This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: XTuIXy0nzIvQJIG9ox/BF7PejYtHJ+epEyYP+ETHhkc=
Subject key identifier: 42:63:A6:13:7D:39:8D:0F:3F:F9:5D:8F:BB:1B:7A:58:36:14:94:47
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 019B1BAAA6DFCE846C723DC53A722E55196E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 177F
Signing time: Sun 14 Dec 2025 07:02:07 +0000
Manifest this update: Sun 14 Dec 2025 07:02:07 +0000
Manifest next update: Mon 15 Dec 2025 07:02:07 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: 4TR36xieHvBCIoc4xszc7qiImmV5SkMZvW/R9PbWyvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:aa:a6:df:ce:84:6c:72:3d:c5:3a:72:2e:55:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Dec 14 07:02:07 2025 GMT
Not After : Dec 15 07:02:07 2025 GMT
Subject: CN=4263a6137d398d0f3ff95d8fbb1b7a5836149447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:a8:47:57:ab:5a:94:c3:f3:7e:c6:55:9a:
8e:18:64:27:4a:b8:37:c8:59:b4:0b:91:53:df:5e:
90:28:7c:69:b8:d2:dc:0a:a6:b5:a0:0b:dc:84:65:
42:65:de:34:36:11:4f:f9:22:4b:17:57:bc:c7:28:
49:3b:81:d1:00:5b:a1:87:e5:03:c2:e3:5d:06:be:
2b:02:dc:94:09:03:8e:4b:da:1a:de:fa:5b:79:62:
6a:b9:9f:1c:60:1b:7c:0d:df:c1:9d:89:69:d9:ce:
70:6c:74:84:93:bf:87:b2:16:88:1f:d0:b3:84:44:
e9:38:07:c2:26:52:6e:73:da:c2:cc:7a:7d:a9:f3:
13:12:b8:25:6b:e4:87:50:53:11:2c:49:a7:12:c7:
9c:1b:28:b4:2f:65:f5:86:ed:84:24:1a:eb:b0:53:
f0:c2:1b:dc:35:73:9b:55:a0:58:b8:42:a4:43:45:
a1:03:93:08:ca:6d:d6:7b:dd:01:46:36:2e:5e:c2:
02:37:16:40:ae:6d:e0:65:3f:a9:5e:0d:6e:58:9e:
e2:fb:0b:a3:6e:b9:7f:f5:92:d7:d3:b3:f2:e1:1a:
a7:ef:50:a9:c4:1c:28:7f:86:29:b6:20:3b:64:55:
32:f7:26:bc:d3:12:f0:81:45:78:fe:6f:51:90:2c:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:A6:13:7D:39:8D:0F:3F:F9:5D:8F:BB:1B:7A:58:36:14:94:47
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:83:ea:01:c5:f9:73:b4:f7:f9:2d:55:65:88:0f:21:4a:04:
6f:9d:08:36:dd:88:b9:24:c1:9e:b6:f5:e8:3c:b2:04:78:f6:
7a:88:ce:d8:82:f9:c7:be:10:3f:09:3f:aa:c2:93:3c:0d:e2:
e2:12:c6:fa:f8:13:6a:25:b3:1d:ab:10:4c:5a:5e:e2:8d:43:
36:8d:1e:87:89:62:4c:fa:4e:2f:7b:02:8f:86:d0:a3:c3:b4:
c2:1f:a4:4b:df:0b:d7:61:94:1e:9a:c0:eb:99:f2:de:d4:66:
f2:06:c3:c8:26:60:8f:52:b1:9a:b4:68:6a:a6:ae:51:6a:fd:
79:f3:c7:f9:83:db:65:77:4e:92:65:0e:e2:e6:7b:30:74:8e:
a8:35:0d:01:51:d7:d3:44:40:f6:a3:dc:0f:98:18:71:19:a1:
c8:45:25:88:95:33:2b:20:61:2e:91:94:0e:4b:eb:34:ce:b6:
d9:52:19:a9:0b:92:9d:61:9f:fb:2f:c2:f4:17:03:96:0e:4f:
7a:16:5a:bd:3a:1d:04:bb:fd:61:dc:19:8e:a9:9a:6f:9e:78:
38:8a:c1:ba:e0:ae:c8:ea:80:9a:d0:66:cd:88:c8:25:c5:07:
84:67:9e:87:42:26:86:1d:26:68:76:a8:7f:7e:c6:27:70:24:
eb:48:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:44:54 2025 by rpki-client