This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: fEi9l6oC6Xu4EYFNdHoVezwgw7lO4Kdij78bOx6sdV0=
Subject key identifier: DA:4B:9A:41:27:D0:52:DB:34:20:39:E3:80:E1:31:41:27:6E:BE:CE
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019B22F57F3F060AF98FAC7B671A04F7AEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0E73
Signing time: Mon 15 Dec 2025 17:01:12 +0000
Manifest this update: Mon 15 Dec 2025 17:01:12 +0000
Manifest next update: Tue 16 Dec 2025 17:01:12 +0000
Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: Tx3ln/FTmfw5xoAMM5WJueor6fzVFuUZHIt+zL7pDGI=)
3: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:f5:7f:3f:06:0a:f9:8f:ac:7b:67:1a:04:f7:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Dec 15 17:01:12 2025 GMT
Not After : Dec 16 17:01:12 2025 GMT
Subject: CN=da4b9a4127d052db342039e380e13141276ebece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:a2:8f:d4:ee:95:7e:fe:d8:23:9d:40:86:
4f:63:66:95:e9:2f:4b:c3:8d:91:a4:a6:fa:dc:30:
bb:99:fe:2e:ff:d3:34:8d:1c:2e:70:c4:cc:b3:20:
55:47:40:7d:f0:fa:18:46:82:5b:be:32:f5:be:76:
b5:90:7d:6f:60:0a:31:fd:e3:b7:49:f5:0f:68:44:
c5:3b:d4:93:20:1e:64:7d:cf:58:74:09:ab:fd:30:
cb:9a:0d:4b:72:65:0d:94:b1:73:0c:48:fe:54:32:
24:49:c5:0e:a3:6b:1b:c1:39:83:3c:3c:7d:67:f4:
8a:1f:e2:3b:31:e9:0f:f0:a2:15:2f:4b:81:25:17:
49:0d:0b:8f:fd:b0:ff:7f:bc:60:f1:40:43:91:77:
10:e7:52:eb:30:44:1a:af:79:b7:6e:13:7f:13:1a:
31:38:be:9b:8f:d2:46:aa:d3:d6:dc:9a:03:47:9c:
d0:6b:18:7b:ea:72:29:62:18:0e:94:66:59:37:35:
90:99:77:c1:50:f9:c2:1c:07:22:8b:35:2a:05:8b:
b5:5c:c2:65:43:c3:b0:5f:2f:c0:4e:15:b2:70:eb:
99:b5:fe:b4:ed:26:e4:66:8a:b4:11:d1:1c:25:13:
e9:ee:b3:af:09:9a:9c:6d:54:72:cc:cd:4c:5e:02:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:9A:41:27:D0:52:DB:34:20:39:E3:80:E1:31:41:27:6E:BE:CE
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:4f:e3:c2:63:00:3d:9a:cd:6b:2d:54:bb:e6:79:18:76:
fe:29:26:6a:80:5c:1b:f9:a0:96:79:32:10:1b:34:47:f2:c4:
30:a0:91:9c:37:14:32:cd:80:71:e9:6e:af:19:54:ce:5d:61:
a0:62:04:b0:e8:55:15:a3:f0:c6:1b:90:59:3b:bd:de:e0:4a:
33:72:05:d7:90:a7:8b:c9:5a:07:be:0a:94:fb:8a:0e:8a:ac:
dc:e7:da:31:70:22:47:a7:84:8f:71:3b:02:df:25:bd:5c:0d:
14:d3:6d:57:14:a6:5e:7d:51:33:f6:78:21:fd:c4:e7:25:80:
62:13:de:df:98:37:4d:d9:c6:a4:6e:88:b5:8a:ed:62:94:05:
ac:50:8c:86:28:44:56:92:31:62:3f:2e:30:88:17:3c:94:d8:
c8:e2:51:11:42:70:15:ad:6a:cc:03:2d:34:79:e0:69:48:e2:
b4:94:3d:b5:39:0b:00:31:81:0a:88:9f:5a:92:e7:7f:d3:d3:
cc:8d:75:f0:a9:71:e4:f1:8c:8e:3d:dc:e5:b7:55:60:ea:aa:
9a:ec:61:8d:12:b7:07:8f:d6:1b:d1:b3:a0:68:36:40:03:50:
5d:b9:fe:cc:94:68:00:e4:38:c5:7d:bc:d4:22:3f:84:ec:28:
1e:ac:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:55:09 2025 by rpki-client