This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: WKccusi/1MnCKLlxmJxAxqmtPch6464NG+5DMtLnc5M=
Subject key identifier: 14:D0:DD:C9:DA:88:32:E3:58:E6:8A:49:DC:BA:C6:35:61:F1:D0:2B
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019AF209220C4B3B196C7310C9A77C5DDF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 08D4
Signing time: Sat 06 Dec 2025 05:01:16 +0000
Manifest this update: Sat 06 Dec 2025 05:01:16 +0000
Manifest next update: Sun 07 Dec 2025 05:01:16 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: jfY6jjaIig01WZzz3l2Q66yjb1MbunQQCtBTE16hlaM=)
2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:22:0c:4b:3b:19:6c:73:10:c9:a7:7c:5d:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Dec 6 05:01:16 2025 GMT
Not After : Dec 7 05:01:16 2025 GMT
Subject: CN=14d0ddc9da8832e358e68a49dcbac63561f1d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:ad:b2:ca:6f:a3:5a:28:c5:29:09:9d:5a:
44:b7:9b:68:fc:ca:2e:7a:4f:9d:20:6f:d5:09:da:
7e:84:a4:55:0e:af:17:05:fd:aa:ad:e5:21:8c:de:
b9:89:8c:3b:0b:30:e6:6b:53:61:42:93:c4:26:bd:
f0:5f:d3:0c:b6:1d:51:93:d3:19:83:b9:6a:2b:b4:
bb:16:87:2e:a4:b9:40:09:92:9d:2f:8a:da:22:18:
5a:7a:79:b2:10:34:51:96:e6:c7:64:bf:67:61:72:
ef:29:cc:26:f1:c1:e7:18:a9:a3:4b:31:7a:85:ac:
35:93:b9:a3:f6:79:f4:1b:4c:77:00:61:81:22:2f:
19:98:38:9a:4c:a0:19:9d:be:ed:20:d3:e5:ef:6d:
70:32:0b:7a:2a:ed:65:79:80:a4:a4:ea:65:b4:ba:
8f:6d:9a:b7:00:f3:cb:ef:76:55:29:94:54:30:bc:
8a:c5:cf:a3:99:27:a9:25:34:c9:89:59:91:1e:18:
6c:b9:30:20:e6:94:5c:ec:9b:06:25:3a:34:e4:7a:
e5:6e:43:d3:7b:40:b8:1e:6e:9b:66:20:08:34:d5:
65:3d:3e:ac:14:c5:fc:03:e2:8f:76:62:e9:12:6f:
2e:50:96:96:bb:d8:46:a8:19:fe:3c:9b:f9:73:d4:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:DD:C9:DA:88:32:E3:58:E6:8A:49:DC:BA:C6:35:61:F1:D0:2B
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:de:2b:4f:be:a4:69:32:2b:1c:af:93:76:1d:56:e0:8d:
5f:7e:df:99:06:c6:e6:2f:84:6e:42:19:05:25:27:2f:82:58:
c5:4b:c1:b6:a6:7f:37:31:f8:d6:80:67:85:f3:5b:4a:ef:f6:
04:be:6b:e7:6e:75:28:5c:6d:08:a9:ba:ee:07:90:1d:07:78:
0f:e0:af:7c:b5:ac:59:78:a9:d2:fe:0e:8a:38:ad:fa:d3:b4:
e4:c9:52:ec:0d:95:3d:2b:be:fe:b2:43:0b:c0:c9:6f:50:f8:
0c:a4:7b:af:b1:59:10:2c:da:e9:58:b8:b5:75:22:4e:90:4e:
86:bf:9c:ee:b1:5d:33:be:fe:2c:92:71:ef:4b:70:a7:9b:f1:
53:26:56:7d:3e:b4:df:58:a9:f5:24:2a:87:9a:72:d4:11:ea:
5e:f5:9a:8d:a5:6a:9a:99:18:97:6f:75:02:dc:23:1b:b9:36:
89:b0:8a:07:91:12:d8:17:5d:7e:f9:e6:61:24:2e:d0:66:ff:
6c:ab:37:60:08:aa:33:e7:72:cc:32:21:33:dc:b5:25:f2:d0:
9e:0c:9a:1a:a8:20:6d:ad:4d:0e:a7:69:dd:74:2d:41:86:28:
be:fe:72:e6:73:51:08:e4:95:55:b5:d1:41:b2:d9:6e:24:e8:
1d:04:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:59:07 2025 by rpki-client