This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: 3fv0ToVAyMxH7/WXLLNGPU0Axnv7ijGysJdgs984z4o=
Subject key identifier: 6E:DF:B2:67:50:8D:94:B6:EF:F8:DE:9F:2D:A6:19:65:8A:36:57:BC
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019B364579C13C680768C1E0D924F5B6AB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 178D
Signing time: Fri 19 Dec 2025 11:01:21 +0000
Manifest this update: Fri 19 Dec 2025 11:01:21 +0000
Manifest next update: Sat 20 Dec 2025 11:01:21 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: iIBzHmwSlx/2ZTNrrr70nG1m6MY7KOMvyFatKFvQBNI=)
2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=)
3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=)
4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=)
5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=)
6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=)
7: b405QCs1aUgpVCYR4Gaf0mhpXUg.roa (hash: vr3hh37YG76cIiO+7+0A0llwbOl+y0kE8NKxOJZ/Pus=)
8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=)
9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=)
10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=)
11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:45:79:c1:3c:68:07:68:c1:e0:d9:24:f5:b6:ab:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Dec 19 11:01:21 2025 GMT
Not After : Dec 20 11:01:21 2025 GMT
Subject: CN=6edfb267508d94b6eff8de9f2da619658a3657bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:61:61:1c:89:12:ad:53:f8:0f:75:ac:2b:
0e:d7:16:69:3a:a7:ec:00:05:f2:55:70:e0:47:91:
81:7b:a3:a5:ec:30:ea:b8:72:a1:a2:d6:99:12:2a:
13:40:2d:8c:05:f7:90:6d:4c:b8:f9:52:9b:f1:6c:
d0:19:c7:da:38:6c:46:01:db:2e:c1:e7:6b:7d:bb:
7a:82:12:37:20:9a:7a:15:4e:b4:30:f9:28:82:d7:
41:09:68:a7:8c:3d:da:f8:ee:46:47:be:57:4c:3f:
3c:42:2b:4b:c0:54:41:40:42:46:48:98:94:08:40:
d4:91:a8:de:f4:ef:25:59:68:cf:c2:a6:9c:e9:df:
b7:71:f4:8a:d6:2e:55:f2:5a:1e:0e:ff:bc:7a:12:
03:18:45:1e:0a:4c:50:4e:a6:cb:23:c0:18:26:1c:
e1:86:9e:91:96:72:a9:e0:d6:dc:b3:79:91:4d:0e:
e0:e4:d7:9a:b5:16:ef:cc:d6:19:a7:d4:fa:c6:01:
90:ce:3b:9a:80:95:fe:0b:a9:db:a0:31:06:58:55:
86:96:9c:f0:5a:09:39:f2:ae:ec:6a:bd:80:7b:30:
55:81:c9:0e:b6:11:34:e3:b8:69:68:76:97:0e:72:
aa:d1:e5:35:e6:d7:0c:82:41:ef:9c:3a:08:ed:b5:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:B2:67:50:8D:94:B6:EF:F8:DE:9F:2D:A6:19:65:8A:36:57:BC
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:b4:70:9a:42:90:2f:91:c5:c7:c9:ab:8e:ef:a7:7e:5a:
a1:69:b0:f2:b9:b6:9e:69:0f:d5:d9:90:6e:21:6d:79:e6:f7:
15:3c:b8:06:23:cc:6e:ac:d2:09:ec:4a:c4:da:42:ed:dd:3b:
54:17:00:10:5c:cc:9d:0f:42:27:d3:bd:27:41:ca:82:3b:e6:
44:ce:f5:24:21:29:8c:cd:29:6a:15:13:b8:f0:db:2d:b1:f6:
f4:6b:81:fc:48:01:e7:4b:26:a2:5f:bd:ef:da:49:41:91:2f:
0e:c1:98:31:55:38:c1:6d:84:c2:5d:be:2a:20:8c:ab:a7:d2:
6e:ee:80:e0:32:85:9e:d1:af:0b:a0:ae:95:ba:2a:47:95:91:
ba:08:eb:ab:ac:98:e3:ee:2f:29:d1:38:54:63:3c:37:84:11:
f9:b7:92:34:67:f5:61:2b:fa:77:8c:22:cb:52:06:00:c6:44:
09:03:3e:42:63:26:7d:65:c9:51:af:f9:dc:e2:81:8a:e1:a9:
cf:26:ff:c2:b4:2e:a4:cf:e5:5f:c4:3c:ec:d2:2f:b1:b7:71:
03:20:ce:37:d4:1f:e4:90:a9:86:2f:1b:a9:17:64:49:91:53:
39:27:2e:ea:2f:cf:52:2e:5f:19:2e:e5:57:4d:55:11:55:96:
83:b6:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:24:11 2025 by rpki-client