This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: f/iqbp/zOBIMi1d7C3wF79QXcIFJmmlJFVSc33KvCYY=
Subject key identifier: 16:6B:7A:49:DE:83:31:4B:65:7C:5B:D4:A1:EE:D4:A4:37:05:BA:CA
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019AF2ADC7C31A5352C02838E3DB8F7D53C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 07B2
Signing time: Sat 06 Dec 2025 08:01:06 +0000
Manifest this update: Sat 06 Dec 2025 08:01:06 +0000
Manifest next update: Sun 07 Dec 2025 08:01:06 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: pTVzWDBvhGlNPuS4DurfPvHKbYj/zu+PrbSEsCtNxL0=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:c7:c3:1a:53:52:c0:28:38:e3:db:8f:7d:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Dec 6 08:01:06 2025 GMT
Not After : Dec 7 08:01:06 2025 GMT
Subject: CN=166b7a49de83314b657c5bd4a1eed4a43705baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:15:79:1a:b9:c4:1a:4c:5b:3d:28:32:23:
2d:3f:a7:76:31:66:03:f6:31:ef:16:30:52:7e:5d:
9a:a2:3b:c6:32:65:af:22:c0:38:85:65:ec:cd:27:
04:db:88:03:35:b9:00:e6:e2:4d:7c:f8:6c:bf:03:
12:aa:d4:8b:c0:2c:c5:5a:a2:d9:06:4b:01:6f:a4:
66:ca:85:31:19:c5:6a:15:42:46:3a:8b:db:fd:a7:
4f:db:e5:d2:fa:7c:5a:3a:14:bc:65:e6:c4:79:82:
4c:0b:b5:30:86:a3:9a:13:a2:9f:7a:0b:0b:7b:2e:
be:94:58:96:fa:a8:cc:ef:eb:41:28:09:ce:d7:ca:
83:7c:70:ad:4c:da:9d:d2:9a:ef:43:32:14:97:89:
02:74:71:0b:fd:c1:be:38:92:7f:46:97:ec:46:1a:
89:d2:24:e0:b6:e6:53:99:6e:0a:d0:1a:57:3c:53:
f6:48:93:ce:b2:13:f3:f1:9b:f1:a8:9e:ef:d7:ec:
28:c4:9f:a9:c5:b2:00:c9:64:96:9a:80:2e:be:0c:
ee:c8:79:7b:d2:2f:80:ce:42:38:40:77:5a:ec:5f:
26:00:ac:4b:fe:44:46:60:90:68:88:b6:80:4d:62:
3f:71:44:d0:e4:82:d8:81:ed:ee:6b:72:26:9a:70:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:7A:49:DE:83:31:4B:65:7C:5B:D4:A1:EE:D4:A4:37:05:BA:CA
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:c3:57:12:bf:05:92:58:62:f5:fd:9c:93:01:d0:dd:e0:
af:ff:90:bb:71:6a:90:6a:fc:4d:84:00:bf:fe:7e:15:77:8e:
cc:ed:e8:b8:4a:31:08:1f:e6:13:0a:b3:db:f7:d0:57:42:fb:
54:3d:c9:9e:d0:9a:d8:c8:5b:62:2e:14:a1:7e:0d:ac:13:45:
58:be:35:67:28:29:d7:e2:a3:dc:c2:2a:31:e8:1b:72:c6:63:
6e:a6:9f:a7:31:df:36:40:a5:e7:60:fb:61:a8:0e:86:0b:cb:
98:fc:17:8c:8d:4f:20:49:73:4e:64:00:0f:87:5a:65:83:c2:
35:12:f9:a0:d5:5f:c5:e2:a0:74:0b:00:bc:22:32:2f:c7:2d:
bc:eb:b4:74:ae:46:31:40:8d:c8:73:17:79:9a:39:17:54:bb:
7d:eb:b0:3d:89:8b:87:c9:d1:d2:ee:d0:e0:c4:ad:c5:e2:fc:
ad:e0:9f:56:f9:9c:36:07:a4:d4:52:5d:41:97:49:27:48:94:
f2:7f:42:f4:15:a3:e6:4c:08:91:af:92:7b:60:1d:6a:4d:5e:
e3:52:fd:00:85:9f:b0:e0:29:67:29:62:cc:03:00:06:bb:42:
6b:5a:3f:d9:cc:ac:98:d9:cb:0b:f3:c6:7a:05:ff:d2:0f:f8:
07:c6:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:41:27 2025 by rpki-client