This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier: dLFTvIlcDyp9KbXwr8zozcowVSaJA5lcL4TPYmb+WBo=
Subject key identifier: C2:A1:EC:F4:A8:FC:B6:43:C4:E3:A1:09:62:87:0D:AB:D4:03:52:B5
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial: 019B202B130F11FE47C74D9066C4CFBB966B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number: D9
Signing time: Mon 15 Dec 2025 04:00:52 +0000
Manifest this update: Mon 15 Dec 2025 04:00:52 +0000
Manifest next update: Tue 16 Dec 2025 04:00:52 +0000
Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: 258QYxb0bxBEFK8c/7H8hH49ZCPNXepsIDtOgsqloiI=)
2: Ito4OsKdOYk_0Vr5IgYqw7oQP_k.roa (hash: t2JFfBVsPDvYQ98nc/aNec9j3fYa1vwbxO3EDDVKTUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:20:2b:13:0f:11:fe:47:c7:4d:90:66:c4:cf:bb:96:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Validity
Not Before: Dec 15 04:00:52 2025 GMT
Not After : Dec 16 04:00:52 2025 GMT
Subject: CN=c2a1ecf4a8fcb643c4e3a10962870dabd40352b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:1c:65:5f:c7:75:ab:7b:4b:ba:50:39:f8:
93:98:1b:d7:9a:26:54:55:0f:53:62:ca:fc:9e:53:
6c:a5:3c:50:25:a9:d7:17:6f:a3:b8:8f:6d:da:4d:
4f:22:96:2a:22:90:f1:3a:c7:82:c3:53:8e:9d:13:
9a:be:2d:07:27:6a:94:cb:0b:58:cb:6b:c1:ca:50:
8a:04:8c:60:c7:1c:39:58:36:fb:b7:5b:62:57:e9:
02:78:b0:03:5e:cd:af:da:25:6e:f4:dc:9d:f9:6e:
88:43:30:76:0b:2d:c9:7e:95:ba:a6:a8:ad:e2:f1:
4a:d0:62:9d:a5:a7:76:45:da:48:39:54:6c:9f:88:
08:28:a8:1c:88:56:e6:f5:26:20:89:82:b7:4c:19:
0b:11:79:71:9a:95:e9:f8:3b:d5:4a:07:af:8e:e5:
4e:8d:42:f2:f8:3e:ab:ec:5d:c0:e4:c1:4e:84:86:
5d:e9:8d:3c:48:47:d1:0b:04:c2:1a:a7:ad:6a:c1:
0f:a7:83:6c:ab:9b:15:0c:df:6f:1b:2e:05:21:5b:
c1:b9:a2:0c:9f:5b:02:7b:73:59:1f:b9:74:9b:f1:
61:82:15:1a:4e:1f:06:25:cb:27:2a:2c:ea:06:4f:
8a:80:ce:4e:0d:86:ea:94:9f:84:c3:61:a7:62:da:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:EC:F4:A8:FC:B6:43:C4:E3:A1:09:62:87:0D:AB:D4:03:52:B5
X509v3 Authority Key Identifier:
keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:a9:37:8d:4d:9a:9c:02:4e:b0:29:7b:93:cb:4b:cc:41:
2d:6b:0f:53:e7:69:e8:4a:75:bb:0a:f4:26:2f:86:4c:6f:e8:
14:37:a3:e1:57:ce:19:07:4f:95:da:02:4c:3f:87:39:f5:09:
ca:c0:8e:6d:d7:be:35:d8:da:c8:5c:7d:16:0f:32:bb:b2:b9:
86:7f:da:dc:6a:ed:89:27:94:ed:f3:71:a7:f2:4c:52:1a:af:
5b:50:5b:ec:04:6e:58:27:c3:f3:e8:12:4c:14:14:54:3c:df:
a7:59:d1:0c:64:77:1b:44:de:75:eb:49:c8:d1:73:2e:b2:e4:
f5:00:ce:cd:a8:30:c1:72:1c:b3:9a:88:7c:a6:9f:fc:9b:99:
dc:ba:de:5c:5a:b0:18:45:74:dc:6a:d6:07:b9:59:a1:22:01:
79:a4:c3:8c:d2:3f:39:17:50:f7:8e:dd:97:e3:d0:14:a2:8d:
e2:4b:a2:03:3e:8a:c3:ba:1a:6a:d5:87:a4:e9:a9:8a:68:4e:
03:01:55:aa:2b:f4:65:2a:51:77:25:65:93:77:74:94:a2:2d:
9e:4d:60:21:21:da:b3:66:a1:9c:c1:84:b8:ba:7a:9d:31:b1:
e1:b3:e3:12:c6:fd:36:61:16:76:0b:e9:56:fc:f4:bd:2a:4a:
81:8d:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 08:09:46 2025 by rpki-client