This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json)
Hash identifier: wslMW35/wOxD2jq2/uu0ewbBDBTpXNxIKMdyhecAqPs=
Subject key identifier: BC:B6:A9:DB:F7:2F:32:31:16:04:33:33:E0:43:92:97:53:81:1B:0E
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019AF0888AF0391156CC4CD6EDD9B13AB9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
Manifest number: 1761
Signing time: Fri 05 Dec 2025 22:01:11 +0000
Manifest this update: Fri 05 Dec 2025 22:01:11 +0000
Manifest next update: Sat 06 Dec 2025 22:01:11 +0000
Files and hashes: 1: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (hash: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=)
2: 1_CHZT9QfuR7tsU-euaK767cklU.roa (hash: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=)
3: 2_oHdZTLwl8Ni8dVchp52bQoBP8.roa (hash: 1IGeiz1Jq/CL3kqilbFu1/fy+mEjiI24ecXvvRj4kX4=)
4: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (hash: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=)
5: 4CLeeil6rnYYbSXDioOdMRk-fu0.roa (hash: nA2tspg1OX/8GxIGauCnmSzDzS8p+XC3M6EwX+K2Zuc=)
6: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (hash: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=)
7: 7usS4n2wTmwQKN_FfLFrT2gzTes.roa (hash: rmvLzeLSfvnfViQvQG0evozZFVJcIY19+X8a4fI9x4Q=)
8: 8YSnvyCLvUiHNjAw1eWuFCNdk2c.roa (hash: PTMxJnzevVSgZNxZ+M3p3kXGLUbEbhxizVHAA+Gkp9w=)
9: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (hash: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=)
10: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: BdaRlV2tGON9lF8cqNNnMgFI0xyhGIpw6sAIv5wWqFE=)
11: PtdarDr91PAic9ExXEPtp5rDR90.roa (hash: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=)
12: XHw85hniBF8TOIktC8VH-K5Sz7M.roa (hash: Ea6SLJBNB8kXoImOZvy4ZtmOcm4IPMCnAht2m4dCzfQ=)
13: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (hash: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=)
14: hmKd6LubvseWFnch4vVN9v-GR6U.roa (hash: eqD+J0wg0iQNL4Cg+PT3/sHzu0dI9aBjTjQ//aaCFJQ=)
15: ixgQ7SiQi_wWeVAAXtTKU7XdZIk.roa (hash: 96bA0cNzp2CN/kCqbjKPaK+FRxIBqzNEUGIfvg5EFb4=)
16: qmxFyvD5jjibZjJM1ZLLs4anyDg.roa (hash: y/C7QUn/kfSJX+tk2XBXNZQ/E3dp0hw1Ap5O7ikQtfw=)
17: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (hash: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=)
18: vmLDD1TBTYG-hEjE6Ab3SFuTYs0.roa (hash: NyOwpcin3g/lVGCyaCZG0ziR33wb6JD1mwKtweMIjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:88:8a:f0:39:11:56:cc:4c:d6:ed:d9:b1:3a:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Dec 5 22:01:11 2025 GMT
Not After : Dec 6 22:01:11 2025 GMT
Subject: CN=bcb6a9dbf72f323116043333e043929753811b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:16:f8:80:76:6b:f2:88:ec:94:89:3a:5b:
12:cb:41:8c:7b:94:dd:18:58:d2:61:43:d3:7b:96:
86:38:9e:b4:a4:08:3e:cb:09:ac:c6:16:0f:29:f9:
4a:be:6a:e0:00:65:5b:49:03:a4:9d:66:1e:83:ca:
3b:bc:13:83:e5:d3:d3:a0:82:aa:24:73:6a:5e:bd:
5c:94:0a:45:10:a1:11:a8:c2:6b:50:47:ce:bd:79:
30:81:62:ed:c9:c7:38:ef:16:27:7f:4a:ee:e2:f6:
88:c5:79:5c:81:53:9c:19:cd:2a:f5:10:3a:34:7b:
eb:36:9f:d8:fe:15:19:51:53:82:a5:e5:8c:27:c4:
28:9c:13:64:c7:69:8b:f2:23:a3:65:c0:de:18:b0:
66:a7:32:3c:7b:0b:f5:dc:5c:85:33:03:c1:d2:e3:
2c:01:35:47:49:37:1c:57:ef:23:3f:61:65:01:45:
97:d5:6d:1d:84:20:c1:32:73:c5:4a:64:6e:49:79:
34:b5:f7:bb:24:7d:2e:9a:8f:d6:dc:fd:85:ff:05:
42:ab:34:23:6e:1a:16:a7:ba:2d:47:c8:ff:f6:ba:
63:3f:b7:f9:18:dc:97:e7:6b:b9:51:b7:09:f6:20:
c1:91:f6:b8:cd:25:cb:00:ca:b5:7e:16:fd:dd:0e:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:A9:DB:F7:2F:32:31:16:04:33:33:E0:43:92:97:53:81:1B:0E
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:29:65:f9:96:2c:5b:18:7f:e7:b9:0e:56:71:82:c7:2d:
c6:38:fe:2b:03:71:bd:35:eb:1b:a5:b2:c3:d3:0e:75:a5:e9:
26:a4:3c:cf:cf:7c:69:43:49:77:42:57:e9:62:6b:91:05:2f:
61:69:4c:90:e8:58:10:22:d9:3d:37:b6:01:86:46:1c:fa:c6:
f3:b7:e1:76:c8:4b:61:b3:90:7d:95:a7:b6:2e:83:3a:99:3e:
bd:75:29:d1:58:ac:57:e1:40:53:60:91:b4:73:b4:de:92:88:
b5:77:0d:9f:22:8d:19:b2:26:d5:60:46:73:86:7a:5a:c7:de:
a5:48:1d:ce:c6:53:3c:cf:3b:88:63:71:1a:16:32:69:83:66:
fa:33:1a:94:43:dc:17:ef:1f:1c:75:09:41:3e:6a:fd:9e:f5:
40:ec:8e:5f:b5:57:b3:d5:7e:09:a4:1d:38:f7:d5:49:cc:e4:
05:6b:43:76:d9:26:2a:8e:63:64:fb:54:0f:87:a3:f8:a3:76:
af:97:30:fa:7c:fc:88:86:6b:90:11:f6:88:3b:30:a8:66:2b:
fe:16:a8:f7:81:8f:eb:55:c9:ec:c7:d5:85:2c:7d:c0:67:42:
d4:88:c8:02:9b:75:a1:a4:e4:20:fa:77:bc:3f:4a:87:3d:a3:
41:d6:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:48 2025 by rpki-client