This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier: RmGljhBeHqBQU2+zuII345xEL7X2vIZ8zBSUAbe+puE=
Subject key identifier: 96:3C:B6:4E:18:45:2D:DA:34:31:C5:05:03:74:FD:51:3F:34:91:84
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 019B07B554F10494818388E956A063C93EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number: 177D
Signing time: Wed 10 Dec 2025 10:01:22 +0000
Manifest this update: Wed 10 Dec 2025 10:01:22 +0000
Manifest next update: Thu 11 Dec 2025 10:01:22 +0000
Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: cX0yq09u4x8UWb7Pcvtl9SKMESFdF0nMHb5HHm+7xP4=)
2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=)
3: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=)
4: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=)
5: Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa (hash: yc/wxf6t0jomAnEf1S9R6mg0/BH4SO1UAudfyh2QjG4=)
6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=)
7: KoO3sM7qwS5mA20IsKbDhxcTB1U.roa (hash: tjrHSpdKeLdJHbMSWc5OzlqZez0K6Pu4HPg+UKvTrTM=)
8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=)
9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=)
10: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:b5:54:f1:04:94:81:83:88:e9:56:a0:63:c9:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Dec 10 10:01:22 2025 GMT
Not After : Dec 11 10:01:22 2025 GMT
Subject: CN=963cb64e18452dda3431c5050374fd513f349184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:a6:cf:57:e9:fd:0d:44:70:7b:50:1d:98:
03:e8:2a:a1:84:a7:2d:37:85:1f:02:93:cb:a6:4b:
cf:16:ae:b1:3c:58:41:20:7f:cb:c5:97:e7:95:d3:
5a:9e:31:c2:63:1e:34:cf:c2:eb:12:17:3a:9a:a9:
78:d8:50:d2:87:10:ac:63:d2:5d:d2:81:95:91:52:
08:68:61:82:cc:dd:21:ad:54:84:c1:54:b9:55:94:
c6:74:f1:01:cd:53:23:5b:e3:98:9f:30:0b:c0:5a:
5c:34:0f:74:fb:ad:cd:6d:25:db:e9:fe:35:8e:c1:
78:c2:7c:5a:67:69:99:c7:8d:8e:6c:5a:b1:f0:9e:
a1:3b:2f:b7:c1:d3:bc:cf:6e:b8:87:37:01:a9:9b:
8c:c8:f6:3c:b2:1d:93:47:f0:e2:d1:88:75:6a:7f:
c3:a1:10:d4:7b:5b:a5:13:61:8f:2b:f8:c6:09:db:
87:d6:17:65:db:d4:a6:85:91:55:8a:4c:fb:20:ce:
2f:fe:89:b7:e6:10:27:14:4d:38:78:61:a8:f1:70:
47:22:f6:d3:8a:d2:c2:d8:1d:74:a8:bc:e5:48:57:
30:92:bf:cf:a9:28:e2:c9:22:9a:a7:7a:0a:32:ca:
72:dd:17:eb:92:ed:66:f8:66:81:30:30:c2:39:57:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:B6:4E:18:45:2D:DA:34:31:C5:05:03:74:FD:51:3F:34:91:84
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:7d:eb:21:0a:52:94:32:1d:d6:ea:b6:18:29:14:c5:5d:
bd:ed:5d:9b:c0:b2:21:98:56:1e:89:82:c4:56:8d:fc:6f:2e:
43:89:93:85:4f:0c:14:fe:70:29:fa:f6:bf:7a:e5:e7:7c:25:
b0:a5:7f:0f:aa:98:9b:7a:82:e8:82:71:3c:6a:8f:e0:62:6d:
72:d5:99:93:32:67:ff:e7:ec:8f:89:58:2e:49:59:62:1a:2a:
db:8b:73:09:9d:e5:c6:19:1d:4c:ff:7f:1e:05:c4:29:e3:56:
97:63:6f:0e:1a:65:2f:6f:0c:2a:b8:cf:07:18:f1:60:6f:1a:
2f:f1:12:68:e5:96:b3:e1:1e:f8:0a:6e:31:cc:40:79:87:09:
d7:8c:8c:5a:9a:60:fc:cc:0a:8f:03:8d:52:1b:82:95:1a:dd:
dc:d1:3a:b9:7e:d5:b0:f1:6e:07:95:e5:51:cb:8e:0a:82:71:
e7:2c:89:37:06:64:bb:54:28:33:3e:56:29:58:32:ce:a3:e9:
d3:ef:a1:8f:3c:dd:3d:04:cc:23:37:d3:79:3d:9c:47:f8:51:
e9:2b:d0:37:0e:50:0c:8a:25:1a:43:55:03:d0:f8:14:de:70:
76:01:4c:d3:31:78:5e:f2:7b:40:de:69:c0:80:42:fa:a2:a1:
a5:22:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 14:17:31 2025 by rpki-client