This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: ED7uDLu/c3a5TMfl9lJoWZ6C5bmchZ2T54/KnGV9uvQ=
Subject key identifier: 1A:1F:6C:C7:D2:EE:40:10:7C:55:6E:76:88:D7:63:BE:86:18:0A:C8
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019B10EF9CCD1C644E3DC20AA79CB862ABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 17DD
Signing time: Fri 12 Dec 2025 05:01:37 +0000
Manifest this update: Fri 12 Dec 2025 05:01:37 +0000
Manifest next update: Sat 13 Dec 2025 05:01:37 +0000
Files and hashes: 1: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: Hl+Mkf0PdygEjlhLKZ0twg1NILTdN3IsH0fpvPCnEX4=)
2: u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa (hash: IB8pV7Q+dwm9Rody8Bp/FIsIiSm2P1roaWpfj3CLMGI=)
3: w41Q-pBzKfdWHXR2vGX4i5Q4snE.roa (hash: WtueUI2Jm3MhYJ2HMFzJ55B+hyohmoA3tc1o3ULlx0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:ef:9c:cd:1c:64:4e:3d:c2:0a:a7:9c:b8:62:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Dec 12 05:01:37 2025 GMT
Not After : Dec 13 05:01:37 2025 GMT
Subject: CN=1a1f6cc7d2ee40107c556e7688d763be86180ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:f3:c5:ea:f1:3c:87:f8:88:7b:d7:53:1a:
fe:c3:29:23:12:2c:29:29:04:c5:c0:32:d6:b3:0c:
03:b6:f6:6e:36:b8:cb:c3:5b:e9:e7:fa:35:53:18:
fa:c5:26:bc:1e:3e:5e:20:a6:ed:90:61:fd:c4:82:
4a:72:ea:fe:69:15:46:52:b9:07:e3:29:5f:c5:fc:
e3:4f:98:88:6a:54:c1:4f:d4:fa:54:b4:9e:53:46:
7d:62:7c:b4:e8:d3:5c:ac:ec:71:92:6c:47:0d:98:
52:78:55:82:b6:9e:80:5b:67:29:1a:3c:89:45:4e:
bc:69:61:d3:7f:20:86:4c:f2:ec:44:37:21:99:35:
d3:8f:9c:28:d7:f8:5f:8b:f8:e5:db:8b:81:00:86:
39:41:ed:55:20:9c:b8:f4:ba:ad:a7:d0:c5:a0:f2:
a0:e0:7b:fc:40:f5:6e:39:cb:c7:74:01:40:7d:8e:
18:4a:de:07:1d:5c:10:94:c6:82:0c:0e:17:c1:87:
12:e7:01:a2:5b:8f:a4:0f:53:8d:b7:90:09:e1:42:
42:2a:05:7f:e4:2e:85:d5:cd:65:a5:e4:41:52:88:
80:76:56:2c:44:7b:f6:d9:d8:ca:ee:b3:61:ec:cb:
99:ec:87:c5:cc:a0:78:b8:83:1c:53:1a:25:92:a2:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:6C:C7:D2:EE:40:10:7C:55:6E:76:88:D7:63:BE:86:18:0A:C8
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:9f:56:32:dc:2f:3e:4b:7a:f0:14:57:f7:cb:1d:27:01:
25:81:5f:7b:d1:7b:e4:1e:41:03:6b:09:1c:da:31:8b:4a:ad:
a5:c8:02:0e:60:86:d0:7b:38:d2:51:c4:02:bc:17:0f:26:c0:
17:79:5a:8f:28:af:ea:23:39:8e:3b:1d:38:ab:36:f4:c3:be:
e1:62:31:dd:b1:26:94:6c:dd:05:68:7d:5e:e1:c1:9e:b4:1a:
0c:a3:b9:fb:e2:51:e9:a7:ce:9f:9d:5f:d2:e8:c0:54:b1:61:
09:6d:dd:e4:87:43:e5:58:0c:15:92:25:82:b6:89:af:80:6d:
6f:d8:6d:cb:d8:1d:47:b3:85:af:c6:53:89:26:51:b5:ed:60:
36:da:5d:c7:b8:23:c5:0f:af:98:47:9b:8d:37:0c:19:31:ae:
9b:13:ca:37:14:6f:d4:5c:ed:d2:76:ef:f5:ea:ac:2a:81:f8:
c1:a8:28:2e:63:53:ad:64:95:86:4e:34:3b:3b:d7:a9:4d:47:
fb:2e:cf:30:cc:e8:31:de:ae:b1:35:18:01:e8:44:2f:8d:07:
3a:08:48:1f:d1:22:ad:2d:d4:3b:ea:43:68:8b:78:9d:cb:97:
3e:38:18:90:78:36:7a:84:8e:fe:a2:bd:26:e6:66:ab:ba:9d:
6c:67:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:19:31 2025 by rpki-client