This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier: 5Eo5Wth0iXpGx1T4d5QeGgY6a5NcVtrT/5B9a9jOWNw=
Subject key identifier: D7:65:AE:C4:D0:A6:39:C9:D0:40:83:30:C5:DF:AF:CC:14:DC:E0:3D
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 019AF208CA5FF88C6F3D073988E5135D7D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number: 1767
Signing time: Sat 06 Dec 2025 05:00:53 +0000
Manifest this update: Sat 06 Dec 2025 05:00:53 +0000
Manifest next update: Sun 07 Dec 2025 05:00:53 +0000
Files and hashes: 1: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: fuHeld7WyRMtiAdvIxI4gdrpYw6ocMCm8e7BPszWt+w=)
2: jlU0CrUNYpHyPZ-sOhh_p4dS8gE.roa (hash: pzmvvOy/hE4GB8tk4sl95mF4r2s5M3R9gOVbZKnKbN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:ca:5f:f8:8c:6f:3d:07:39:88:e5:13:5d:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Dec 6 05:00:53 2025 GMT
Not After : Dec 7 05:00:53 2025 GMT
Subject: CN=d765aec4d0a639c9d0408330c5dfafcc14dce03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:cd:5b:af:a3:69:9f:c5:d0:22:f9:02:f9:
05:64:ec:09:43:02:80:22:80:53:7e:ad:97:8a:51:
45:92:4c:44:dc:5a:77:dc:cb:bd:28:85:a6:fc:51:
a9:08:e2:f6:7e:b7:da:f9:65:54:da:2c:3d:6b:02:
a2:79:2d:58:be:60:d5:bc:93:e6:44:ac:65:75:9d:
42:64:97:a4:a2:5f:ff:4d:4c:7d:17:f4:d3:83:7a:
10:82:96:08:26:3d:ce:13:73:06:84:b8:08:02:75:
a4:a6:b9:17:ab:3a:0d:bd:11:01:58:de:4e:09:86:
39:41:bb:bf:71:9b:b8:cb:e0:33:c2:e8:c7:9c:ba:
e8:ad:52:a9:3d:13:58:ef:5f:3b:e7:cb:79:a2:24:
99:7d:ec:93:0f:07:a3:67:c8:37:da:d6:57:e7:0f:
36:3f:f1:a4:92:e8:8a:3a:be:aa:9f:d4:ca:ca:be:
50:b0:10:e6:c8:31:a3:d8:87:28:ed:17:de:8d:47:
a8:c0:6f:6e:60:a7:6d:ac:7d:74:d6:40:f8:2d:ee:
88:0b:68:f8:e6:99:48:ef:ad:ab:d2:df:a6:9f:e8:
71:0f:2e:b6:1f:10:93:f1:36:30:f2:9f:d4:70:98:
d4:92:12:f4:e3:0f:59:d1:aa:e6:91:f6:33:d9:04:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:AE:C4:D0:A6:39:C9:D0:40:83:30:C5:DF:AF:CC:14:DC:E0:3D
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7b:65:6c:4d:15:a9:4c:ca:2e:aa:5b:51:18:48:39:44:b7:
53:b0:ab:e1:ed:06:e9:42:da:64:4b:3a:6c:5e:c1:db:aa:30:
19:c4:3d:dd:62:e9:69:41:d2:5b:fa:77:15:f0:22:d6:df:02:
f9:5f:30:b0:e7:a2:1b:1d:61:aa:f2:8f:4f:a7:b4:dc:17:88:
10:e3:73:3e:86:de:3a:2b:c8:a7:38:c0:de:40:00:a4:71:2f:
87:0c:b3:a9:59:d9:c3:6f:c4:d1:8b:3a:97:3c:df:f0:17:2d:
c5:90:49:c8:b2:3e:85:4f:0e:d5:89:5c:ee:59:be:eb:b2:2c:
60:62:4a:4c:65:18:7e:72:42:30:70:59:7e:ef:b3:f1:79:cc:
c7:09:00:93:37:2d:dc:30:a1:d6:9c:4c:c4:dc:9d:39:cd:41:
65:93:42:20:9e:ad:e4:a4:38:c3:65:4c:38:84:59:7a:ef:2e:
12:9a:90:7f:39:c6:50:71:92:b8:43:9a:8e:1e:27:85:91:e4:
5b:f5:78:bd:05:62:ce:6a:ce:ad:3d:d4:4f:d2:47:08:09:21:
ba:37:47:62:2a:3e:84:35:35:b6:ce:8e:43:8f:34:7d:43:44:
58:4e:fb:9d:8a:40:8f:3c:64:30:37:0e:2d:f0:32:67:b2:d5:
1a:86:28:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCMpf+IxvPQc5iOUTXX1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzFmZTgwODM2NDY3NDk4MTZhZDNmYTY0MDk4MzQ1ZmI2
MWU5ZjUwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD
EyhkNzY1YWVjNGQwYTYzOWM5ZDA0MDgzMzBjNWRmYWZjYzE0ZGNlMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PLNW6+jaZ/F0CL5AvkFZOwJQwKA
IoBTfq2XilFFkkxE3Fp33Mu9KIWm/FGpCOL2frfa+WVU2iw9awKieS1YvmDVvJPm
RKxldZ1CZJekol//TUx9F/TTg3oQgpYIJj3OE3MGhLgIAnWkprkXqzoNvREBWN5O
CYY5Qbu/cZu4y+AzwujHnLrorVKpPRNY718758t5oiSZfeyTDwejZ8g32tZX5w82
P/GkkuiKOr6qn9TKyr5QsBDmyDGj2Ico7RfejUeowG9uYKdtrH101kD4Le6IC2j4
5plI762r0t+mn+hxDy62HxCT8TYw8p/UcJjUkhL04w9Z0armkfYz2QSAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdlrsTQpjnJ0ECDMMXfr8wU3OA9MB8GA1UdIwQY
MBaAFFfB/oCDZGdJgWrT+mQJg0X7Yen1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODct
ZjMyMDY5ZWM0ZWU1LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODctZjMyMDY5ZWM0ZWU1
LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmntlbE0V
qUzKLqpbURhIOUS3U7Cr4e0G6ULaZEs6bF7B26owGcQ93WLpaUHSW/p3FfAi1t8C
+V8wsOeiGx1hqvKPT6e03BeIEONzPobeOivIpzjA3kAApHEvhwyzqVnZw2/E0Ys6
lzzf8BctxZBJyLI+hU8O1Ylc7lm+67IsYGJKTGUYfnJCMHBZfu+z8XnMxwkAkzct
3DCh1pxMxNydOc1BZZNCIJ6t5KQ4w2VMOIRZeu8uEpqQfznGUHGSuEOajh4nhZHk
W/V4vQVizmrOrT3UT9JHCAkhujdHYio+hDU1ts6OQ480fUNEWE77nYpAjzxkMDcO
LfAyZ7LVGoYojg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:14 2025 by rpki-client