This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: QXCzG7EjG+E8gG/WrO6IHV1Vq1nA8KySJrSGp/7cQDQ=
Subject key identifier: 22:69:40:F3:64:DE:C5:ED:B0:3A:89:0F:8B:B3:87:29:89:E5:9C:EF
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019AF1647B746FD44099FB9EC758C33E51F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 08BF
Signing time: Sat 06 Dec 2025 02:01:25 +0000
Manifest this update: Sat 06 Dec 2025 02:01:25 +0000
Manifest next update: Sun 07 Dec 2025 02:01:25 +0000
Files and hashes: 1: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=)
2: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=)
3: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=)
4: dsHWjTHeRRGMMM_nmnG47d-gUzA.roa (hash: AOOkudODUzLnnW8+48GjiYqjo1L5I5U+lNPwyVAkVIA=)
5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=)
6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: YlOGRldfsSE6FCwn1T0nFjwXK75R/Tpi5v5vjww0esg=)
7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:7b:74:6f:d4:40:99:fb:9e:c7:58:c3:3e:51:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Dec 6 02:01:25 2025 GMT
Not After : Dec 7 02:01:25 2025 GMT
Subject: CN=226940f364dec5edb03a890f8bb3872989e59cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:8c:e7:ea:4a:70:7b:e4:53:e4:6a:e1:16:
38:3c:ea:05:fc:1d:01:a9:a2:6a:03:f9:89:e1:7d:
6c:75:6c:f4:a3:40:c0:69:c0:43:a3:2d:7d:f9:8c:
11:06:53:03:1c:9b:35:1a:e9:dc:a0:45:ce:65:cd:
78:89:ae:1d:0a:57:1d:7e:54:07:4c:b2:2c:e8:59:
f7:40:59:b5:16:6c:16:af:23:39:2e:90:a4:02:bc:
25:64:1f:55:95:1f:8c:44:e8:4e:38:d5:a5:ae:ce:
f0:d6:5c:1a:3a:96:57:79:4a:6d:24:be:c9:8b:25:
2e:a2:57:47:0f:50:83:b6:df:79:d3:66:f7:50:42:
22:d9:2a:8c:0a:7b:b3:11:64:07:95:89:d0:50:07:
8e:e6:49:c7:12:f4:1b:f6:e6:a7:5a:97:79:30:5b:
76:73:d7:18:b2:58:5d:5e:be:4b:db:a0:61:1e:81:
0b:67:db:f7:a3:ea:61:f0:ca:84:99:3d:42:cc:f5:
c1:a8:e4:b9:18:46:ab:df:94:20:35:07:93:66:e6:
0d:a0:25:95:00:9d:02:c4:32:ac:cc:53:5a:e5:70:
2c:c3:04:04:03:cc:5c:08:0a:31:d1:5d:38:75:09:
f0:1a:99:b8:04:b4:34:96:70:67:57:9b:7f:bf:30:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:40:F3:64:DE:C5:ED:B0:3A:89:0F:8B:B3:87:29:89:E5:9C:EF
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:04:4f:a8:2f:ed:34:92:13:f4:ac:0a:d2:98:57:bf:8f:fd:
22:0d:31:27:87:6e:6c:b8:53:90:74:d0:8e:95:cb:4a:a5:26:
89:fd:7e:f3:36:1e:f5:db:14:89:06:5c:a0:bf:09:7a:b4:b8:
2b:9d:81:2c:06:b7:24:13:23:86:e9:f9:4d:f3:54:15:33:a6:
ac:9d:7b:7c:ed:54:ea:e0:5f:93:b6:58:dd:a3:f5:b4:a9:ab:
d6:a7:63:d7:e4:2f:1d:e3:c6:0e:41:fe:18:06:67:51:ab:56:
d2:bc:f5:30:1c:c9:64:bd:cb:3b:52:fb:f8:b9:3b:32:f1:18:
0f:cc:0c:cc:7f:3d:57:db:80:b5:17:4d:fa:f1:b3:3e:35:62:
48:c4:e8:ed:63:c7:0d:28:e4:8e:d3:20:a6:7a:ea:de:d5:fd:
35:77:73:e3:5b:18:79:fc:27:57:5c:3d:d2:fa:aa:a0:73:a5:
17:75:e6:3e:97:ad:e6:9a:d5:9e:97:d4:56:06:8e:fa:28:dd:
43:22:71:67:d2:b9:24:e5:63:21:24:cc:10:be:4c:28:c8:aa:
f5:2b:03:3b:9f:f6:81:70:6e:b7:61:db:d9:f7:2f:84:39:8f:
33:1a:85:74:f2:ca:ff:30:ce:50:15:da:ea:9d:59:d2:50:65:
c7:55:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:35:06 2025 by rpki-client