This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: ODDm+eM6iAbCO6Wxj8YSle5pkJdZqo8DYP2pZz1QpqY=
Subject key identifier: 14:95:3E:6F:09:58:54:05:0A:6A:DC:21:B1:79:00:CF:5C:22:5D:C6
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019AF4D29DCEBFE8A726F8EDE6D8A6B5FCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0B0F
Signing time: Sat 06 Dec 2025 18:00:34 +0000
Manifest this update: Sat 06 Dec 2025 18:00:34 +0000
Manifest next update: Sun 07 Dec 2025 18:00:34 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 97pr1QlRZ5tpoGszAM3mgEmLrXLCwN/rT4ZrsYb8xpw=)
6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:d2:9d:ce:bf:e8:a7:26:f8:ed:e6:d8:a6:b5:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Dec 6 18:00:34 2025 GMT
Not After : Dec 7 18:00:34 2025 GMT
Subject: CN=14953e6f095854050a6adc21b17900cf5c225dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:49:63:32:02:62:7f:c7:db:a6:ec:f7:7c:
26:c6:27:ae:bd:5a:6f:d9:10:37:20:f1:75:cb:4c:
f3:3f:63:a6:c6:ac:15:06:cc:27:77:f5:ac:49:bf:
68:2d:fe:89:a7:7b:da:2d:c2:17:ae:b5:b7:72:12:
e6:6c:d3:a0:93:21:6e:bb:5e:93:62:cf:0f:58:44:
e9:c1:3d:7c:14:3a:03:1a:00:5d:3c:34:8c:13:49:
5b:c5:55:04:9c:f1:45:a1:b0:8d:20:cf:d6:8d:e3:
47:60:fa:05:d1:4d:e0:d2:38:1e:52:a6:32:44:91:
e7:61:29:fb:a7:fd:77:00:16:b5:c4:d9:92:ea:63:
65:ef:6f:5f:80:b0:29:16:82:93:4c:52:26:0d:19:
01:71:35:3d:59:fe:37:20:5b:56:8c:3b:e8:4f:0f:
e4:1c:f1:f2:4f:47:bd:5b:c8:cb:13:8a:58:29:14:
e4:47:ec:98:85:2e:87:11:48:59:f9:5e:3c:6b:03:
00:05:43:78:b5:4c:ad:79:d1:76:a0:bc:cf:17:be:
48:9a:e9:3b:ba:d1:b9:94:fb:0f:c9:a3:26:73:b2:
8c:a4:7b:3d:ca:95:28:88:93:d8:fc:a7:82:2c:9a:
b4:5a:fe:ec:c8:1d:9d:ef:e3:eb:8f:5d:2e:a8:71:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:3E:6F:09:58:54:05:0A:6A:DC:21:B1:79:00:CF:5C:22:5D:C6
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:a3:82:f1:52:18:62:91:0b:38:ea:31:08:b4:5e:52:f4:
f1:1a:7f:14:64:6b:50:33:49:9c:c8:65:e9:fd:b9:d2:18:eb:
ae:3c:bf:f8:50:8f:94:aa:db:88:48:21:55:95:69:01:15:75:
0b:a5:e6:0e:02:fa:f1:71:11:ff:25:c2:47:7b:00:4c:65:74:
6d:93:de:2c:5d:c0:90:74:48:57:e3:e3:72:dc:3a:8f:f6:6e:
e8:bd:25:70:6b:5a:ce:18:18:0a:ac:92:63:74:46:09:d9:49:
d5:15:13:6e:88:8b:e7:27:8c:4d:ca:1f:0f:8a:1d:fc:19:95:
fe:be:e2:4c:97:d4:68:51:c5:04:53:02:07:54:34:31:5f:cb:
da:19:1f:cb:dc:75:79:aa:da:92:97:3d:14:ed:c5:12:c5:93:
49:64:03:1c:36:eb:b5:49:11:9c:60:cb:fb:6d:3e:78:79:a7:
f3:65:f0:e1:01:03:96:1f:0d:dc:ef:cf:26:bf:e6:e3:48:0b:
15:16:96:68:33:15:3d:3c:ff:26:57:2a:ec:c9:80:a7:0a:8c:
37:b8:5d:a1:85:b9:34:4b:f2:5a:22:25:14:50:80:47:48:8c:
b7:76:b2:27:46:eb:a9:81:80:2d:c3:93:af:7c:e6:47:d4:ed:
47:92:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:12:25 2025 by rpki-client