This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File: g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier: E+LDMQC6dkT8JVyDDxFYBL8ipiLJKG4r+p9ZehlkIfY=
Subject key identifier: 47:C6:7A:D1:60:C7:93:2C:92:02:24:F7:7C:04:EE:47:97:E1:89:A4
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019B3BD90A7F5458A906A3DBF32A1AF89A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number: 0ED7
Signing time: Sat 20 Dec 2025 13:00:38 +0000
Manifest this update: Sat 20 Dec 2025 13:00:38 +0000
Manifest next update: Sun 21 Dec 2025 13:00:38 +0000
Files and hashes: 1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: MStKpcE9bJtloDNA7UNgdK5eqYJhBXR8fT+KnPli5u4=)
6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:0a:7f:54:58:a9:06:a3:db:f3:2a:1a:f8:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Dec 20 13:00:38 2025 GMT
Not After : Dec 21 13:00:38 2025 GMT
Subject: CN=47c67ad160c7932c920224f77c04ee4797e189a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:a7:7a:f6:11:8d:10:bd:6e:de:b2:d8:67:
78:44:67:16:14:6c:d6:e3:da:c4:a9:81:62:94:5e:
29:60:ba:2e:e5:7d:53:3a:db:bf:15:c7:80:05:c7:
99:76:98:39:80:18:dd:a5:66:bd:8a:05:0a:df:62:
05:17:58:29:d8:04:8f:75:41:ad:90:cf:86:b4:67:
c1:37:61:f6:55:f4:5c:91:7e:61:25:95:fa:0e:2b:
32:99:9e:70:c6:36:2c:d8:fd:1a:a2:a0:22:cc:61:
65:54:56:66:c1:ae:63:d4:42:7f:04:f3:e1:55:c0:
20:25:f6:99:a0:f7:f2:2e:f9:42:38:72:45:c9:89:
5d:2e:df:58:aa:b9:04:34:31:f8:23:3b:b8:b4:60:
d4:da:04:6d:f0:5a:67:40:5d:55:2c:04:2c:1e:2c:
2e:eb:60:22:53:f8:c0:80:97:68:00:06:e4:79:6c:
66:f9:e2:ac:70:35:d4:5e:1a:35:c0:cc:ea:f7:12:
e4:e0:cf:27:68:64:3e:10:36:0b:5d:d2:8b:3f:20:
cd:e4:09:3a:1b:c0:f6:23:59:13:f2:a8:27:27:88:
88:e1:5d:b5:fe:a0:08:47:67:0e:c7:b4:1b:89:a8:
c7:73:b3:9c:19:98:0e:c8:c9:81:1f:2d:24:70:c0:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:7A:D1:60:C7:93:2C:92:02:24:F7:7C:04:EE:47:97:E1:89:A4
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:cd:74:b7:8f:f5:04:77:b3:10:ba:60:77:48:86:27:0a:
c8:70:d4:89:ee:f8:3f:9b:4b:6b:cc:ca:d5:03:5b:82:10:ab:
88:fe:12:68:d3:c2:88:38:2b:4d:03:83:b7:d0:00:c2:e6:e2:
a6:ec:8c:86:a2:34:08:7e:0e:ae:d2:f6:3f:14:23:67:63:34:
4c:18:d0:61:19:8b:db:3c:50:00:65:47:59:55:41:23:3a:71:
1a:7f:14:f6:5b:4d:14:6b:d8:4d:2e:a8:f2:e7:93:7f:94:fc:
da:71:4a:bb:91:06:f2:06:87:fb:48:9e:0a:c9:7a:39:1c:ec:
c7:df:89:0c:01:00:58:5e:2d:bb:85:96:7e:65:46:ff:c9:9e:
47:17:6c:bd:cc:18:8b:41:73:2a:e2:70:4b:86:dc:1e:51:06:
18:08:27:0b:d7:29:db:4a:a6:c7:e5:67:6e:22:25:93:5b:ae:
9c:c1:67:61:a5:3a:a0:f7:1d:b6:3a:80:0c:cd:88:06:c2:85:
d6:2f:1c:b2:9c:de:90:be:fa:f7:43:3d:0e:a8:a4:c9:66:08:
98:f8:7a:66:b5:9d:ac:86:20:d4:26:4b:fa:dd:b4:d4:ae:72:
7c:db:31:a0:07:72:5e:5e:f2:56:16:84:e3:80:28:9b:58:c4:
24:c3:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:21:10 2025 by rpki-client