This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: u9zXMjwQ5YcCVQBxRIkQuGAzXaTp4CZ71oVN8nHNlkg=
Subject key identifier: 86:49:D9:A6:B1:23:47:09:DA:A7:6D:E4:C9:FA:A5:F8:20:7B:09:31
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 019B4815BF2D3EDDF388CA78978DD1C9760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 1792
Signing time: Mon 22 Dec 2025 22:02:23 +0000
Manifest this update: Mon 22 Dec 2025 22:02:23 +0000
Manifest next update: Tue 23 Dec 2025 22:02:23 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: 714+sVgXcYRNgdrmNqJlB2q1KydwxCSG0dq3WaGe9GU=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 22:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:15:bf:2d:3e:dd:f3:88:ca:78:97:8d:d1:c9:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Dec 22 22:02:23 2025 GMT
Not After : Dec 23 22:02:23 2025 GMT
Subject: CN=8649d9a6b1234709daa76de4c9faa5f8207b0931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:ba:67:77:ab:97:ef:04:4d:c6:6d:d6:a1:
16:4e:42:56:4e:52:ee:0c:f4:0c:fe:29:59:42:f1:
b5:b2:9e:05:e5:36:27:3b:5a:ee:21:85:2b:2e:58:
eb:e3:93:70:bc:46:7f:26:60:95:e7:00:78:12:af:
2c:b5:d0:e1:f8:75:ab:44:41:05:f7:da:97:c6:2f:
c9:c3:5c:de:2a:9c:1f:7b:99:92:e5:2a:ff:06:64:
3a:4e:31:34:14:95:c1:d0:57:a4:e9:5f:59:f3:51:
f7:0a:3f:75:3f:ce:f2:49:bc:1c:1e:6e:b0:17:9f:
fc:94:1b:08:52:72:9f:db:04:4f:4c:45:59:4d:4e:
e0:96:1f:14:47:da:b8:b2:9e:19:ce:80:53:35:05:
8f:f6:4b:99:e8:76:9b:b8:29:28:e6:14:75:a7:3f:
ee:d4:fc:9b:12:90:49:cc:46:6d:68:77:d6:c7:68:
34:c6:9f:34:95:44:ac:8a:47:1f:e6:ef:04:0a:14:
57:b6:60:da:2e:fc:aa:5a:b6:3b:99:bb:6f:36:1a:
2c:57:df:8e:23:08:8d:88:46:e7:95:41:1d:87:97:
63:77:bb:bc:aa:a7:1b:8e:94:d7:92:c8:e2:b4:4e:
8d:9c:a7:12:fd:da:76:bb:d3:b3:fd:6e:2a:99:39:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:D9:A6:B1:23:47:09:DA:A7:6D:E4:C9:FA:A5:F8:20:7B:09:31
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:3f:ea:63:16:2c:fb:e1:63:b1:9b:5d:8e:aa:3b:f4:28:
2a:7a:12:48:6b:1c:e9:87:c5:77:a8:7c:b6:cd:67:73:d9:2b:
cf:7d:db:79:09:b8:34:ac:38:c0:2d:86:71:d1:3c:71:44:19:
17:9c:9d:eb:a3:eb:67:37:ca:ba:37:b8:4f:05:0d:b3:2f:9c:
6b:c0:c6:06:8f:c3:db:65:ad:a9:fb:79:f5:6b:e3:20:ce:1d:
92:19:f5:6c:2f:a3:1d:ba:9d:cc:1e:d7:74:fd:d7:bc:42:7d:
9e:a7:ab:38:80:c2:7f:49:78:b3:16:43:8f:f7:4c:1f:ff:d9:
8d:4f:99:c5:85:03:d6:41:16:a9:27:ae:cb:2e:2a:da:0e:f2:
2b:87:1c:24:e3:b4:74:0f:1e:72:fa:4f:72:ed:3a:3b:8c:36:
ab:4d:36:51:1d:ef:8a:01:fc:b0:59:01:6c:a8:25:df:44:35:
80:ea:38:ad:3e:f1:d5:ed:ca:c8:0f:98:74:93:f9:6f:14:24:
ac:41:51:51:7a:b6:52:68:53:a4:da:a8:d1:16:de:0d:ef:0a:
cd:e8:00:30:7f:c0:c9:47:3c:3f:a6:7c:0f:30:87:22:ee:d9:
fd:69:9c:cb:84:76:32:37:36:8b:67:57:f3:60:49:ed:4a:09:
b6:2f:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:52:12 2025 by rpki-client