This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: JLLHsDLnXZ9IrCFK6JPFkubNJom5XWtJQ+ni2ETWFBQ=
Subject key identifier: 05:E8:04:2B:64:DC:DE:03:20:2C:E6:0D:8C:B5:E1:3F:7C:5F:4D:3B
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019B25F630809986FC1C558411E2A58D0A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1781
Signing time: Tue 16 Dec 2025 07:00:49 +0000
Manifest this update: Tue 16 Dec 2025 07:00:49 +0000
Manifest next update: Wed 17 Dec 2025 07:00:49 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: f9qmdFi0v0qAuyNnA2egHkOGtsWbTsVajTW7frRkeQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:25:f6:30:80:99:86:fc:1c:55:84:11:e2:a5:8d:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Dec 16 07:00:49 2025 GMT
Not After : Dec 17 07:00:49 2025 GMT
Subject: CN=05e8042b64dcde03202ce60d8cb5e13f7c5f4d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:aa:5d:fe:f6:15:3e:ef:eb:1a:1e:dc:c8:
45:8e:ec:7c:66:e9:7e:8b:10:87:9b:f1:4b:84:36:
ea:3f:a7:35:95:d7:05:56:ed:85:86:85:20:dd:e1:
91:2b:a5:8d:89:42:19:fe:b4:64:e8:c3:9e:3b:60:
84:c4:94:44:fe:7c:1d:8e:bb:21:56:d5:d3:5d:9a:
b8:f2:78:4c:24:08:9a:6f:96:88:21:3d:44:03:60:
c8:47:94:04:6b:0f:9a:70:e6:ed:27:55:08:f9:70:
50:ba:f4:9f:dd:40:ae:3a:95:7e:fd:15:98:97:3d:
9e:8e:43:a2:05:89:2f:97:df:d5:ab:61:88:c8:b1:
f4:ea:7d:ad:18:57:89:29:e6:d4:20:88:f6:b9:94:
09:fc:8e:90:2f:57:ff:d6:7b:df:da:12:cc:bf:b9:
40:af:d0:05:58:90:6d:3e:aa:22:93:ac:27:4c:06:
91:d9:29:c8:9c:8d:be:e3:5a:c3:4c:8f:fc:73:71:
8b:61:83:02:e4:e4:e2:01:28:43:b2:e1:5f:ac:23:
8d:9b:be:b9:62:06:81:a3:d5:26:0f:9b:d8:29:9c:
25:26:15:8c:11:5e:a6:5a:48:3b:65:34:92:ea:d9:
e1:64:37:9a:14:3d:cf:02:7a:6e:67:52:8b:7b:29:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:04:2B:64:DC:DE:03:20:2C:E6:0D:8C:B5:E1:3F:7C:5F:4D:3B
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:2a:e6:75:c3:db:1d:1b:54:9a:fe:43:67:e4:25:53:3a:
a7:22:75:84:ff:08:e3:c4:32:af:4b:2a:b1:1a:f4:c1:a5:fe:
42:9a:f6:c1:12:a2:4c:0c:a1:0d:07:87:2d:f1:e0:6e:84:bd:
14:00:80:dc:4a:c3:52:53:12:ad:b6:0d:eb:c8:ae:c2:6e:e0:
72:a0:f6:1a:0c:19:e8:3f:a9:65:e3:73:67:45:41:45:44:d9:
79:ca:3e:7f:db:b9:2f:ad:29:b6:5d:a7:d8:9c:66:f5:c6:3d:
7d:82:80:d1:26:6c:ed:28:71:3f:17:17:8c:28:72:0c:b2:f4:
89:d1:a5:99:c0:f9:16:bd:dd:fb:9e:50:42:ea:9d:a7:22:a4:
e5:dc:3b:05:59:1d:61:9e:91:fc:77:27:72:7b:52:c2:91:d1:
5a:aa:2e:5b:4c:59:aa:9e:7f:20:e3:cc:79:80:72:48:3f:0d:
2e:87:3f:06:89:e7:bc:62:c4:a7:a9:8a:4b:8b:aa:34:2f:b3:
f4:8e:d5:96:4b:49:f8:93:00:ac:a6:55:89:a9:7e:d1:67:87:
0a:a5:16:07:98:c1:ba:71:0d:42:af:32:a9:30:94:c5:f0:e4:
27:83:9c:13:0c:8f:8a:90:fd:e6:e6:d0:4b:d7:80:f6:44:88:
f2:c1:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:31:10 2025 by rpki-client