This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: 0X+MivNkAU0MRI1GiRfVkj/eI0JL4pOZHLVIfTCzbF8=
Subject key identifier: E9:FB:74:D0:92:26:87:E2:9C:0C:19:49:8B:3D:DE:52:2E:5B:99:6F
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019B1E73AA2D7E74822EC9624AD199CB17D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 142F
Signing time: Sun 14 Dec 2025 20:00:55 +0000
Manifest this update: Sun 14 Dec 2025 20:00:55 +0000
Manifest next update: Mon 15 Dec 2025 20:00:55 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: wX1P/uc8ht+fDwzR6dSAWox1B4cMBMM8tFtyKUlzqVE=)
2: OwskQb4uWXAM3BST7CyJITEmG0A.roa (hash: kimIk4ViTfOZBO8RES3wd5ZfNkXzL5WJCpaQ5TXVjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1e:73:aa:2d:7e:74:82:2e:c9:62:4a:d1:99:cb:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Dec 14 20:00:55 2025 GMT
Not After : Dec 15 20:00:55 2025 GMT
Subject: CN=e9fb74d0922687e29c0c19498b3dde522e5b996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:f9:26:10:ea:58:95:d6:67:c5:27:ed:74:
83:71:f3:88:35:e6:c5:7e:2b:74:34:b1:fe:c0:df:
12:fd:77:e3:5f:9e:25:5f:aa:b4:81:a5:62:60:e5:
27:89:a4:f6:48:0e:ff:14:12:6f:b0:66:f5:2b:13:
72:c6:bb:6b:87:36:bf:54:d7:fb:5c:ab:ce:aa:e6:
aa:ac:e5:c0:bd:1a:81:af:03:b7:3b:b6:cd:59:d7:
f9:a3:a9:f5:12:ca:6c:39:db:0c:36:f5:ac:1d:dc:
21:b5:95:74:e1:4d:c7:4b:e4:36:8b:0f:f0:6d:c6:
2d:b3:9c:99:8b:59:34:ab:9c:9d:8d:35:b2:fa:fa:
fc:c0:37:16:ed:ed:73:fa:58:95:f9:0a:d7:21:ac:
52:f3:ee:84:f4:b2:4d:5a:15:65:6f:23:18:33:6f:
8f:7a:6e:3e:79:e0:70:22:f7:d4:98:98:f0:33:9e:
a5:d4:e0:d8:cf:8f:2e:23:0c:81:77:ca:c6:a4:89:
87:24:27:07:6c:3e:59:99:96:a5:1f:bd:95:6b:9c:
21:f1:83:8d:a4:f4:e0:95:60:98:06:20:60:9e:79:
69:8b:23:40:b1:34:fc:45:cb:8e:75:18:7b:43:03:
7b:28:2b:4f:ab:fa:2f:f8:0b:3f:72:c3:ec:6e:4e:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:74:D0:92:26:87:E2:9C:0C:19:49:8B:3D:DE:52:2E:5B:99:6F
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:77:73:30:13:1f:a7:6f:4f:22:9b:7a:aa:e6:7c:47:a9:22:
5b:e7:f9:68:fb:2d:b2:04:36:3a:5c:27:f4:da:1d:e2:4b:6b:
d3:16:44:20:09:60:fb:da:a8:b6:e7:d2:1b:18:ac:a2:a7:c9:
04:bb:fa:77:15:6c:09:18:f5:ce:e6:c8:52:69:4f:56:33:84:
39:3d:7c:d0:12:f0:0e:d2:41:1b:fa:47:53:31:b7:d7:bd:59:
66:ed:87:8c:39:8b:e3:86:da:b9:97:17:45:30:f2:f2:c0:48:
2e:71:b0:39:ca:b0:6d:e4:ea:34:6a:b6:e1:8e:0f:65:21:ba:
ba:54:9c:04:27:ee:4d:3b:0b:82:7c:8d:10:00:40:3f:7b:c0:
97:c2:31:1a:67:53:a2:b1:a9:df:73:b1:7a:a6:a8:60:16:26:
70:c8:0b:0e:76:11:94:cb:bd:39:95:26:57:25:82:37:d5:f0:
9c:a6:ea:16:6a:17:eb:75:5f:d8:20:af:d5:76:4b:d0:68:3e:
9d:94:5a:c9:5f:02:c6:76:76:57:ba:39:c1:c4:bb:e1:96:66:
a9:66:73:98:70:be:cb:1d:bd:f7:95:33:cf:2f:75:08:72:da:
ae:3c:d3:60:92:c3:ee:cc:53:f8:3a:84:0c:b9:33:5d:54:6c:
c4:63:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:55:10 2025 by rpki-client