This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: gyl7MZ3orQ1lGVwKGHw1gDO+GE1tcPdeDiMOer2zDEs=
Subject key identifier: 34:26:4D:03:E9:B0:E6:DF:83:F3:66:0D:C6:65:BB:FF:38:A1:66:A0
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019B0DB73902BC701612D3D56FAD9AF4E3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0BEA
Signing time: Thu 11 Dec 2025 14:01:09 +0000
Manifest this update: Thu 11 Dec 2025 14:01:09 +0000
Manifest next update: Fri 12 Dec 2025 14:01:09 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: 7Bl3NERaFsNE7fy06c+bvcHNg6RjQBuLZX2fzqqS0Dk=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:b7:39:02:bc:70:16:12:d3:d5:6f:ad:9a:f4:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Dec 11 14:01:09 2025 GMT
Not After : Dec 12 14:01:09 2025 GMT
Subject: CN=34264d03e9b0e6df83f3660dc665bbff38a166a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:91:bd:1a:86:7e:a6:95:57:58:a4:fc:80:
71:32:40:a2:c7:09:7d:26:a6:b4:2d:56:9b:de:4d:
97:f0:09:bc:52:9c:fd:1f:f8:d4:cd:40:a7:bd:66:
0b:74:96:29:f6:45:88:03:ce:7c:d3:b1:19:c7:45:
44:82:9f:4a:6a:b6:b2:69:6e:35:36:d6:f5:eb:57:
34:87:50:92:79:40:6b:ca:d0:2f:f1:a0:cc:31:95:
fe:a1:1b:1e:11:ca:1e:58:85:4d:e5:ab:fb:2d:cd:
ac:7c:85:1c:50:00:b5:21:2c:af:1d:e1:97:99:8b:
71:b8:8e:ba:3a:0d:69:da:1d:45:b7:f0:9a:a5:b3:
04:0c:63:77:c0:66:8e:e4:52:58:90:fd:d4:e4:6f:
5c:2f:82:dc:1d:92:ee:9f:19:10:cf:f2:7b:5a:e5:
58:22:7a:bd:1c:fc:1e:e1:da:c4:b4:99:1b:9a:77:
45:0c:69:7c:c8:70:24:e1:10:49:fd:7e:9f:35:e7:
e4:13:41:bd:f3:97:c3:f7:1a:f9:53:b2:b7:3e:53:
72:21:1a:f7:cb:c2:6c:6f:a5:0b:51:f5:1f:b1:24:
0d:92:21:77:2f:24:f9:53:e6:af:a7:ea:bf:d6:25:
98:cf:d9:3d:b7:0b:09:9a:3a:5f:0b:32:3d:7b:26:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:4D:03:E9:B0:E6:DF:83:F3:66:0D:C6:65:BB:FF:38:A1:66:A0
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:07:61:79:01:d2:0d:92:db:fb:5e:24:35:f7:82:25:6a:35:
1d:a1:ed:97:85:16:d7:5b:d1:de:c8:b9:8c:93:bc:6c:06:90:
6f:48:2a:4d:91:a1:87:37:5c:25:ae:4b:43:18:40:92:e2:44:
14:f0:bb:92:07:49:33:0c:b4:d9:da:51:c3:74:88:4b:8b:18:
2c:b4:46:53:43:b3:32:8f:73:56:6c:88:07:e7:fd:41:c5:e9:
b3:11:04:17:6b:14:d0:e8:89:d5:31:30:bc:44:37:98:9a:3a:
02:09:60:c2:e2:70:43:a9:87:cf:c1:9a:fa:1f:3e:dc:43:93:
80:4e:17:43:16:4a:46:64:f3:cf:34:b3:58:8a:24:64:78:1b:
aa:44:60:b2:20:6b:18:01:9b:31:54:65:b5:57:1b:5e:c7:8a:
ed:6f:13:98:20:2a:35:83:e6:88:9f:67:a6:94:15:be:7d:05:
c7:80:47:7e:72:e2:57:a5:12:6e:4f:ae:a2:fd:d5:cc:b4:61:
7c:23:41:46:51:4c:83:04:90:dd:03:8c:93:2a:56:a7:e3:87:
59:a0:03:b7:6d:a8:05:e0:0a:f4:5e:12:43:7a:1b:0e:ad:51:
48:b5:2f:47:e9:1b:7d:4d:be:16:c4:7f:f8:c4:5c:ff:08:b5:
e5:a8:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:55:49 2025 by rpki-client