c:6e:0c:1f:5f:20:
25:c9:c5:de:11:2a:89:39:4f:c1:ca:5f:14:c7:7b:37:8f:c8:
80:d4:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:03 2025 by rpki-client