This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: hOwdMr5EOuAZrQ8axu7iN1+U1nW1ByMM755v/0FwzUs=
Subject key identifier: 19:6D:63:E9:50:D8:72:67:8B:B8:49:1B:1D:EB:CE:44:94:BA:52:A1
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019AF4D2B82B868C627D3546CA11C710D52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 134D
Signing time: Sat 06 Dec 2025 18:00:41 +0000
Manifest this update: Sat 06 Dec 2025 18:00:41 +0000
Manifest next update: Sun 07 Dec 2025 18:00:41 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: 1Nvn33Obgehy3l6I0PcsJEBG7aGJi8ujulb8+V56elE=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 2JTjCNKMAxBu0WpDBBMJTO7JE08.roa (hash: tj4BSTj23X17OmZWgILj54BaiHHtzK2DS2th4uQEtHw=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: PAWgUkJGkZMMH0B0t_bDMbs7oV8.roa (hash: 4QE+DZNcvEZQ8RmxR+2Kr+4pUxx1nFvP9EyqXOoK9Tw=)
6: Y4gwOh1dy9ru89frBgyR0UP929Y.roa (hash: pZTR407dAAaj2WcTPtyQjoDBY8vVKouXvzxyTxJMQdE=)
7: j-g4O52bZEUxSu_6zXDvFKIKW-s.roa (hash: /WqdN6gST6znMSNmoYRfF+zJ/x7YCMAZ5DLq6fglCYU=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:d2:b8:2b:86:8c:62:7d:35:46:ca:11:c7:10:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Dec 6 18:00:41 2025 GMT
Not After : Dec 7 18:00:41 2025 GMT
Subject: CN=196d63e950d872678bb8491b1debce4494ba52a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:f7:84:8c:24:cb:d6:bc:fc:b8:16:9f:ba:
51:71:c7:07:16:63:ae:90:f1:c5:35:f9:44:35:51:
2f:65:f2:10:72:7e:1f:c2:15:b7:e6:d9:de:89:a7:
13:4a:8e:b0:9c:c0:3d:9c:c7:e5:f2:6d:02:33:11:
e7:b3:a9:b0:d4:47:a4:d5:29:13:11:35:28:15:f6:
7d:40:73:af:b7:ff:86:0a:6f:5e:86:5b:50:cf:e3:
b1:ec:c5:61:f0:90:18:b5:f0:5f:20:8f:da:0a:32:
b4:8b:c9:d8:70:34:c0:f5:d2:cb:f1:70:48:74:27:
f4:3b:2a:b2:01:76:79:94:71:60:dd:de:7d:78:98:
18:54:7a:6d:f5:cf:27:73:02:53:bf:a2:ad:72:f6:
18:ed:e4:88:ec:d8:c6:91:a8:af:46:1b:bd:a8:e7:
92:78:ea:21:a0:0e:c5:e5:f6:3e:63:8b:70:74:de:
d5:17:f2:ec:1d:c8:ca:c8:0f:3b:d4:27:52:48:93:
7d:de:72:c1:52:1a:4d:88:4c:0a:73:2b:12:0d:42:
e0:54:d8:66:55:da:4a:52:11:a7:0c:db:16:c0:82:
f2:7d:e5:2a:12:39:6f:2b:69:54:96:48:9e:9d:e7:
89:50:93:26:8d:f1:28:96:17:b4:a7:39:bd:01:ae:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6D:63:E9:50:D8:72:67:8B:B8:49:1B:1D:EB:CE:44:94:BA:52:A1
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ce:d1:38:99:67:45:d0:e7:5e:a6:dc:0a:27:c1:6a:8e:9e:
ff:a2:f4:e9:8f:2f:91:68:10:c6:b2:30:d0:b4:a5:c3:24:88:
22:bd:9f:0b:5e:c6:7d:1d:27:5b:61:7d:e5:b6:f2:5f:a0:a9:
35:72:8b:e9:ec:bf:87:34:6e:d0:f7:d3:17:55:7b:b3:59:16:
8e:0e:8b:a9:c3:64:a4:30:a0:3d:9c:65:41:c8:c3:9e:2a:c6:
e7:b0:6c:d4:36:6e:77:01:e7:e4:85:e3:ba:ff:6b:57:92:71:
da:8f:84:98:bc:91:a0:45:ce:da:ac:77:eb:38:28:68:d2:f0:
ad:cd:e8:f2:40:4d:2a:9a:65:49:6e:40:e9:05:55:b4:26:86:
d4:0a:36:64:60:01:48:35:fe:bc:08:16:26:d9:a6:91:c5:eb:
07:9a:d9:58:ca:3c:4f:ba:d2:fc:fa:c8:f5:bc:f7:0e:8d:53:
e9:4a:4d:36:12:c3:96:f1:7a:80:99:46:c2:e9:67:11:8a:c0:
7a:3d:26:12:63:81:03:7e:8c:83:ff:d6:17:10:db:b2:ed:4a:
88:99:e4:cd:79:68:41:f3:40:f3:13:4b:5d:5a:81:b0:c0:2a:
ca:b9:65:d1:8b:66:91:fe:10:b0:2c:b7:44:fd:29:37:a6:e4:
8e:66:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:12 2025 by rpki-client