This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: b3lCgVc6EQOsiXWU4DeqTuKKQwZnBEIwQhcNfxEZL24=
Subject key identifier: AA:90:CF:CD:A9:3F:2E:F9:3B:3A:07:5E:49:7D:11:5E:1A:AD:E3:F7
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019B0F00661DCAD11AF3A744F4D872228249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 0366
Signing time: Thu 11 Dec 2025 20:00:42 +0000
Manifest this update: Thu 11 Dec 2025 20:00:42 +0000
Manifest next update: Fri 12 Dec 2025 20:00:42 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: CSsWESbL86C6nLb2/qCsQjuaBUwhC8mPUL9q0jT5wzw=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:00:66:1d:ca:d1:1a:f3:a7:44:f4:d8:72:22:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Dec 11 20:00:42 2025 GMT
Not After : Dec 12 20:00:42 2025 GMT
Subject: CN=aa90cfcda93f2ef93b3a075e497d115e1aade3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:55:a4:63:58:59:6d:64:f2:89:f0:17:58:
bd:8e:b1:a8:26:6f:62:2b:72:f3:c9:c1:f5:a8:74:
15:d2:04:9c:c3:16:81:33:14:95:07:bf:29:75:1f:
bb:35:bb:ea:e2:9a:95:42:10:07:d3:28:2b:59:e4:
8f:e1:74:48:28:b7:a0:46:82:3f:21:fa:f3:39:29:
9f:c7:bf:ad:f3:22:2c:28:3d:94:36:ed:30:14:03:
50:24:97:72:31:31:2b:38:8e:a6:db:e3:41:c2:72:
78:c7:81:2c:72:e3:21:20:f3:62:ac:1c:bf:ee:68:
8c:cd:80:54:c8:70:0b:5e:50:3b:04:1c:f9:3d:24:
dc:f7:fc:c8:8a:41:16:43:11:26:d8:05:d5:6f:88:
ac:96:dc:ed:da:a2:f5:81:d4:8e:e6:08:37:2f:98:
9b:21:56:0d:28:8a:e3:13:ee:1f:a0:2f:93:3c:9f:
2f:0a:9b:a9:1e:f4:c0:92:2d:9f:a1:56:cd:c9:2b:
ac:be:2e:97:01:07:cc:e2:b0:3f:45:65:ba:55:d0:
1f:10:3d:aa:a0:dc:10:98:6f:f5:4e:07:82:10:6c:
a6:ab:d3:6d:b7:08:82:18:81:80:c6:41:01:bc:bf:
1a:a3:87:ee:a3:fb:5f:8c:c7:bb:8a:b8:d0:8f:2f:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:CF:CD:A9:3F:2E:F9:3B:3A:07:5E:49:7D:11:5E:1A:AD:E3:F7
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7b:13:b5:86:88:24:ce:23:e6:d3:34:3a:16:3e:a0:43:da:
bd:0d:b4:05:c1:7c:5c:66:1d:2a:11:fa:bf:63:e9:17:90:91:
cd:c6:ea:a4:20:62:45:97:da:0a:48:4f:48:99:36:0d:3e:34:
3f:ef:9d:b4:f2:93:84:38:18:20:15:bf:cc:ea:87:d4:2b:d4:
99:4b:48:cc:d2:ae:f3:0a:91:8a:1b:b6:fe:54:02:07:e2:b8:
8b:32:b9:ae:34:81:cf:e6:a9:a2:95:dd:f4:8d:e6:58:76:98:
a5:e8:9d:18:6b:9f:c3:dc:ea:f3:9e:fa:98:4e:2b:10:73:f8:
2d:81:88:58:a2:73:d7:c5:16:7e:b0:f9:4a:7e:b2:de:16:6c:
94:31:70:0f:c9:c4:16:06:25:df:5e:f5:7b:d8:ad:94:b2:f9:
58:af:db:f5:97:f6:61:6b:ad:5f:50:6d:68:fa:cc:9d:29:1b:
87:c4:01:0c:4d:63:62:99:29:58:eb:a0:16:ac:39:ae:19:e2:
5a:2b:ea:22:46:03:e4:72:2f:02:ce:c7:4b:13:89:c0:00:b8:
26:c0:e5:31:5c:15:28:68:9c:41:7f:5d:21:47:88:92:bc:e4:
97:5f:86:38:9f:f3:98:c1:71:14:6b:c6:0d:ef:b1:a1:66:fa:
10:6e:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:56:29 2025 by rpki-client