This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: PFcDZnXK5ce7RGrVxlNIEHAO0CB0LGmx9TWSkYveO/c=
Subject key identifier: 30:F1:37:65:7F:1E:2A:C5:35:64:DA:2A:3C:66:F0:37:01:44:F3:18
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019AF3524A0C7747D8291F1888CECDA587CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 0516
Signing time: Sat 06 Dec 2025 11:00:47 +0000
Manifest this update: Sat 06 Dec 2025 11:00:47 +0000
Manifest next update: Sun 07 Dec 2025 11:00:47 +0000
Files and hashes: 1: 08xZwFBzMyKw2fj33b3OnpzdQe4.roa (hash: +I7unp7UZt75QPcPL8zRjg6wNwODWaDJ+uiuaz4dcnQ=)
2: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: bDy6y1bC8hdefD+L67qZNungvQ75XOSnQuXOlC9Heds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:4a:0c:77:47:d8:29:1f:18:88:ce:cd:a5:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Dec 6 11:00:47 2025 GMT
Not After : Dec 7 11:00:47 2025 GMT
Subject: CN=30f137657f1e2ac53564da2a3c66f0370144f318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:1e:cf:6c:77:63:eb:e7:a1:5f:de:31:8b:
13:93:cd:d6:18:70:75:d9:01:90:45:b4:ac:53:cc:
39:90:38:6b:98:17:b8:a2:55:50:93:f8:91:7f:dc:
07:ff:66:57:69:cf:cc:7f:7e:10:de:cc:b1:09:2d:
5e:65:50:53:7c:bd:af:11:4e:26:96:c9:01:0a:19:
45:3f:a2:94:e5:4a:ad:16:45:d9:13:96:8b:61:a1:
45:2d:0b:f8:8e:b6:38:d1:58:2d:c3:8e:64:d1:ea:
82:c2:fb:fa:e4:4e:e8:02:2b:55:36:14:ac:4e:f8:
79:8e:f9:59:91:c4:11:43:c0:ca:52:f1:36:cc:df:
b6:0d:94:f0:16:ac:2f:11:cc:a8:60:d9:f7:2b:27:
00:ee:96:62:c3:3b:0a:c9:f7:4d:ff:d3:34:cf:43:
2f:38:c5:ff:44:3e:ac:e3:91:dd:40:89:c7:78:32:
9b:ed:29:ea:3c:cb:1b:61:f8:dc:b6:b9:9e:4f:bb:
e4:cc:e4:f2:66:b7:85:91:8f:54:13:24:10:af:f0:
3b:a5:02:f5:ec:8e:5a:a2:19:cb:2b:81:21:61:40:
e2:c6:06:6d:66:40:61:87:ea:aa:60:e9:09:e4:1b:
79:63:70:bb:2e:3e:8c:6c:7f:e1:98:a7:bb:4f:b2:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:37:65:7F:1E:2A:C5:35:64:DA:2A:3C:66:F0:37:01:44:F3:18
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f6:06:24:4d:20:25:25:c6:b9:68:5f:7b:25:cb:f8:ef:8a:
dd:c7:3b:86:73:f6:6a:22:1a:14:4d:5b:f8:93:43:28:c3:9f:
e8:19:3f:27:27:a2:5a:18:6a:9b:c9:a3:79:a7:e5:94:bb:1c:
da:61:b8:d0:4e:c6:f4:1d:f1:85:50:3e:65:a9:0a:f0:26:b1:
87:27:0a:77:79:cd:f4:7c:f4:15:ed:c9:9b:c5:4e:71:70:3f:
e4:98:0c:ae:0c:ac:0d:e0:a2:f2:17:8a:73:7f:8f:45:3a:93:
12:ef:04:f5:51:62:de:0b:62:a6:43:5b:a9:b0:79:f3:c5:25:
4e:af:87:03:2c:67:2f:7f:6f:11:1a:76:ad:b4:28:ed:98:78:
fe:bc:7a:7f:40:87:01:54:5f:f5:11:fa:ec:41:25:3d:09:bc:
b2:20:08:a8:a9:af:5b:54:de:55:b6:45:34:fc:95:ee:2e:57:
7a:c0:c7:e4:b0:8a:48:ae:4d:cd:25:0a:46:51:51:de:8f:50:
a5:c0:02:3a:2d:22:4a:c4:7f:72:94:b1:19:09:38:2e:e5:6e:
5c:0f:d5:bd:f4:ee:c5:ed:5e:31:c0:00:bb:76:07:af:73:96:
08:f2:7e:a8:02:81:b1:2c:b9:7c:28:7e:de:62:c9:ab:9f:af:
3b:77:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:31 2025 by rpki-client