This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier: 29XFlSV3mUvdkfs+FDPUhHw1nxfnZhdg7/7mqgWF2AY=
Subject key identifier: 91:04:9F:F6:36:05:DE:12:D9:18:24:F2:B1:BD:0D:10:3F:84:AA:D1
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019B0F6EB839BFE4FA1BC0282A6160E0E815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number: 95
Signing time: Thu 11 Dec 2025 22:01:12 +0000
Manifest this update: Thu 11 Dec 2025 22:01:12 +0000
Manifest next update: Fri 12 Dec 2025 22:01:12 +0000
Files and hashes: 1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 1vWvNznAvaPZcc/p1+ZDmbuKXKz8XWJ7k/2aSPvFteA=)
3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:6e:b8:39:bf:e4:fa:1b:c0:28:2a:61:60:e0:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Dec 11 22:01:12 2025 GMT
Not After : Dec 12 22:01:12 2025 GMT
Subject: CN=91049ff63605de12d91824f2b1bd0d103f84aad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:fe:96:6d:35:74:d2:93:8a:46:59:7a:60:
e1:f2:ae:0c:11:e4:d5:df:03:79:f5:54:98:fa:52:
cf:b3:16:ef:72:03:e6:0f:4a:4b:20:97:eb:34:01:
d2:bc:02:77:55:d1:99:6e:49:a8:d7:76:0c:bf:a6:
0b:7e:45:a3:75:a1:91:63:52:0c:45:1f:95:a9:6f:
0b:4b:7b:c3:0e:52:5b:84:56:92:4e:f7:b2:6d:1a:
61:a2:e7:34:74:e3:54:df:8b:c0:42:1e:90:ff:bc:
5d:da:c9:6b:ad:f1:20:23:ae:82:bc:05:f7:86:3c:
93:7e:26:09:67:75:a9:40:05:98:91:56:1a:f1:4e:
11:a1:72:af:36:7a:78:27:fd:0e:1a:12:1a:a1:7a:
08:8d:97:e2:2a:bc:00:96:c0:da:0a:7d:a8:de:a3:
83:18:9f:99:a2:b4:19:48:ae:9a:c0:69:5d:03:4c:
dd:1e:07:7f:6c:e3:fb:5e:79:81:b3:49:f5:58:fe:
76:f4:3f:f0:54:6a:66:78:1f:e5:26:bb:4b:0a:63:
2a:a3:5b:5b:21:03:d6:fe:12:9e:ae:a4:ac:00:d6:
73:ff:5d:aa:23:a5:6e:25:33:f1:78:61:9e:17:be:
b5:37:97:e2:3c:fc:ed:76:f8:6d:5f:de:ce:b5:d2:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:9F:F6:36:05:DE:12:D9:18:24:F2:B1:BD:0D:10:3F:84:AA:D1
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:86:9d:64:22:cf:47:a0:f6:45:d3:3a:c3:05:e2:2a:64:bc:
94:7c:b9:33:f0:ac:3a:87:89:a9:b0:85:c1:53:82:da:13:e4:
7e:68:4b:c2:78:a8:a8:5d:51:48:bf:c8:23:6a:38:a1:a2:e4:
d0:17:e8:6d:ba:75:e3:45:37:34:aa:54:28:3c:1d:57:26:a7:
72:4c:5c:ce:0f:68:df:cd:d5:d6:d1:ca:98:e1:09:95:35:f3:
d8:61:bf:53:c8:bb:72:0d:1d:df:6f:54:91:bc:63:1e:02:7e:
33:e4:0d:f9:3a:55:ba:b2:87:37:de:0c:5b:e0:95:73:a9:c0:
85:de:6c:27:7b:65:3b:3c:08:3e:46:aa:b3:4e:05:df:dd:16:
07:9b:4b:e4:a3:70:00:e7:ea:7b:9d:9d:15:d0:ef:8c:66:57:
72:a2:ea:de:63:a4:47:30:7c:9c:25:29:3e:89:44:b8:3f:be:
2f:e9:1c:3a:7d:1f:c2:31:78:56:75:60:2c:0f:d9:63:79:89:
7f:1a:29:b0:8a:41:6e:5c:24:33:e6:5a:13:d5:5a:07:33:71:
63:e4:82:d9:a4:16:04:fe:9f:2a:7b:12:50:02:78:0f:73:6b:
04:c7:02:e6:47:8b:2c:3d:f9:8c:a3:55:03:46:c7:42:82:10:
a3:8a:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:15:55 2025 by rpki-client