This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: FhuboHeN2OF0GsQPZkHsLx2uAmDU/FvK7c436e5LRH8=
Subject key identifier: 85:17:7C:6F:06:9C:A6:01:76:44:3E:17:BA:7C:89:04:C0:5C:B6:A2
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019AEE2D0C11E47DA06F81BAC9A8CB340F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 16EC
Signing time: Fri 05 Dec 2025 11:02:00 +0000
Manifest this update: Fri 05 Dec 2025 11:02:00 +0000
Manifest next update: Sat 06 Dec 2025 11:02:00 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: ACzhnQ+LPxOBZxszirUeNd3NyjIu5ej84/piuvY9y90=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ee:2d:0c:11:e4:7d:a0:6f:81:ba:c9:a8:cb:34:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Dec 5 11:02:00 2025 GMT
Not After : Dec 6 11:02:00 2025 GMT
Subject: CN=85177c6f069ca60176443e17ba7c8904c05cb6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:51:6e:c3:4d:14:29:e3:a9:dc:d6:50:fd:
2f:8f:7a:24:ce:e9:73:4d:d2:50:27:54:10:66:b4:
2c:a7:b1:92:40:31:88:22:46:ef:b8:8a:cb:3a:9b:
81:a3:be:18:5a:3f:9c:24:26:e7:72:85:c1:3e:f1:
d6:b3:ec:b5:60:62:17:8e:97:c9:8d:5f:3f:a9:4d:
92:52:25:d9:b3:91:22:b4:e3:25:42:44:fc:36:40:
59:8d:dd:77:43:75:3b:9e:6c:bc:e4:44:7e:63:c7:
19:55:3f:31:75:f5:60:eb:21:c5:e7:8c:e6:2b:48:
5a:be:ca:2f:a2:68:14:18:41:29:e4:c0:9d:ce:f6:
be:cd:a1:83:48:2b:03:a9:41:e1:22:be:3d:bf:1b:
f2:b9:64:89:6d:3f:4f:79:ac:f8:56:31:35:b7:9e:
d7:3c:0f:0e:e9:d0:a8:c9:be:03:bd:7c:61:88:e0:
c5:31:c4:b0:0d:de:f0:db:68:11:c3:f3:1b:c0:e0:
2d:39:fd:6d:9b:b8:6e:8d:d7:21:26:46:28:fd:e0:
b7:4e:fb:37:bf:e0:6c:7a:a6:ea:22:3b:a8:40:7c:
fe:c8:db:21:07:69:32:5d:7b:e1:6d:bf:63:e9:c3:
03:f8:54:75:6f:d3:cc:bb:5a:45:7d:e5:1b:4d:9e:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:7C:6F:06:9C:A6:01:76:44:3E:17:BA:7C:89:04:C0:5C:B6:A2
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:b2:4d:f2:b3:58:e0:ce:ed:eb:6b:47:6b:50:2c:62:a3:
cb:7b:09:61:8f:b8:1b:02:9a:50:77:7d:a1:97:74:68:64:08:
6e:95:74:76:5d:59:b9:c8:32:71:b4:c5:df:a7:a9:3b:69:11:
90:e0:62:e8:c0:12:75:10:88:0b:a9:f2:40:3d:c4:d5:76:74:
af:bc:cb:59:2f:41:71:9f:f3:ba:fe:b3:9e:c1:3a:e5:89:d4:
d7:61:dc:8e:c4:18:f2:6d:00:95:fc:bf:05:04:20:b4:0e:24:
89:cc:14:86:43:ec:86:62:32:ca:44:ab:48:ec:ac:6d:ae:c1:
82:9a:8c:c4:8f:95:26:57:d8:5a:3a:fc:c8:be:32:88:a4:5f:
7d:b1:af:1b:3a:c7:c6:5d:34:46:78:af:9d:87:b0:d1:c5:23:
f6:e1:ed:72:9a:66:ce:00:9a:74:05:87:be:23:05:d0:55:60:
5b:77:b9:cc:df:3e:70:8f:92:11:7c:4a:07:ae:2e:fb:c4:8d:
d1:13:1a:d3:12:ec:14:9e:f7:94:9f:dd:16:26:ac:6a:ad:83:
0b:45:bb:98:e5:bd:2c:a2:bb:f6:cc:69:c3:dc:37:80:8b:c3:
c2:a9:e2:c0:06:7f:7f:ba:32:42:36:5c:bc:1a:76:d2:3a:b5:
c5:72:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:52:38 2025 by rpki-client