This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: Y+jQlykGGeRH2gr+16RP5Mo6XJyd4pIC6t0ItvwmJQM=
Subject key identifier: 0B:D2:41:79:3F:53:3D:F6:35:25:BB:B6:E1:69:BB:93:7B:47:FD:7F
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019B2EF934F9C64C827C1FA1FA515EB7BCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 178D
Signing time: Thu 18 Dec 2025 01:00:42 +0000
Manifest this update: Thu 18 Dec 2025 01:00:42 +0000
Manifest next update: Fri 19 Dec 2025 01:00:42 +0000
Files and hashes: 1: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (hash: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=)
2: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=)
3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: 6SfP59VIwtzhTqjqn1hGqeBvvgZvAgHTpfaMaa9Ocb8=)
5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:f9:34:f9:c6:4c:82:7c:1f:a1:fa:51:5e:b7:bc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Dec 18 01:00:42 2025 GMT
Not After : Dec 19 01:00:42 2025 GMT
Subject: CN=0bd241793f533df63525bbb6e169bb937b47fd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:48:08:4a:fc:c1:48:b6:e2:0f:c7:c4:c0:
74:fc:1c:39:20:96:6c:28:fa:c0:13:83:51:dd:13:
37:a5:95:8d:ae:d5:3c:ef:ad:eb:20:76:b9:f8:2e:
fa:18:f1:89:b2:10:e0:54:da:28:0a:fa:6a:2f:30:
8e:61:ef:49:83:7e:ab:d2:4f:27:90:6c:80:d4:09:
67:0e:dc:74:20:88:63:4a:d9:a2:09:24:83:02:9c:
77:0a:af:2b:14:c5:e6:bd:09:cc:2e:38:c7:93:8e:
2b:cb:e3:c4:e5:9c:8e:46:89:32:aa:c3:8c:80:68:
f1:36:b6:12:5b:f3:4f:ef:d7:49:bd:c6:68:9a:11:
6e:d9:14:48:45:49:02:3c:96:15:96:c1:21:78:8e:
f9:5a:a6:07:0a:4a:31:94:0f:b1:ff:1c:1f:0f:48:
7e:b1:a4:7f:a6:3b:1e:55:34:c7:2b:1f:eb:e3:74:
21:a5:0c:a2:59:93:ce:22:f6:49:f5:11:02:29:c5:
ad:c3:64:a3:28:22:43:a5:87:91:b0:6d:3e:e0:2d:
d0:9c:e9:14:2d:e9:cb:f5:e6:29:e3:a9:85:5e:6f:
7c:4f:bc:d0:46:25:3b:94:ae:55:eb:e8:44:f1:73:
4a:ac:74:3a:3c:f1:15:12:0a:22:24:28:1f:1c:30:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:41:79:3F:53:3D:F6:35:25:BB:B6:E1:69:BB:93:7B:47:FD:7F
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f5:e9:c3:31:45:a3:5a:91:2c:f7:b3:bd:77:c5:db:a9:f8:
0c:ff:dc:14:b0:27:3f:f3:98:a7:0e:85:54:1b:8e:6e:d8:c9:
67:2c:fe:8f:6d:84:4f:a9:bf:7d:4f:c0:3c:fb:77:c6:4f:34:
48:fd:08:b7:da:a2:6c:ce:68:d4:68:d2:91:39:94:1f:63:fe:
6b:8b:c7:bb:49:36:e4:c9:89:3b:13:b7:12:26:1e:00:5a:32:
6b:0c:73:c3:4e:dd:a0:d3:bc:c2:5b:d3:b1:c1:95:43:09:16:
3f:8d:68:76:a2:b0:1c:04:13:b3:17:fc:47:11:c0:63:34:7d:
36:d2:fc:ac:7d:d0:90:01:50:ef:28:d8:5c:f2:04:27:47:63:
5e:b5:47:c5:e0:a5:97:30:3c:85:57:3d:18:23:13:73:2d:32:
ff:71:ee:ad:75:3c:4b:a1:fe:82:8d:a7:94:73:0c:54:ec:12:
72:6e:0c:77:25:f0:de:b5:15:4a:7c:10:75:c9:e1:24:34:82:
a6:e0:70:4f:f8:98:b4:df:ba:8c:28:aa:66:ff:48:16:7f:e6:
8c:de:9e:f8:bd:f8:67:c7:03:38:cd:fa:50:fb:fc:d0:06:0c:
b3:10:93:cf:c5:20:c5:c4:19:fb:05:86:14:76:0e:1e:87:f6:
ba:60:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:27:14 2025 by rpki-client