This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
File: 8ve5y7uJUqw_GW580Lik26XeEcM.mft (raw, json)
Hash identifier: jKSu9WwmPBz8rmANIBEGdY1odqNmuJGjfpzvCicLj5I=
Subject key identifier: 7D:F3:15:B3:8B:42:EB:C6:7F:93:74:A3:97:CC:26:2D:FA:59:EC:D0
Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
Certificate issuer: /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Certificate serial: 019AF16416F62D2C3201E2F8F2616BB29327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
Manifest number: 44
Signing time: Sat 06 Dec 2025 02:00:59 +0000
Manifest this update: Sat 06 Dec 2025 02:00:59 +0000
Manifest next update: Sun 07 Dec 2025 02:00:59 +0000
Files and hashes: 1: 8ve5y7uJUqw_GW580Lik26XeEcM.crl (hash: 2q7RgEGn1+VNxJl26c/PDiCBzkCKCuUreYZfDdkT+Ws=)
2: FEoCb1uLso1eMcNnqeUGMSiYYmk.roa (hash: 26Octt5FPf1NS0dc+QAphRfbrN5vSMqq/tDr6dMsThk=)
3: L-e-zboOd0EExBXLvbSt2An9q3Q.roa (hash: 0pabBp9L9dI7nk3zp1L+efYrvlvpBkJqxMVrUl1c6Tk=)
4: baYIpR8Fy3HGS97tT3TkbmdSPzY.roa (hash: 7opRxausXis4QYNC4y2ER1LVJpyQDudccsf+oeNI93c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:16:f6:2d:2c:32:01:e2:f8:f2:61:6b:b2:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Validity
Not Before: Dec 6 02:00:59 2025 GMT
Not After : Dec 7 02:00:59 2025 GMT
Subject: CN=7df315b38b42ebc67f9374a397cc262dfa59ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:9c:01:d8:53:68:4e:3b:58:05:34:40:30:
e5:d4:fd:40:9e:8c:50:25:c5:73:66:66:ad:4b:82:
b4:9c:dc:88:20:26:46:d6:22:ed:71:f1:a1:99:d7:
ba:f1:54:f2:96:24:f5:f6:ab:45:42:e0:99:69:2e:
01:e2:23:cf:61:e5:fe:10:31:1e:42:ca:d0:a5:8c:
ab:5a:7a:0e:ab:4a:8a:80:22:16:a3:28:b4:77:a9:
31:52:70:18:5b:96:93:2c:73:34:16:bf:9f:a7:3e:
72:f6:a4:53:e7:90:dc:36:55:63:98:bf:bf:0b:03:
16:9d:71:7c:28:f7:a8:aa:77:be:6d:f4:55:42:8e:
a1:80:e0:9d:1d:6a:96:82:a2:5c:50:a2:f9:14:98:
88:67:f6:fe:20:36:19:f3:11:0d:45:15:3e:fe:55:
a4:f2:28:c2:45:da:ea:cb:cc:0b:5f:c6:53:ad:8a:
45:ac:3e:ec:ee:b5:1a:6b:d3:51:c2:ae:87:46:d8:
e2:43:2c:47:74:da:3b:84:23:0d:b3:74:c7:93:24:
6b:ae:d6:89:de:60:1d:63:a4:f6:94:21:35:42:e3:
a4:be:89:1c:31:63:f5:ae:1a:9d:93:12:40:a2:00:
1b:e6:18:a9:65:e9:88:35:5f:c0:02:7c:37:09:0b:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:15:B3:8B:42:EB:C6:7F:93:74:A3:97:CC:26:2D:FA:59:EC:D0
X509v3 Authority Key Identifier:
keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ea:a5:7c:6e:49:7a:57:63:17:86:f7:47:83:1b:c1:b2:2d:
7c:3a:4a:ad:99:26:95:08:e4:76:61:41:62:59:c0:9d:69:18:
dd:c8:b6:f7:ca:a0:f1:c0:43:91:18:5d:6e:74:42:85:82:c4:
a7:76:ad:0a:a7:57:22:ba:4f:a0:49:cd:a3:46:aa:84:15:d3:
0c:c1:17:0a:18:9f:cb:95:12:00:98:60:ea:40:a7:b0:42:95:
5b:90:ab:99:52:ab:1f:67:3f:ff:98:f3:b1:04:f1:71:0e:a6:
36:d5:16:5b:16:29:e1:b6:16:e7:84:d8:19:13:89:95:12:7b:
a4:67:55:f6:b3:71:c8:10:b1:4d:7c:48:e1:19:14:75:58:f8:
81:c6:a0:7b:4f:9f:8f:1d:fa:24:b3:0e:a5:87:25:0a:9a:2e:
1d:00:1c:81:84:c3:b4:c5:79:21:b0:6b:a5:c2:df:3a:65:bd:
cf:15:78:93:d1:00:7a:15:5e:bb:9d:b5:75:5f:21:55:32:76:
51:1e:a9:38:43:5c:a2:2f:37:42:e1:81:e7:01:ee:fd:df:5a:
4f:1e:f2:ac:c6:aa:87:08:cd:a5:ca:f3:32:35:a9:ac:af:03:
df:97:4c:d5:be:8d:4b:6d:76:e4:8a:a8:f4:f2:c2:60:dc:dd:
69:8d:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:57:49 2025 by rpki-client