This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: FSDTrR7f1uIuLr6jeXSHRK3jYewPyTEjaf+7Iuc9YPQ=
Subject key identifier: 8D:DE:35:41:6C:6C:CA:25:24:67:99:81:6D:37:F1:A5:F1:15:BD:FD
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019AF2AD39889FCCEFE56DCD33026813CD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0DE1
Signing time: Sat 06 Dec 2025 08:00:29 +0000
Manifest this update: Sat 06 Dec 2025 08:00:29 +0000
Manifest next update: Sun 07 Dec 2025 08:00:29 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: 83eM/TzfLeXcpEI/Ah9Sda+t7xswmIjfIVCXQM2Kjlo=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:39:88:9f:cc:ef:e5:6d:cd:33:02:68:13:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Dec 6 08:00:29 2025 GMT
Not After : Dec 7 08:00:29 2025 GMT
Subject: CN=8dde35416c6cca25246799816d37f1a5f115bdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:0f:7b:41:7c:02:4e:77:6f:74:cb:d9:ad:
fd:fc:e3:30:6a:8f:7c:0b:af:85:ba:3b:e1:ba:5b:
33:4d:03:00:4b:06:a9:a0:04:df:8f:7d:4e:b7:15:
c5:66:62:e4:15:b0:0b:cc:38:04:00:ee:95:76:4a:
d9:7b:e0:a2:72:14:70:fe:83:a2:95:8b:a3:71:ad:
f9:31:c3:05:d7:cd:2d:f1:94:2d:d1:75:d0:57:37:
99:1a:2c:1d:5d:8d:2b:ea:e4:4e:fc:3e:ca:92:3b:
86:be:a3:e2:e0:c3:6c:6d:e0:ca:aa:f3:95:54:f2:
c7:b2:d1:19:94:11:de:0d:9c:25:b3:dc:5e:1a:4d:
09:13:b3:ca:0a:91:a5:a4:48:e0:5e:05:b6:e5:a7:
c9:9f:9f:15:04:2c:6b:88:03:64:a6:12:c3:25:32:
40:0b:ea:32:66:b3:9b:2e:ac:f0:1f:11:c4:8d:3f:
81:79:e2:9d:c4:61:34:3f:4d:2a:b8:ee:fd:2b:39:
5c:24:1e:65:ff:39:a2:d2:31:b2:c3:19:37:9f:0a:
0e:a1:41:0b:22:27:da:99:aa:36:02:d9:b2:62:ee:
6e:45:1c:cd:4c:29:b7:98:b8:3f:36:e4:c4:4b:59:
ac:00:c3:d5:61:9b:ad:e7:8c:a3:de:30:bf:53:75:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:35:41:6C:6C:CA:25:24:67:99:81:6D:37:F1:A5:F1:15:BD:FD
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:57:eb:e8:3e:05:1a:6b:62:f2:c6:48:c0:24:5c:5b:2d:
04:39:7c:68:7e:9a:36:47:ab:84:bb:7b:47:02:3e:96:89:82:
76:f3:d1:78:1c:d8:ac:fc:e5:ae:a0:4d:e9:7e:1e:87:2f:bc:
6c:83:1e:58:1e:df:5d:6e:e7:49:bc:e8:fe:83:b9:de:7e:23:
6a:62:8b:d9:63:5f:09:55:46:51:22:9c:f9:11:74:05:c6:ad:
cd:d0:78:88:ff:e3:18:62:43:43:b2:7c:e2:66:8f:0d:65:03:
5d:57:02:b1:12:5c:bb:b9:00:b0:59:d6:58:5c:d3:07:b8:19:
03:f6:32:4e:2f:fa:86:87:59:f2:b1:e0:ae:54:12:a7:3b:a2:
58:8a:9b:2c:20:6a:8c:a4:45:42:a4:44:62:ff:a0:af:86:d0:
4b:4e:67:92:2a:c2:ac:07:29:b4:c2:c2:5d:3b:53:ac:f8:3d:
83:0e:3d:10:84:42:94:62:2b:05:65:c3:5e:c0:b7:68:d5:98:
2f:3b:5a:6f:44:39:d3:a0:9d:cf:53:e0:f0:7d:bb:c6:0e:85:
5a:f2:f3:0a:22:c8:be:7b:bd:7b:da:c5:b0:6a:3b:d7:25:ef:
e4:29:c0:90:d7:b5:12:21:11:e6:b3:58:39:0b:22:50:27:41:
79:28:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:39 2025 by rpki-client