This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: V+P1G2eZGa+TtEITBHtbAYKyVBDp0fleAU9G+8JQgpo=
Subject key identifier: ED:59:72:42:C1:E0:F0:DB:D6:8D:36:79:6E:C7:40:C0:AE:17:82:66
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019B15DED8A4886B27207C16030FF430AC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 13EF
Signing time: Sat 13 Dec 2025 04:01:24 +0000
Manifest this update: Sat 13 Dec 2025 04:01:24 +0000
Manifest next update: Sun 14 Dec 2025 04:01:24 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: UdFcbuaOMJosf2GD2vr1Wxa63M9ISwqmFjHWnKgMQwI=)
2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 00:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:15:de:d8:a4:88:6b:27:20:7c:16:03:0f:f4:30:ac:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Dec 13 04:01:24 2025 GMT
Not After : Dec 14 04:01:24 2025 GMT
Subject: CN=ed597242c1e0f0dbd68d36796ec740c0ae178266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:78:f8:df:18:f9:d1:1b:c0:a5:6a:4f:2e:
87:68:12:db:f3:79:79:f4:6b:c7:f3:c0:92:69:53:
93:47:1f:85:4a:a7:f0:c2:d2:0a:f4:37:0f:55:93:
ef:45:a9:68:09:fb:f0:22:e5:7f:93:7f:fb:7f:33:
45:45:f9:92:03:f6:32:d3:7e:73:74:7c:6b:9e:b0:
62:54:94:34:37:98:a2:7e:fd:33:50:5f:9a:13:f2:
f4:d7:0c:d1:b4:78:e2:15:3a:52:d7:64:e1:2c:7f:
78:6b:3a:1f:5a:12:a8:07:87:b7:02:25:87:07:cc:
3f:2a:bd:f6:3b:17:d8:26:37:39:ff:e4:d5:0a:c4:
85:5b:23:85:b8:c2:9f:28:d3:0a:da:02:0b:ab:56:
d7:0f:3b:ed:5c:d9:9a:03:ba:cd:e1:bf:17:c3:c5:
2f:96:7d:f5:90:15:05:57:af:38:57:78:0d:51:08:
e8:c5:c9:e3:be:08:95:ab:69:82:12:db:ec:c3:fc:
a3:6c:11:48:45:ab:4b:6a:fb:df:cf:27:d1:3e:bd:
36:88:8d:3a:c7:95:67:26:b0:4f:79:7d:db:02:72:
f9:74:5e:83:13:c7:a6:29:0d:22:30:49:e0:c8:f0:
a9:44:4d:6b:1a:38:5c:b9:bb:c1:33:a0:fd:d1:1e:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:72:42:C1:E0:F0:DB:D6:8D:36:79:6E:C7:40:C0:AE:17:82:66
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ff:fd:73:7d:53:64:a8:9f:34:02:d7:05:4c:30:3a:67:ef:
99:07:f5:5e:a1:30:92:4f:50:52:3d:e8:f4:4b:92:11:68:c2:
ba:be:fe:f2:e7:82:77:7d:cf:0b:7f:f0:b6:19:21:45:fb:d9:
f3:d5:5c:49:85:1e:f9:de:d3:8a:39:0b:6a:47:25:6b:a4:bc:
b9:79:be:e0:14:7c:75:3a:3c:4f:49:4d:39:c4:e3:b1:18:63:
a2:7c:e4:5b:48:fe:de:67:66:cb:07:4b:d2:87:62:80:9e:0f:
03:4e:b7:2c:fe:af:9e:bf:cf:06:56:73:45:5c:43:ed:ab:8d:
33:cd:f6:3e:57:9f:cf:e5:ce:cc:f9:d6:f2:e9:80:dc:52:57:
c2:8a:c4:1b:78:22:d9:42:88:11:32:13:21:70:a7:a8:c5:eb:
50:30:5a:43:2c:e5:10:36:ef:c4:c4:c3:28:87:f4:4d:e6:b6:
2a:27:b9:ab:42:57:57:51:18:d8:0a:fe:f4:f3:77:3b:3b:6c:
63:4c:37:22:21:c8:60:9a:61:92:28:49:d3:2e:f2:f0:56:7d:
13:51:50:4e:55:9c:1c:0c:52:1b:48:b3:84:e3:4d:6e:03:45:
6e:61:75:13:a9:f5:09:bb:ce:a4:03:3b:8a:d3:77:6a:04:d2:
50:63:94:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 06:44:21 2025 by rpki-client