This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: sZckqqhu51ZWW1EbbCBMGJuMo08cqDKBykND4wQDKGA=
Subject key identifier: 28:31:0D:14:C5:60:8D:8C:C8:20:5B:9B:58:70:4B:A4:61:DD:CE:7D
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019AF5E5C479C5F38B21E0751407BEC46385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 23:01:07 +0000
Manifest this update: Sat 06 Dec 2025 23:01:07 +0000
Manifest next update: Sun 07 Dec 2025 23:01:07 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: rGLEFnTUDcY22YPtrzyW06pcWGR5WFCEhPBuYplo4J8=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:e5:c4:79:c5:f3:8b:21:e0:75:14:07:be:c4:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Dec 6 23:01:07 2025 GMT
Not After : Dec 7 23:01:07 2025 GMT
Subject: CN=28310d14c5608d8cc8205b9b58704ba461ddce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:3b:0f:bc:69:22:cd:9e:ef:00:e8:9c:15:
9b:2d:5a:fa:11:9d:14:ce:80:23:8e:d6:b3:3b:26:
75:aa:aa:6a:db:bc:e0:69:22:ee:54:02:de:0c:73:
00:c7:ed:e9:ee:f3:36:6c:01:62:0f:58:43:01:0e:
16:f1:ac:26:41:ed:8b:77:c8:4b:74:db:77:34:f6:
71:83:52:22:01:6a:f4:65:d7:65:82:51:2a:aa:15:
fc:9f:18:12:21:da:8a:f4:4b:3b:d7:2e:58:90:ea:
19:65:11:4c:b4:e7:d4:2d:d3:e9:1b:df:be:16:ce:
44:7a:61:a6:06:09:35:82:87:41:9c:e9:97:c9:0a:
01:73:61:8c:bd:64:29:c6:a8:10:f4:74:9a:a3:c5:
5f:7e:87:5a:c5:3f:5c:8d:5e:6d:11:95:47:1b:a7:
c6:81:e0:f0:8b:8e:01:7b:ae:d2:4c:24:7f:eb:3c:
59:35:0f:ee:03:7c:a2:cc:a2:27:00:35:f7:69:9d:
5d:cc:ba:37:b6:6c:31:1f:71:34:9f:59:8e:8b:13:
12:50:79:f8:a4:7b:01:a5:d3:12:1d:cd:6b:96:cf:
70:de:cd:fc:64:b4:ad:3e:f0:bd:10:16:e2:d9:25:
4e:04:5e:3b:ad:40:de:ca:99:68:fe:55:40:93:d1:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:0D:14:C5:60:8D:8C:C8:20:5B:9B:58:70:4B:A4:61:DD:CE:7D
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:de:a6:b7:6c:58:13:b9:20:c0:a7:2c:8a:a9:8b:ee:50:
64:10:f6:9d:4f:07:00:17:8c:ba:89:cd:0a:3a:4d:5c:39:83:
ed:55:c1:d1:dd:cb:ec:22:0e:9f:d6:be:5d:29:bd:4e:db:a6:
22:8a:27:b7:47:14:fe:ac:09:3c:9f:c1:da:db:15:c0:9e:5a:
01:18:6c:db:e6:c1:ab:83:bf:12:16:81:8a:d0:6a:71:c1:c0:
70:0b:f8:84:b3:af:b7:03:d1:73:e5:56:0d:87:eb:98:58:b8:
9b:c4:7f:69:92:af:80:18:9c:29:ca:ba:b9:0e:c7:96:e6:43:
6b:c7:74:85:a8:07:dc:4f:c0:a4:29:d9:41:3f:53:01:97:44:
c7:43:26:b4:7f:d9:c9:75:98:4b:b0:82:82:8b:f6:75:2a:07:
e8:a1:37:97:52:01:3b:db:33:af:9a:4d:c0:c8:01:5e:06:86:
21:6d:c5:10:d6:b4:b6:71:13:0b:97:79:64:23:cf:e6:54:74:
8a:54:14:58:82:54:74:01:e5:c4:84:f9:a0:da:32:c1:18:2f:
67:ab:33:81:91:12:e3:43:f9:02:57:79:2d:0e:44:0c:78:1a:
e5:7e:13:ca:38:4b:34:a8:4f:eb:90:5f:3c:a7:31:85:6b:92:
5f:03:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:24 2025 by rpki-client