This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: O+0IGsbkIqgBXmn+s+wllLPXMn1MBLYVOMl/UyOlm7g=
Subject key identifier: D3:85:D3:71:AF:2B:65:93:59:C9:BE:21:AD:E6:AC:7E:FA:60:E2:8A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019AF0880D66FA3FAC728A2D0AA7A76F96AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1479
Signing time: Fri 05 Dec 2025 22:00:39 +0000
Manifest this update: Fri 05 Dec 2025 22:00:39 +0000
Manifest next update: Sat 06 Dec 2025 22:00:39 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: PMh0AglP8ra6skGnEqBok4M3KMoel3MWlQNhy45fqmA=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:88:0d:66:fa:3f:ac:72:8a:2d:0a:a7:a7:6f:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Dec 5 22:00:39 2025 GMT
Not After : Dec 6 22:00:39 2025 GMT
Subject: CN=d385d371af2b659359c9be21ade6ac7efa60e28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:22:ed:7b:dc:61:96:22:7c:10:52:17:e2:
c2:fe:99:4c:37:08:8d:16:42:93:c0:90:56:1f:dc:
11:45:74:b1:c0:02:5d:0c:a4:58:83:cd:98:ab:00:
06:9b:53:24:de:c3:e4:35:9e:5d:37:be:ba:22:a4:
1c:b0:f2:53:4b:e7:01:a9:5f:96:18:78:fa:0b:f1:
f7:13:f7:c4:8c:ac:ac:3f:a9:b0:07:a1:ba:8c:75:
2d:97:96:b2:a5:6c:31:65:73:7b:6e:1e:8c:ce:74:
67:db:34:98:cb:e7:a3:1e:80:51:36:2f:7d:a9:59:
53:d0:e2:6a:a5:32:62:08:bf:d9:a4:db:ba:a5:bf:
24:ca:59:2d:0b:2f:e4:6b:5b:16:4d:81:00:1d:8f:
4d:2a:63:c1:d6:88:b8:3f:9f:12:dd:a5:4e:38:23:
68:21:28:ee:39:27:8a:8e:dd:c1:c3:95:10:22:f1:
6e:49:c9:e3:81:5f:7b:71:c3:4c:67:49:7b:fa:fa:
b7:55:da:be:36:00:2f:4f:ae:01:37:3e:22:11:b4:
2b:75:f0:1c:fa:9d:55:f9:06:3a:94:9b:b9:16:5a:
d2:1f:b3:b2:3f:f7:ea:4b:77:c8:11:65:d0:ca:19:
34:0e:48:0c:af:33:89:c1:a9:e9:58:b4:e6:98:55:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:D3:71:AF:2B:65:93:59:C9:BE:21:AD:E6:AC:7E:FA:60:E2:8A
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:02:27:ea:2d:38:f3:18:3b:3f:ae:d0:20:d8:f7:39:a6:
cd:2f:c7:d2:95:65:f8:ff:89:9c:1e:d6:07:45:3f:8a:0e:24:
35:51:c4:16:d6:52:73:01:e8:44:47:b0:18:32:97:01:89:88:
71:0a:eb:6f:e7:6d:ff:e1:94:b9:ec:26:bc:45:7e:be:aa:0f:
32:af:87:7b:3e:f6:66:3d:0a:ac:3f:8e:a5:e4:e1:a2:d5:a9:
f0:b8:1b:23:ce:de:2b:93:a3:b8:9d:2c:40:43:5b:c6:c3:0e:
4c:8b:cb:6a:4f:40:48:f2:af:eb:ca:37:7f:2e:d5:2c:25:e1:
59:d1:67:dc:b6:81:df:03:24:25:87:98:2d:c6:18:d8:10:d6:
2a:70:da:2e:1c:e3:3e:7c:1d:94:ce:fa:ce:9f:67:01:fb:28:
12:95:07:74:fc:47:0a:dd:85:8a:20:e7:0e:69:ad:66:08:9d:
28:95:c2:b0:6f:9e:dd:ef:69:b2:91:ef:22:ea:92:84:b4:d8:
b9:b1:e2:a8:e5:4c:48:ad:1f:5a:be:92:75:46:c7:f7:dd:4f:
0e:bc:d6:74:44:00:56:6e:2e:0a:75:1f:e4:54:5d:e9:1f:70:
a4:0e:78:f2:88:a1:ec:4e:a0:f2:bc:63:9c:00:6d:22:e2:64:
68:4e:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:07 2025 by rpki-client