This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: n2kO+/zzxSU9vOk/QoSqFAsHUkTfuajAp4i24pdE8SE=
Subject key identifier: 3E:CE:D3:60:21:D4:D2:27:3E:DA:CB:D0:87:47:E2:C3:CF:92:92:01
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019AF0BEE14E3E5258A627526C9B14D6F687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 080C
Signing time: Fri 05 Dec 2025 23:00:32 +0000
Manifest this update: Fri 05 Dec 2025 23:00:32 +0000
Manifest next update: Sat 06 Dec 2025 23:00:32 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: bGX6GZwo95bSyz7yX/a1UZV70M/TwWIYW6E70h4R7KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:be:e1:4e:3e:52:58:a6:27:52:6c:9b:14:d6:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Dec 5 23:00:32 2025 GMT
Not After : Dec 6 23:00:32 2025 GMT
Subject: CN=3eced36021d4d2273edacbd08747e2c3cf929201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:e3:b7:fb:4d:1a:45:b2:14:d5:73:f2:04:
94:ee:9c:50:4a:cb:ed:70:e8:33:7e:54:9d:76:03:
0d:f7:5a:e8:9d:dd:8a:a0:c1:61:08:f6:cf:29:ca:
2b:da:7c:38:73:6f:51:d4:8c:ec:9d:89:d1:2d:ac:
ac:40:5d:9d:ca:44:26:ca:00:29:1b:6a:72:43:bf:
04:b4:b5:0f:ed:b0:df:71:6e:87:f6:ad:94:13:41:
23:ba:1d:bc:ce:a3:e8:77:cd:6a:4c:24:7d:97:c2:
2a:a5:ed:e3:12:ae:b8:73:0e:4d:08:01:ef:b5:37:
d0:5b:8e:15:c6:03:d3:12:4f:7f:8c:4c:0c:44:88:
b2:7f:39:8f:61:2f:e7:96:6a:eb:6c:f1:46:68:b4:
59:11:14:08:f0:90:b5:db:de:a3:ec:9b:2a:aa:92:
7d:0d:e2:c0:8a:da:e0:93:b8:2f:50:5d:78:f1:81:
b8:95:68:fc:13:4b:7c:1a:6e:6e:cd:de:06:3b:72:
de:60:4f:55:26:30:83:70:d0:bc:2e:ad:6c:d6:6d:
6e:51:38:c2:eb:74:67:a5:5a:06:c0:2d:13:28:87:
ac:2a:95:02:70:68:68:74:ca:c3:c2:df:88:2c:e3:
44:34:06:e1:f6:76:a9:91:a8:f9:4d:95:c1:5e:d4:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:D3:60:21:D4:D2:27:3E:DA:CB:D0:87:47:E2:C3:CF:92:92:01
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bb:b1:b2:79:68:f2:a1:81:c7:fd:a5:81:2f:27:ce:2e:a1:
38:73:bb:b8:5b:59:e1:b6:66:e8:c6:5c:45:1d:95:aa:21:74:
88:48:ab:e6:c5:32:f6:4f:b0:3e:87:18:b3:45:e6:76:e6:78:
57:69:e3:b2:a6:64:47:92:61:e9:d7:a9:87:59:e2:bf:0b:e1:
6f:dc:c3:9f:b9:23:5b:c7:ed:9c:d0:55:f6:91:5e:97:8a:bb:
a1:7d:de:09:02:c4:18:37:ad:d4:d6:08:5c:61:1e:07:d8:40:
ad:ba:09:95:56:c2:9f:d3:18:68:4c:42:c5:29:89:03:b7:56:
ad:8f:ed:d7:52:3e:94:b3:40:7e:76:d5:fd:67:d6:09:41:0e:
f2:b8:42:b7:36:52:2b:b4:1b:3d:9e:c4:fb:2c:01:93:95:b8:
89:94:95:05:d4:35:6a:eb:a8:42:df:4e:3a:59:c4:37:c2:dd:
e0:69:09:1c:a5:78:18:c2:b6:32:a3:54:d6:d7:2c:20:22:04:
67:d6:bf:b1:43:f2:f4:0a:0b:e7:6b:c7:5f:9f:2b:bc:c5:c8:
cf:9f:41:d6:ed:1a:de:5e:99:b1:1d:70:95:87:21:ce:b4:a9:
bd:34:29:fa:9b:64:c7:e9:b5:60:ff:02:29:5e:f7:6f:41:da:
e9:c2:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:53 2025 by rpki-client