This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier: ADApTfAyFK/DKIv4Hk8w90DuufHhXVhV/E8YwTTI3/E=
Subject key identifier: EE:0B:FF:6B:4B:95:7A:BF:04:DF:59:81:72:94:3F:80:57:19:27:51
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019AF163E9D836FE11F4AE7A2D835D7918A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number: 1717
Signing time: Sat 06 Dec 2025 02:00:48 +0000
Manifest this update: Sat 06 Dec 2025 02:00:48 +0000
Manifest next update: Sun 07 Dec 2025 02:00:48 +0000
Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: 5HVR0OQyQxFP6wU6hOsu5eKT48kHLyZowKketNHX+Uc=)
3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=)
6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=)
7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=)
8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=)
10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:e9:d8:36:fe:11:f4:ae:7a:2d:83:5d:79:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Dec 6 02:00:48 2025 GMT
Not After : Dec 7 02:00:48 2025 GMT
Subject: CN=ee0bff6b4b957abf04df598172943f8057192751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:53:41:19:3b:39:84:04:0c:dc:3c:d8:71:
f6:9e:0b:d8:73:e8:53:a5:9c:bf:42:25:12:8e:56:
6a:05:8d:24:7b:b7:82:a2:9a:c1:1a:62:07:98:d8:
56:0b:40:01:a0:17:20:b9:36:15:f1:3f:b0:31:61:
df:b4:94:fa:79:6a:2d:4d:27:8a:1a:d5:51:73:61:
8b:96:da:7e:04:e1:58:10:03:48:0d:f9:07:96:e7:
1b:31:eb:0a:25:aa:57:74:40:77:53:f6:a2:d7:f3:
16:29:0f:08:41:e2:23:a9:69:a2:72:4f:72:a8:e9:
19:0d:7a:31:16:c8:25:f7:1a:e0:44:aa:03:6b:35:
bd:cc:59:49:59:7c:a8:09:fc:66:0e:10:ae:1c:94:
99:f4:02:37:af:3f:ef:8f:1b:2f:f1:8a:31:53:39:
b3:bc:25:e5:2e:3d:68:97:77:eb:52:dc:e9:17:37:
3f:c9:a9:ad:4f:f3:dd:4d:43:d7:87:35:ff:5d:21:
6a:de:55:f9:6d:34:84:cd:02:64:a4:d6:d9:73:63:
f6:08:12:1c:14:88:f5:96:e5:b8:f8:f4:1c:86:86:
38:62:d7:ce:9d:2b:ff:55:a1:d3:b0:e8:15:ea:ef:
bf:da:b8:21:fa:74:62:c5:2b:ca:03:bc:6d:01:02:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:FF:6B:4B:95:7A:BF:04:DF:59:81:72:94:3F:80:57:19:27:51
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:14:25:33:b2:c8:1a:99:a5:e3:63:63:73:ea:ca:7f:9f:cc:
3a:8c:18:b8:7f:7c:0c:f8:74:24:f3:76:49:c5:eb:2b:e0:b2:
3c:08:63:34:26:5f:f9:ea:97:5c:e0:57:fe:ab:9b:31:ad:64:
a2:70:3a:dc:12:c0:02:c2:47:b2:37:59:54:ec:b5:ea:28:a1:
3d:69:76:07:5a:d5:ce:61:a6:7e:48:4f:93:5b:dc:28:bf:8f:
a2:ae:02:44:5b:37:cf:a9:d4:f4:34:10:ac:0d:33:a9:71:7f:
01:82:a6:70:7b:8e:5c:0f:7a:cb:91:0f:a9:28:00:0d:7c:08:
65:b4:23:13:af:6c:c1:a2:d3:72:82:a4:98:c2:df:90:9e:65:
1c:a4:93:ee:75:ef:96:0a:40:c1:e9:7c:94:61:e3:11:bb:ae:
92:b7:c6:10:36:92:6e:d2:93:ad:3b:23:bf:f9:b2:f2:06:55:
be:f3:23:22:5c:d3:2b:c3:b3:00:e4:25:b4:a1:b8:28:1a:79:
2e:14:47:b8:d1:49:12:77:13:dd:d4:59:9b:8d:0f:c1:b8:16:
e4:73:06:eb:5c:a8:b4:05:05:89:b9:e4:4d:8c:93:9f:49:46:
62:16:6f:d7:e0:ee:e7:48:00:74:ea:31:3d:0d:ce:96:db:ec:
97:e3:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:46 2025 by rpki-client