This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: o2OoVLgjxEgN0KzxteWDjdj9hNFRi4Zg7aLNJW/cd9s=
Subject key identifier: CA:67:01:69:14:5D:FF:1D:40:50:71:A1:62:A0:47:C0:70:EC:8B:DD
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 019AF31D1418059198E3B81D0A1F46F32D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 02CD
Signing time: Sat 06 Dec 2025 10:02:40 +0000
Manifest this update: Sat 06 Dec 2025 10:02:40 +0000
Manifest next update: Sun 07 Dec 2025 10:02:40 +0000
Files and hashes: 1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: zU8dNWDUzgch3ZKucXNs55z1SLDM1Tka/kTs5MZthhA=)
2: Dyuv8Z__vkGHwwVg87zPgkG7J-4.roa (hash: ilCGUeVqOl6irP7EZ7ynRXvcKUKAauHP7YFg6+r0+3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1d:14:18:05:91:98:e3:b8:1d:0a:1f:46:f3:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Dec 6 10:02:40 2025 GMT
Not After : Dec 7 10:02:40 2025 GMT
Subject: CN=ca670169145dff1d405071a162a047c070ec8bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:3f:8f:b3:16:01:db:73:c7:09:f3:bf:46:
ed:e9:35:4d:96:8b:53:aa:fe:76:cb:42:9f:11:99:
60:b1:b0:2f:81:f8:1e:24:45:de:97:fe:77:73:a2:
98:aa:6c:91:8c:68:80:f4:1b:d9:de:18:3b:35:78:
d4:d8:83:1f:0e:a5:9e:e5:e3:81:32:4e:21:41:d4:
58:22:4c:f0:2d:cc:ed:f2:ff:0e:18:0d:ef:57:fe:
07:96:3b:d7:7c:c5:0a:d6:09:8b:b9:8e:68:43:0c:
6b:2a:40:d7:c4:db:62:a3:0c:f1:b8:9e:6a:50:42:
6a:a4:7c:c3:50:a7:42:a9:11:7d:a1:53:f4:6d:cd:
ca:51:f8:c9:8a:04:23:1e:9b:73:26:cb:a9:ec:76:
e2:3a:e9:c4:35:b0:a0:ba:10:b4:af:67:2e:72:52:
4f:57:37:88:32:eb:cb:dd:b1:7b:1c:c0:b2:20:bc:
90:de:8e:f5:19:96:ff:e2:9c:d9:36:78:92:dd:6f:
86:31:f9:77:a1:38:8d:7a:af:fe:23:e4:d4:b3:6b:
5d:c9:e9:48:1d:95:c1:6d:41:59:19:18:3c:f4:9d:
8e:83:04:a9:b1:d9:e5:ab:27:cf:02:dc:76:a1:d4:
5e:86:81:85:29:dc:b8:27:e5:fd:4c:fa:73:0b:54:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:01:69:14:5D:FF:1D:40:50:71:A1:62:A0:47:C0:70:EC:8B:DD
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:23:98:b9:91:04:1e:84:60:42:9a:61:97:82:d1:19:2a:
ab:da:3f:4a:5d:7d:9b:a7:5e:47:e2:af:d6:0f:7a:fd:79:29:
04:e0:63:f1:14:82:c6:0c:54:75:6e:c9:69:67:ab:e0:8e:bf:
40:0c:5e:87:6b:71:20:47:2d:4a:32:45:95:14:02:b5:03:db:
95:6d:df:f5:88:49:4b:e9:2e:3b:23:bb:b7:83:23:88:6f:90:
fd:cf:02:d7:4e:1b:32:3b:3e:6b:93:d8:07:24:cf:7d:42:43:
fa:8d:ab:55:d4:17:34:b1:42:12:f7:bb:a2:28:93:fa:9a:18:
77:03:74:16:c2:ef:5d:7d:3e:31:55:51:6f:d3:7a:63:58:19:
6b:a3:35:e3:d5:ae:dd:2f:8f:67:f2:c3:b3:7c:11:6e:de:df:
4e:32:f3:93:ab:f1:3f:31:f5:bd:f2:36:d3:96:b2:0d:ad:69:
b4:8d:3f:16:00:cd:bf:ff:83:75:28:c3:91:c9:3a:b3:c3:9d:
4a:14:9b:b8:1a:c3:c2:0f:e0:bd:f9:74:f8:fd:d7:31:17:fe:
dc:8e:59:3f:d5:d7:65:2c:81:d6:f1:9f:3a:dd:11:5e:0b:95:
ac:ca:5c:ba:f8:64:1c:bf:7c:ae:3a:1e:81:3c:ed:d8:10:f3:
6d:46:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:13 2025 by rpki-client