This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier: hX1GXSZZS1Dq5NumJzxNHK2sHPZnHRC55JlnD5mlcB0=
Subject key identifier: D4:69:B4:49:CE:AC:87:D5:5D:42:D0:F6:0A:B8:A0:9E:24:D6:E4:73
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 019B1125FE8F5E00BD86F4C71BF38531202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number: 08C8
Signing time: Fri 12 Dec 2025 06:01:01 +0000
Manifest this update: Fri 12 Dec 2025 06:01:01 +0000
Manifest next update: Sat 13 Dec 2025 06:01:01 +0000
Files and hashes: 1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: 08dpqm0H+UnWs2ux3Q61aB9R3yMMVwVt6ZovGOPdnWI=)
5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:25:fe:8f:5e:00:bd:86:f4:c7:1b:f3:85:31:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Dec 12 06:01:01 2025 GMT
Not After : Dec 13 06:01:01 2025 GMT
Subject: CN=d469b449ceac87d55d42d0f60ab8a09e24d6e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:ba:21:e1:2c:e7:7b:48:af:f0:35:4b:6f:
40:87:22:b2:45:bf:1b:99:60:af:dd:47:cd:00:d5:
39:3e:f6:9d:03:da:eb:19:6e:c3:e9:ab:08:fa:e4:
14:01:34:82:46:95:f5:08:71:1d:62:d0:ba:d8:77:
f5:a2:02:06:c2:98:11:fa:59:54:f6:1b:b2:62:95:
43:8b:d6:3c:5e:36:2d:89:fa:0a:17:a5:39:a0:74:
8d:ef:4e:37:f0:50:42:ee:60:28:61:db:86:92:3a:
ff:a1:00:1f:7c:27:e4:a5:5d:78:0e:f8:67:b8:29:
9a:db:54:6f:08:1a:59:7d:f4:f2:09:fb:c3:7e:99:
4a:ae:1b:6d:ac:6c:09:d3:40:d6:65:65:ae:0a:f8:
9c:68:33:0f:bd:c7:d0:2d:4a:bb:31:e7:be:ae:9e:
6e:ba:22:d1:4e:ca:ab:a7:f7:1f:42:3d:d3:db:5d:
d2:fe:9f:71:2d:3e:18:a3:63:a1:81:8e:a6:4b:3b:
9c:d8:68:1d:35:ab:38:13:d3:6f:14:54:62:9a:a5:
90:cf:51:09:9e:3c:3b:e1:22:cf:4c:aa:d9:4e:ad:
07:f3:96:af:ab:78:ea:e0:c1:93:0b:fc:a9:57:6a:
46:50:f1:00:b7:ea:99:c7:34:38:c9:1b:f6:85:ec:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:B4:49:CE:AC:87:D5:5D:42:D0:F6:0A:B8:A0:9E:24:D6:E4:73
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8e:1f:48:10:45:62:c4:cf:38:d0:c4:02:f8:a4:00:e4:02:
72:ef:41:e6:33:04:6c:e0:60:2d:6b:07:72:7b:42:96:28:6f:
2a:9d:61:27:78:27:bd:18:c7:c6:eb:60:4e:6f:1d:9b:e0:57:
4e:11:f3:07:e5:09:97:d3:a9:2f:79:37:20:56:65:50:c1:a4:
49:9d:0a:db:a2:e8:61:12:f7:4d:22:0a:f1:da:5f:44:23:37:
8e:ce:b4:31:b9:38:05:e5:18:8b:5b:4e:67:73:67:20:d4:79:
59:65:5c:13:b1:8c:37:3a:27:75:8b:a2:1d:fb:3e:89:fe:4e:
f0:d8:a0:1a:08:34:fc:1b:c8:2d:8f:6a:4c:1d:f4:1f:7f:18:
9e:77:34:e4:52:92:ab:d3:c9:cc:5d:3f:0e:7c:22:0d:05:aa:
fd:cc:14:85:4c:ac:52:24:09:3b:7f:c3:8c:8d:a4:dc:1c:86:
6d:94:69:ac:89:12:4a:a4:4e:0c:7f:53:19:1e:45:ec:77:be:
17:1a:ec:17:ac:e2:19:3f:31:5c:5b:41:3e:2b:65:b3:d9:ee:
2e:8a:6c:a8:75:e8:ba:90:a6:8d:b4:98:2a:00:91:1c:aa:13:
91:24:69:82:c4:3a:eb:26:54:3f:0e:77:85:db:72:20:76:58:
25:97:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:27:43 2025 by rpki-client