This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier: 6cFZJUOcDhwxNK7zFZKWECzoeHTuqGIiGrQIriaHvG0=
Subject key identifier: 3F:FE:B0:7D:87:16:97:7F:00:1B:2D:35:A3:F4:C2:DB:B9:25:31:CE
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019B1B724B86923BA2642A15B69857EEA4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number: 177A
Signing time: Sun 14 Dec 2025 06:00:33 +0000
Manifest this update: Sun 14 Dec 2025 06:00:33 +0000
Manifest next update: Mon 15 Dec 2025 06:00:33 +0000
Files and hashes: 1: 3jyq5MW1grteoJYvFFdybl0UJQU.roa (hash: H0KXr7qyEoggxZaPjhmB2lgNDi7UaEEg6t6btk6quek=)
2: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: iiZFpvpUvhuxywlRyWVkV/6SGTW4q8IzFlCwkpV5Fds=)
3: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (hash: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=)
4: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (hash: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=)
5: wnjBzzTh1nOLtHn-MycT-V9xs1U.roa (hash: vhvfmbXLzxRQ2h0uOUjGMbl4v8ffZL2j3QGUBdIR1YM=)
6: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (hash: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:72:4b:86:92:3b:a2:64:2a:15:b6:98:57:ee:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Dec 14 06:00:33 2025 GMT
Not After : Dec 15 06:00:33 2025 GMT
Subject: CN=3ffeb07d8716977f001b2d35a3f4c2dbb92531ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:a7:f7:e9:88:11:9f:0e:bb:c8:bd:e4:f5:
68:4f:bc:70:46:c9:32:1c:87:d0:92:6e:66:c8:f2:
f7:84:17:62:08:37:63:1d:4d:c0:84:41:f1:63:a5:
35:66:81:45:78:e5:b1:94:1b:b2:f8:29:cb:3f:ab:
06:5e:2b:e2:a9:ef:79:51:76:c4:af:69:a0:ad:62:
d5:be:c5:a8:dd:b5:15:d9:a0:d1:5b:a5:09:12:ce:
01:80:4f:77:ea:aa:8c:b5:b3:65:59:db:83:4f:00:
af:46:2f:73:3d:a9:c8:40:10:15:88:25:7e:c4:42:
84:3e:5d:03:d9:c4:9e:86:10:21:01:66:f2:8b:ad:
3c:c0:57:9d:22:eb:08:53:30:a3:07:b9:01:91:85:
ca:bc:33:3d:1c:47:e1:05:83:19:5e:f5:9f:cf:13:
fb:f7:c0:80:cc:98:b8:10:7c:0f:6d:61:46:26:ab:
6f:06:9d:b6:ac:d7:16:16:f9:5f:c5:b1:91:79:72:
86:64:60:bd:03:15:9d:80:a0:a1:87:bd:c5:db:f5:
59:c7:d5:6a:28:bc:24:48:15:f5:be:70:d4:02:cd:
70:82:d4:de:fa:56:ad:c2:c7:a3:4e:e8:68:cc:fe:
bb:e2:5c:df:66:c8:c3:77:ee:9b:92:a2:11:7e:68:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:B0:7D:87:16:97:7F:00:1B:2D:35:A3:F4:C2:DB:B9:25:31:CE
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8c:5d:c3:33:0d:4a:d3:5d:fb:1d:82:2d:a7:df:d0:f9:20:
cf:42:14:5a:7f:f7:e0:40:eb:9a:ee:d4:94:c4:75:8b:21:7c:
a0:cd:b4:a1:cc:df:9c:31:ea:a2:21:30:cf:6c:79:1d:2b:9d:
80:3a:d8:0b:2e:a5:e8:1c:c8:23:ee:4f:58:4d:3f:98:1a:97:
90:0c:cc:bc:88:bd:48:94:4e:3e:0d:52:3e:9c:39:7e:d1:41:
19:fc:90:83:1d:af:0e:29:58:12:b6:f2:50:7b:05:54:3d:4d:
bf:83:12:d4:06:56:44:0f:bc:20:21:2a:f4:e8:4f:05:c1:8e:
4d:4c:24:49:f7:22:f4:39:ca:a4:7d:41:52:01:2c:cd:56:34:
a2:a0:87:bc:1e:55:a4:5b:7a:df:a0:a3:e7:d2:91:25:86:4c:
b7:88:4a:75:fc:91:d4:77:2a:3f:2a:9d:ec:9f:43:f6:c9:b0:
2b:54:fd:b5:7f:9f:ba:9a:b4:57:a6:0e:4a:da:59:5f:0e:66:
30:46:01:74:ae:1c:42:d2:64:93:03:df:19:d7:b8:f3:f9:65:
8d:5f:16:39:54:15:c4:70:84:23:b1:e3:75:1f:34:86:e2:47:
8d:c0:37:91:0b:28:d4:4e:e7:8d:05:93:2c:bf:9d:51:17:4c:
f4:d5:5c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbckuGkjuiZCoVtphX7qTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4
YjhmNWEwHhcNMjUxMjE0MDYwMDMzWhcNMjUxMjE1MDYwMDMzWjAzMTEwLwYDVQQD
EygzZmZlYjA3ZDg3MTY5NzdmMDAxYjJkMzVhM2Y0YzJkYmI5MjUzMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/in9+mIEZ8Ou8i95PVoT7xwRsky
HIfQkm5myPL3hBdiCDdjHU3AhEHxY6U1ZoFFeOWxlBuy+CnLP6sGXiviqe95UXbE
r2mgrWLVvsWo3bUV2aDRW6UJEs4BgE936qqMtbNlWduDTwCvRi9zPanIQBAViCV+
xEKEPl0D2cSehhAhAWbyi608wFedIusIUzCjB7kBkYXKvDM9HEfhBYMZXvWfzxP7
98CAzJi4EHwPbWFGJqtvBp22rNcWFvlfxbGReXKGZGC9AxWdgKChh73F2/VZx9Vq
KLwkSBX1vnDUAs1wgtTe+latwsejTuhozP674lzfZsjDd+6bkqIRfmhklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/+sH2HFpd/ABstNaP0wtu5JTHOMB8GA1UdIwQY
MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt
NGUxZGMxNTA1MjYwLzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw
LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIxdwzMN
StNd+x2CLaff0Pkgz0IUWn/34EDrmu7UlMR1iyF8oM20oczfnDHqoiEwz2x5HSud
gDrYCy6l6BzII+5PWE0/mBqXkAzMvIi9SJROPg1SPpw5ftFBGfyQgx2vDilYErby
UHsFVD1Nv4MS1AZWRA+8ICEq9OhPBcGOTUwkSfci9DnKpH1BUgEszVY0oqCHvB5V
pFt636Cj59KRJYZMt4hKdfyR1HcqPyqd7J9D9smwK1T9tX+fupq0V6YOStpZXw5m
MEYBdK4cQtJkkwPfGde48/lljV8WOVQVxHCEI7HjdR80huJHjcA3kQso1E7njQWT
LL+dURdM9NVc7g==
-----END CERTIFICATE-----
Generated at Sun Dec 14 09:32:58 2025 by rpki-client