This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: TtebspfuyW+cMuz/qAmtk06/NMD73GLugxq8JEEPzGc=
Subject key identifier: 8F:A9:C8:B9:15:B1:E6:4B:E2:7B:8B:42:D1:3A:AD:DE:82:2F:DC:02
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 019B2E5471BBC0411DAA79146CE4F070EF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0E2F
Signing time: Wed 17 Dec 2025 22:00:44 +0000
Manifest this update: Wed 17 Dec 2025 22:00:44 +0000
Manifest next update: Thu 18 Dec 2025 22:00:44 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: ck9F0Fw+2pR01RQHZ8tYu3YvYGuidZMJWe8ZbZ/78pQ=)
3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:54:71:bb:c0:41:1d:aa:79:14:6c:e4:f0:70:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Dec 17 22:00:44 2025 GMT
Not After : Dec 18 22:00:44 2025 GMT
Subject: CN=8fa9c8b915b1e64be27b8b42d13aadde822fdc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:52:c5:1d:ff:76:62:ec:86:01:45:4d:8c:4b:
50:4e:04:25:be:4b:d7:69:3b:6c:2f:4a:da:c6:04:
19:02:31:27:4b:c7:92:a3:97:d3:b2:66:17:62:26:
2b:2b:08:ee:4b:15:ad:af:8a:ce:43:fa:4c:55:0f:
21:bb:4e:ec:ed:cb:96:2d:2c:73:89:2b:6c:09:76:
cc:49:6f:10:25:7f:e2:60:7e:c8:3d:cb:57:2b:dd:
43:56:b0:cc:fd:b2:46:30:c0:f9:f1:6f:27:1e:f9:
4f:97:f0:f2:bc:05:66:8a:b8:a7:45:65:00:21:6c:
d5:d9:11:c2:de:2a:cc:07:7b:da:be:f5:d5:8b:d3:
36:b1:a9:49:43:6f:7c:a5:7b:3f:07:f8:ed:fc:4c:
8e:27:57:c8:e2:0b:ba:87:a7:19:68:75:39:ae:b6:
38:25:04:4c:50:43:32:11:2b:e2:06:f2:3a:56:88:
ba:ff:b9:80:19:5b:dc:bb:f2:01:11:76:bf:91:09:
59:ac:01:55:3f:2a:76:39:41:2f:b4:1d:3a:ce:0b:
17:2e:16:39:b0:58:80:c7:55:58:57:4e:16:96:03:
f8:fe:9c:39:87:a4:e4:8b:2e:65:f1:63:bd:c2:09:
ac:cc:f0:37:57:0a:c6:2e:b0:08:80:97:83:89:ba:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:C8:B9:15:B1:E6:4B:E2:7B:8B:42:D1:3A:AD:DE:82:2F:DC:02
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:9a:aa:f6:c4:59:15:f2:79:be:7c:6d:7b:c7:cd:5d:2b:
29:33:9d:73:a5:e3:ba:c5:9c:20:7c:38:84:86:df:53:ec:c9:
5b:bf:e9:d3:3a:83:9b:a5:10:28:ba:07:00:76:71:4f:0a:b0:
59:e1:4b:79:60:3e:16:1b:62:91:c6:90:19:6d:25:f2:27:73:
85:2a:51:14:f2:9d:d1:5e:23:77:d8:42:17:22:09:8a:48:d3:
c0:f9:bb:c7:34:15:04:90:a8:03:17:17:6e:4e:ed:77:5f:3d:
2c:d8:a5:1b:d7:91:47:07:ab:b6:df:3d:92:10:4b:60:be:d3:
1e:c9:ac:da:92:e1:d1:41:c0:cf:db:5f:e4:18:23:00:a0:67:
4e:c3:e0:f6:07:ae:df:09:68:a8:1e:5f:38:ef:13:5a:d6:d7:
9d:c8:52:ac:99:ff:ff:8e:55:3e:ba:3d:98:39:59:a0:92:34:
48:96:2f:f8:02:69:da:ca:ca:5c:8a:23:03:14:28:b7:5d:9e:
0f:45:46:72:dd:61:6c:cb:99:56:15:fb:b9:14:4e:a1:3a:70:
57:38:16:b4:9d:66:95:91:68:9e:90:a7:30:d9:0a:66:72:c6:
65:73:76:8d:c5:7f:47:05:f2:21:b2:ec:17:cd:d7:e8:2a:31:
78:4c:5d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsuVHG7wEEdqnkUbOTwcO8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTE1NGUxYzU1NzhiMGZlZjhhYmI3NzlmODExN2U2NGU4
ODRkMTgwHhcNMjUxMjE3MjIwMDQ0WhcNMjUxMjE4MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg4ZmE5YzhiOTE1YjFlNjRiZTI3YjhiNDJkMTNhYWRkZTgyMmZkYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lLFHf92YuyGAUVNjEtQTgQlvkvX
aTtsL0raxgQZAjEnS8eSo5fTsmYXYiYrKwjuSxWtr4rOQ/pMVQ8hu07s7cuWLSxz
iStsCXbMSW8QJX/iYH7IPctXK91DVrDM/bJGMMD58W8nHvlPl/DyvAVmirinRWUA
IWzV2RHC3irMB3vavvXVi9M2salJQ298pXs/B/jt/EyOJ1fI4gu6h6cZaHU5rrY4
JQRMUEMyESviBvI6Voi6/7mAGVvcu/IBEXa/kQlZrAFVPyp2OUEvtB06zgsXLhY5
sFiAx1VYV04WlgP4/pw5h6Tkiy5l8WO9wgmszPA3VwrGLrAIgJeDibqEzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+pyLkVseZL4nuLQtE6rd6CL9wCMB8GA1UdIwQY
MBaAFBqRVOHFV4sP74q7d5+BF+ZOiE0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt
Mzg4ZDhhZDJhNWJiLzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi
LzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACemaqvbE
WRXyeb58bXvHzV0rKTOdc6XjusWcIHw4hIbfU+zJW7/p0zqDm6UQKLoHAHZxTwqw
WeFLeWA+FhtikcaQGW0l8idzhSpRFPKd0V4jd9hCFyIJikjTwPm7xzQVBJCoAxcX
bk7td189LNilG9eRRwertt89khBLYL7THsms2pLh0UHAz9tf5BgjAKBnTsPg9geu
3wloqB5fOO8TWtbXnchSrJn//45VPro9mDlZoJI0SJYv+AJp2srKXIojAxQot12e
D0VGct1hbMuZVhX7uRROoTpwVzgWtJ1mlZFonpCnMNkKZnLGZXN2jcV/RwXyIbLs
F83X6CoxeExdbQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 05:40:49 2025 by rpki-client