This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: eVhhr/FTP3L9Fejjc2hQ/5nndWEt6UHG9bQRle7lHYw=
Subject key identifier: DB:65:35:94:59:1C:C5:7E:BA:4E:C5:62:94:7F:4A:4F:95:AC:67:1D
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019B2098D7E010EF1871AE113916B40C7499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 170D
Signing time: Mon 15 Dec 2025 06:00:46 +0000
Manifest this update: Mon 15 Dec 2025 06:00:46 +0000
Manifest next update: Tue 16 Dec 2025 06:00:46 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: IQx5cZEoNQhkj1olWgtlKKX6moqrFIBkeRW8r8x1mjs=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:20:98:d7:e0:10:ef:18:71:ae:11:39:16:b4:0c:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Dec 15 06:00:46 2025 GMT
Not After : Dec 16 06:00:46 2025 GMT
Subject: CN=db653594591cc57eba4ec562947f4a4f95ac671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:57:20:17:d6:b5:57:12:0e:1e:56:fe:35:
99:9e:3a:b3:33:59:43:b9:60:81:65:ce:97:49:1a:
f6:17:90:85:c2:2c:49:b0:d6:3c:79:75:5b:0c:64:
c3:03:da:a3:f6:91:a3:87:c3:5e:81:6e:87:47:c5:
93:7c:d9:ee:3e:ba:1a:ae:26:44:44:88:d7:cc:d7:
b7:a5:f1:92:8c:79:7b:f8:dd:f0:23:62:7d:43:9d:
3b:c3:02:ba:da:a0:bc:c7:99:e0:05:3c:2d:31:c2:
03:1d:02:32:02:d9:9b:05:2a:74:a1:f5:01:ec:57:
10:3f:ff:a2:be:c8:ec:ab:fe:1b:45:7f:e3:26:5b:
93:f7:36:49:d5:0a:d3:1d:c6:e2:e1:eb:d0:ff:22:
61:bd:2a:65:aa:28:ad:3f:37:9d:7f:69:c6:5b:71:
28:ab:4f:be:c5:bb:a6:65:88:00:8b:31:e1:3a:f2:
a2:f5:4c:ff:30:bd:50:99:0d:fd:16:ac:cd:75:47:
a6:04:b0:03:61:37:ff:4f:35:5d:83:18:2b:c1:4b:
38:a0:d2:f7:23:87:b9:84:ca:a0:ca:3a:67:2e:d7:
3c:fe:1f:92:5f:39:98:3a:94:ad:67:5f:45:b9:48:
5f:6d:7a:61:85:87:ea:0b:d5:45:e4:9e:23:88:c6:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:35:94:59:1C:C5:7E:BA:4E:C5:62:94:7F:4A:4F:95:AC:67:1D
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:51:d6:e4:d8:76:a8:e5:71:bd:52:d8:2d:fc:4f:d4:06:b5:
7c:5b:a2:4a:28:8c:cb:d8:64:23:55:67:d8:84:03:a4:27:cd:
8a:0f:ed:63:d2:3f:56:9a:a1:d8:60:4c:10:79:ae:5e:20:7d:
1a:8f:a9:12:6d:65:b9:5e:63:cf:22:66:9b:ea:ad:56:be:80:
f7:7c:1b:6c:d9:5b:10:c3:8c:f0:a3:fc:6b:e7:a2:fe:0e:c1:
b0:99:88:33:99:10:8b:0e:f3:64:0c:3b:b5:c2:07:77:9e:45:
8b:9b:94:5c:f3:f6:15:ff:c1:a1:b0:03:f4:9e:35:53:c2:21:
d5:c0:5c:94:ef:eb:77:9d:34:7a:f8:34:da:b6:b6:fb:4e:3f:
f1:27:24:34:a1:67:d7:4b:b6:31:ba:2f:b9:14:ec:57:b5:47:
67:73:3e:da:6a:f2:f7:96:6c:65:a5:84:63:73:8e:e9:b9:80:
7a:c5:f1:d9:fa:b1:4b:62:6b:7f:e8:51:45:ae:62:44:5b:6b:
21:aa:6a:cf:05:e4:27:ad:96:ed:cc:17:58:8a:a3:21:67:d7:
af:98:44:19:7b:09:c3:ed:fa:53:71:66:ac:21:79:98:98:e6:
a7:b4:02:2d:d8:10:36:ed:12:d9:2f:bb:fd:cb:85:31:73:11:
27:3a:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:02:46 2025 by rpki-client