This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: w8KW7jO7EZrEK3tsjk+YAAZkCHlBPp3p8ONzxw4X/yQ=
Subject key identifier: 4B:E9:F0:6B:9E:B2:CB:4C:9F:12:62:F0:83:51:06:89:9B:D8:C6:96
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019AF19ABFCAF8FE06DDEBAD81E5C6102356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 144D
Signing time: Sat 06 Dec 2025 03:00:41 +0000
Manifest this update: Sat 06 Dec 2025 03:00:41 +0000
Manifest next update: Sun 07 Dec 2025 03:00:41 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: XRSw2WJThConnAvfBSc+P1EMshLcWI7EMXkRt+x85AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:bf:ca:f8:fe:06:dd:eb:ad:81:e5:c6:10:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Dec 6 03:00:41 2025 GMT
Not After : Dec 7 03:00:41 2025 GMT
Subject: CN=4be9f06b9eb2cb4c9f1262f0835106899bd8c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:de:8f:71:e3:ac:4e:18:18:72:66:5c:c5:
b9:ef:c7:3c:b8:3a:e0:2b:4e:3c:b8:b3:50:19:2d:
f7:b8:d3:ce:43:39:f1:55:ae:3e:0c:39:32:db:f4:
11:53:cb:9b:1e:f5:2a:a9:32:98:72:7f:bf:7c:81:
8e:b5:ab:70:5a:02:81:5c:05:fb:27:d8:d5:bd:6f:
7e:2a:52:1f:43:86:8c:c8:ae:9b:7f:ab:0d:ab:74:
1e:87:0b:a1:6a:b3:2a:f3:c7:ba:c6:d4:7c:42:5f:
7c:58:25:51:8e:bf:76:bd:37:95:33:8b:cc:79:41:
dd:d8:6d:6e:50:d3:4b:5d:a6:5c:25:65:9c:16:44:
15:5c:5f:1a:fd:2e:f9:60:9f:f7:84:b9:c4:33:c8:
bf:2f:95:9c:5d:92:d8:37:f7:23:82:27:cb:d0:fa:
6f:b3:72:5f:fb:5f:58:d5:ff:19:2a:41:42:9f:0f:
8d:5e:f6:fb:21:d8:d9:55:24:2a:f2:16:62:fd:e8:
f7:95:a4:d8:e3:35:11:37:bd:1f:d4:d5:6a:70:9d:
f2:b6:16:a5:7e:c5:39:82:84:33:71:4a:ff:a9:77:
a8:e2:f0:21:cf:7a:96:69:dd:b4:fa:28:35:69:db:
2c:45:f4:02:5f:08:ab:ef:e0:49:bb:d4:54:1c:ed:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:F0:6B:9E:B2:CB:4C:9F:12:62:F0:83:51:06:89:9B:D8:C6:96
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c8:7d:23:18:ad:6a:f9:18:a7:de:fc:2d:b2:1d:85:ca:51:
60:47:ad:a8:6e:99:9a:1d:93:ea:1f:d0:6d:16:6a:02:42:8a:
1d:11:7f:28:ba:e1:e6:0a:c2:7e:ba:00:4e:85:a2:07:70:cc:
e0:8b:d4:b1:f7:b4:f8:4e:23:11:9d:27:ec:cf:67:0f:60:4c:
ab:39:cd:36:62:f6:f4:a3:b8:94:fc:c1:60:e6:61:58:fa:d0:
ff:4b:e4:14:7b:fb:cb:42:09:f5:86:5b:fa:67:f6:47:41:0f:
1f:a5:22:34:a4:56:e2:0f:9e:ba:51:3d:a3:75:fb:f4:c2:8b:
08:81:7f:98:4a:36:fd:d9:c9:2f:4a:c2:e0:b7:72:30:85:f7:
c2:f2:09:9c:c7:a3:d9:e0:5c:1f:cf:b1:04:29:40:5e:55:7a:
66:8d:fa:4f:32:c0:94:61:ed:1f:4f:d9:ec:0b:bc:ba:42:c1:
ea:8e:5a:cf:e2:47:27:e3:c0:8c:e4:4a:f9:26:8c:41:30:ca:
01:96:e5:ec:32:2c:f1:23:4e:55:a8:56:b7:73:06:4a:c7:52:
5d:36:fd:73:74:89:ec:71:8a:88:0a:1a:12:ed:d9:19:b7:ed:
80:a0:ea:8f:f4:15:a3:bb:ae:f3:11:79:03:f2:46:27:f0:5e:
d8:46:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:39 2025 by rpki-client