This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: 3KHpjm+xJsnfWy5oKGAn1Dtt0jYFUKSK1aggBwoiKKg=
Subject key identifier: 2C:0C:A0:AF:2A:34:27:82:3C:95:B5:97:B3:D9:F6:17:96:CB:4C:AF
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019AF3F705DBC890818D39B3E15FBB98C5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 14:00:43 +0000
Manifest this update: Sat 06 Dec 2025 14:00:43 +0000
Manifest next update: Sun 07 Dec 2025 14:00:43 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: pvX+bujTrT+nsMG+uhh3M2kNzCPfkTTjTXKFRPpZFx8=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:05:db:c8:90:81:8d:39:b3:e1:5f:bb:98:c5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Dec 6 14:00:43 2025 GMT
Not After : Dec 7 14:00:43 2025 GMT
Subject: CN=2c0ca0af2a3427823c95b597b3d9f61796cb4caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:b0:81:04:9d:e7:13:fe:80:aa:d4:8d:5e:
a1:d5:e1:35:e8:35:85:30:d9:6d:fd:be:93:1a:a1:
10:cf:4f:99:36:df:2b:91:81:47:3a:ed:3b:eb:74:
70:1f:da:a9:1e:75:73:7d:f6:aa:d7:99:de:96:56:
7f:85:96:e0:5a:77:f2:d2:3a:f4:f8:ba:d9:b4:49:
6a:e6:18:b4:a2:2e:7d:8e:b2:a7:dc:a0:10:a5:27:
56:ed:83:b0:43:59:9d:de:a1:bc:af:5a:9e:f4:93:
ae:27:75:e4:68:02:13:0c:a8:f2:67:89:01:9c:48:
d7:9c:51:81:57:cd:48:a6:8f:08:f6:81:b1:05:aa:
67:51:b6:2f:4f:7b:1f:79:27:f2:ce:c2:62:90:60:
46:e7:02:6a:90:c1:34:fb:24:06:18:7e:f2:20:6c:
fa:22:0b:e3:03:75:f0:44:ba:ce:de:aa:1d:b8:dd:
45:23:cf:d0:a5:c3:fa:f9:85:a6:c6:e2:27:15:5f:
bc:cb:fa:25:6f:4f:a9:a2:9e:bc:5e:3b:c2:2c:a3:
04:c8:0e:6e:34:be:cd:6f:fc:f2:3a:06:c2:17:77:
10:b6:5f:0d:8f:99:d4:d2:89:af:1e:22:27:a9:7a:
ad:18:3f:69:c7:df:89:ae:27:43:69:e7:7f:c8:fc:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:A0:AF:2A:34:27:82:3C:95:B5:97:B3:D9:F6:17:96:CB:4C:AF
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3f:e3:5c:48:ac:c7:65:ff:c2:d9:9d:96:07:1e:04:d1:27:
6f:0c:0d:6d:d6:07:60:6e:a8:28:7e:b4:de:18:cd:e4:c6:40:
d6:12:e2:d2:07:87:12:58:4a:92:c4:2a:88:54:41:8d:a4:dd:
19:24:e0:0a:1a:ea:70:be:d2:28:88:82:ce:b6:40:92:73:fa:
de:ac:6e:90:e6:ed:6c:09:9c:6f:51:bd:99:5d:19:c7:4e:01:
fb:8b:aa:79:5e:cd:88:a2:27:6b:e3:22:f3:0e:13:47:86:0f:
a6:71:4c:c7:32:61:5f:d3:ba:41:72:15:6c:ab:b7:44:e5:15:
82:3a:1b:1f:f3:ee:e4:1f:d8:f6:68:7f:e1:bd:8b:c3:7d:a3:
27:54:8c:5f:8c:31:e8:e1:6e:80:4b:bd:27:25:dc:01:a7:fb:
17:44:16:93:52:bb:2c:28:4c:1f:a0:fd:d6:7a:af:c3:d2:7d:
aa:9f:17:d1:cd:77:c1:8b:40:d7:a6:c1:61:22:c9:75:c2:26:
0a:52:6c:2d:42:7c:3f:50:e2:9f:e6:65:c4:89:c2:53:fa:13:
11:27:2b:85:c1:80:40:95:97:de:87:86:aa:4c:2d:8d:cd:81:
0e:21:e4:bf:d9:fb:98:ea:28:64:b9:ab:0a:a8:d6:80:76:df:
d8:ff:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:56 2025 by rpki-client