This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: fYdVkwE2hniu3llButWwwjnq/JzY3qNbM7lRrjpFjBU=
Subject key identifier: 6A:C7:4E:5A:41:FF:EC:73:0B:1A:64:FC:E3:BD:29:CB:F6:00:B5:8C
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019B10B88FF6F9E0D4D28B10AC48EDE69E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 09B9
Signing time: Fri 12 Dec 2025 04:01:29 +0000
Manifest this update: Fri 12 Dec 2025 04:01:29 +0000
Manifest next update: Sat 13 Dec 2025 04:01:29 +0000
Files and hashes: 1: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (hash: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=)
2: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=)
3: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: MELiguRZ4/kv4q4M0Q4cnw0L3CSqkPgtBbhliarB/b8=)
4: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:b8:8f:f6:f9:e0:d4:d2:8b:10:ac:48:ed:e6:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Dec 12 04:01:29 2025 GMT
Not After : Dec 13 04:01:29 2025 GMT
Subject: CN=6ac74e5a41ffec730b1a64fce3bd29cbf600b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:0d:54:ea:ca:66:1d:dc:78:ad:ad:2b:35:
99:6c:08:1f:c4:7a:c8:7d:ee:d4:98:2d:34:25:f9:
5b:6a:fc:9d:4a:1b:e5:c9:50:a0:1a:83:3e:e9:f5:
2b:03:5a:c9:ce:72:97:2c:ea:0c:9d:6b:9a:18:cf:
18:09:63:63:a7:e9:db:4c:e9:7b:3d:60:b5:02:70:
7c:ba:d2:74:52:2e:36:3c:24:dc:18:b4:0e:24:b4:
be:de:d1:ac:92:3c:4e:d7:ed:c9:70:f5:25:2b:59:
db:fc:61:fa:4d:8e:21:03:fb:5e:87:06:f0:03:ea:
44:4f:c0:f8:43:d6:97:10:0b:7a:ec:31:bf:7b:98:
6a:81:57:32:60:bb:ff:32:96:85:4e:b8:48:46:0b:
01:4e:f0:17:5a:c0:da:d2:15:36:0e:b2:b0:d0:13:
a0:4b:a9:f6:bd:bf:a1:cc:f8:b8:78:62:b6:e5:33:
06:6c:61:21:3c:ef:d8:a1:81:ff:5d:29:21:3f:af:
fd:a8:66:9a:40:b5:46:bd:b2:5f:9d:a6:fa:36:ee:
82:c6:a3:20:08:0f:33:1f:f8:3c:7a:d6:77:a3:fc:
e9:22:59:8d:84:d7:8c:0e:95:cf:3a:74:51:2e:e1:
38:ab:69:58:3f:7a:87:e3:1d:e6:2d:57:7d:da:60:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:4E:5A:41:FF:EC:73:0B:1A:64:FC:E3:BD:29:CB:F6:00:B5:8C
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:71:70:ff:85:c1:36:bb:c2:78:1b:52:a0:56:bd:1c:eb:
52:ea:8a:fc:84:49:d3:8b:e2:4f:d1:d9:d4:33:54:89:08:c1:
30:9b:32:37:cf:c9:a5:da:16:91:b0:80:0d:d9:52:b6:a8:b8:
e6:08:6c:92:73:dc:2f:b7:48:6e:59:61:09:80:2d:20:1b:18:
a5:a7:33:95:73:0b:53:36:bd:75:d8:70:06:e8:8f:bf:54:69:
14:78:cc:8c:26:de:1f:eb:27:35:cb:cc:12:f3:3f:e7:6a:67:
73:51:88:92:dd:bf:b0:ca:d8:3c:4a:66:75:60:cd:d2:a0:c9:
ea:e4:85:72:d0:64:75:ca:0f:9d:af:b7:b0:c1:cd:af:61:0e:
f6:c6:c7:73:dc:aa:c2:c1:ab:1b:bc:77:dc:32:ea:86:4c:2d:
73:13:8e:b2:61:7c:27:31:f8:ba:1b:00:02:ba:76:ad:a6:1b:
68:ae:66:14:d9:5a:69:4e:ec:2b:e6:3c:ff:f6:b6:6f:88:fe:
96:fe:82:05:d7:ee:f3:b5:20:d9:60:c0:60:e3:e0:9e:22:da:
ec:12:7e:84:ff:7d:41:1c:63:97:85:8f:02:bc:ed:07:b7:5d:
52:a2:13:59:1f:50:6d:e8:55:ff:a8:85:76:fc:a8:d7:75:18:
a1:e6:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:32:56 2025 by rpki-client