This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: 0dfT77pypk7OAMoj7tHSYfw5EISYZM8ke09NncU8pEk=
Subject key identifier: DF:13:93:EB:A5:98:CE:39:5F:C4:14:25:A7:36:85:2F:1D:B4:B2:D6
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019B5A8888DC216BDDD5BF0D1288DFB9742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 0731
Signing time: Fri 26 Dec 2025 12:00:55 +0000
Manifest this update: Fri 26 Dec 2025 12:00:55 +0000
Manifest next update: Sat 27 Dec 2025 12:00:55 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: JvSjvjWTtPqkORg765v/usCosI68GLJOfnqRjf6vnSM=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:88:88:dc:21:6b:dd:d5:bf:0d:12:88:df:b9:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Dec 26 12:00:55 2025 GMT
Not After : Dec 27 12:00:55 2025 GMT
Subject: CN=df1393eba598ce395fc41425a736852f1db4b2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:11:fa:73:50:3c:b7:cf:18:e5:82:e0:10:
55:0a:51:0e:a3:d4:a9:28:e7:fd:a6:e1:23:8f:6a:
c9:63:64:28:3e:2e:27:76:27:34:6b:93:a8:82:77:
11:0c:9d:af:49:d5:07:a3:26:14:47:0b:33:e4:90:
0e:47:92:e7:1b:53:7f:28:08:9b:80:c7:4d:62:c3:
15:3b:c6:2f:c6:d0:49:a0:24:c5:d3:f3:88:1e:99:
26:b5:88:c5:53:aa:5b:52:2b:18:b6:74:9c:b8:0b:
b3:43:39:70:35:38:b2:f9:35:99:9e:bd:e7:7a:ed:
3f:69:01:c2:f1:51:fb:02:53:7b:2d:c2:ab:62:89:
af:02:bc:1e:38:e4:16:cb:2a:5a:8d:06:81:93:96:
30:5e:46:45:79:d0:eb:13:bd:fa:85:57:aa:d7:50:
fd:d3:bb:d7:19:44:54:94:61:9f:f2:ff:72:ee:0e:
30:69:15:f0:4b:5c:4f:af:84:b9:10:5b:a1:cd:5c:
ec:94:b5:15:cd:e1:01:db:0c:89:8c:84:4f:58:53:
3c:4c:85:98:19:3e:52:9e:80:a0:3f:7b:d6:7f:4f:
0a:bf:38:f8:77:01:43:09:e0:60:b3:60:f3:77:4b:
85:40:ee:6b:f8:00:16:a2:7c:80:da:62:2f:29:6f:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:93:EB:A5:98:CE:39:5F:C4:14:25:A7:36:85:2F:1D:B4:B2:D6
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:d4:a0:bf:1e:6e:5f:f6:8e:fb:52:4a:0a:b4:ad:af:68:
5e:f0:9e:2f:e2:2a:67:2c:b9:ec:62:45:f1:0c:de:11:79:f6:
c1:07:d2:6e:87:62:95:e5:41:a0:5d:ad:de:64:44:ae:cc:51:
7f:b8:66:36:4e:ce:5f:10:0c:d6:bb:ff:29:f3:16:16:45:a3:
4a:c5:a6:e6:d2:d4:42:24:bf:bb:71:26:76:c9:c5:bb:66:8a:
0c:48:69:ab:1e:3d:e0:61:73:0b:54:e1:e0:ff:d1:5b:30:81:
f5:44:d1:a9:61:24:e4:f8:06:30:f7:34:c2:3a:13:e3:67:79:
ab:e9:14:1c:86:3e:e3:3b:2a:db:00:d0:12:67:fe:42:d5:82:
aa:b9:c0:05:ea:6e:88:0d:d9:ce:ad:ca:e0:8b:16:2d:ec:f5:
c4:4e:e6:4a:80:af:23:8f:e1:5d:26:98:5a:eb:b6:bf:ea:52:
7b:cd:fc:cb:a4:05:d3:7e:df:b5:01:7d:90:eb:84:81:ba:23:
63:8a:90:b3:1f:13:76:64:a7:f7:26:33:72:0e:80:01:ed:0d:
c4:71:6b:31:03:ab:d0:f8:d6:68:a2:cd:8d:82:b5:9f:54:ee:
ef:2f:f3:14:74:8b:f9:74:7a:e9:52:69:78:16:25:c8:4e:4c:
02:fa:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:15 2025 by rpki-client