This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: +Jf3bREEUsIAxPy4a1yqxFAVptKzDOQ4+2hj0vGmJAE=
Subject key identifier: 0E:CC:55:61:60:A3:F3:E6:67:5B:37:9A:62:1D:D9:AE:86:83:E7:19
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019B5B9B443EA2D27054B170B0868BE1CE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0573
Signing time: Fri 26 Dec 2025 17:01:00 +0000
Manifest this update: Fri 26 Dec 2025 17:01:00 +0000
Manifest next update: Sat 27 Dec 2025 17:01:00 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: 0PAj19cp8obfoUSKsEK8casJYcs/OD5Z5gOfA2k3tbE=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5b:9b:44:3e:a2:d2:70:54:b1:70:b0:86:8b:e1:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Dec 26 17:01:00 2025 GMT
Not After : Dec 27 17:01:00 2025 GMT
Subject: CN=0ecc556160a3f3e6675b379a621dd9ae8683e719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:da:f6:01:ab:f5:b5:01:35:c8:4f:02:1a:
ae:c7:c7:40:e3:9f:70:7e:ca:76:7c:0b:1a:45:7b:
d5:ce:7e:31:fc:0a:b5:8c:f8:d5:4f:33:19:5a:18:
52:3d:54:2e:1a:a0:d4:4f:89:14:4f:62:09:5c:58:
ab:45:14:f5:74:06:aa:8d:55:58:c7:6b:85:2a:1d:
be:ed:f7:e7:43:e4:88:23:b9:c5:c1:38:7c:91:b8:
74:4d:9d:d0:b9:e7:f2:f8:8c:8b:c3:d5:84:c1:14:
87:e5:b5:ed:46:67:eb:22:86:a9:21:bf:94:fb:83:
7a:5c:d0:c0:85:4a:52:d4:6d:82:d2:41:ca:b8:55:
76:7d:e5:90:76:ec:a1:c3:2f:b7:c1:a8:f5:a0:4a:
70:29:9d:e5:06:c7:3b:10:4e:4d:c7:52:de:b9:d4:
88:a0:59:45:7f:f6:6b:e6:8c:e2:88:f4:ca:52:94:
85:3f:16:b3:5d:08:dc:67:c4:c7:a8:bd:f2:12:96:
e5:d3:6f:76:a3:53:ac:9d:0e:b6:17:bf:60:a3:48:
9c:3c:d4:bd:45:6d:fe:65:5a:a9:48:3c:5f:24:10:
31:ad:fd:43:0e:85:83:5d:f4:e0:7d:e2:31:98:9e:
bb:ad:13:6e:95:31:d9:e4:2d:50:6a:5d:88:ed:f5:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CC:55:61:60:A3:F3:E6:67:5B:37:9A:62:1D:D9:AE:86:83:E7:19
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:6a:3c:30:49:61:80:1c:39:62:84:3f:66:5d:cd:b0:7f:
e6:a5:25:50:78:6a:24:09:37:66:18:50:3d:f2:32:b5:54:51:
93:ad:b3:8c:c2:19:b4:74:8c:28:c5:b9:76:83:f4:da:b7:71:
42:66:34:df:cc:4c:83:dd:b2:3a:19:67:4f:c4:c7:0e:b3:8a:
b9:09:4f:1c:ab:a1:12:22:ee:79:b4:25:ad:f0:37:6c:ae:92:
6e:f9:e1:21:2c:dd:cb:c0:1f:94:3c:25:ec:23:88:3c:9c:ae:
cd:84:8a:a4:0b:65:3a:be:67:af:a6:b4:07:dc:92:85:a0:91:
90:9d:46:a8:90:36:d6:6a:3c:60:1e:40:12:f9:db:7e:47:60:
ba:ae:ef:1a:fa:73:6b:2b:82:8f:38:be:ff:c0:c8:b3:65:7e:
02:a0:eb:05:86:ba:4c:73:5c:19:9f:90:a7:d3:29:75:3d:e3:
b4:94:4a:0f:b1:38:b4:84:26:5a:68:84:29:ef:55:b3:01:07:
e0:d9:fb:37:a7:8a:fa:0e:c4:0f:03:7a:93:17:0a:89:0e:5a:
ee:05:fb:38:4d:7b:99:34:da:3c:22:9a:c6:c7:93:90:14:a6:
f8:d6:aa:88:77:3c:b3:17:3c:48:90:40:aa:c5:fd:b5:68:18:
93:f1:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 22:49:37 2025 by rpki-client