This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: NNlAXKu8RqE120CqhF6wHxy6u1Qe1xwcOiEgX2xXKHQ=
Subject key identifier: 35:16:E4:DE:7C:39:87:E6:16:39:2D:6A:20:5F:2B:E0:64:7F:7F:C0
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019AEE99DA9F6D8C80D659E84AFC26A0477B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 0E
Signing time: Fri 05 Dec 2025 13:00:51 +0000
Manifest this update: Fri 05 Dec 2025 13:00:51 +0000
Manifest next update: Sat 06 Dec 2025 13:00:51 +0000
Files and hashes: 1: 5zKpxo06ZotmTkgOl7qLdtQlPF8.roa (hash: AacG7xxNKndGGBdKjipHCKUNNm/+m4yG1PsJKPfONKw=)
2: 98i3Sl-SVX0lpDc75YAMSzat4vY.roa (hash: 9lFUyk5c07EpRsIY8lyUNHmS+FtMIqyYvJKJxjtLoKI=)
3: FuNQyguetL9HUiuWXSYdXghLjdI.roa (hash: mnRKzXCVNJHAPGVrHNh8Q+nK1Fo7PynOoyKcNt2f8Cc=)
4: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: VN/Q7HHSdV9wXlKKb5Q85a77GaKJ94tf5/ultq+k/i4=)
5: PKUvfHbMyWxol9e6o_KImjFDt1M.roa (hash: Uw1mXrwQRaqUc4sj0hqORTjZRxV0jUwss0xyBFHdDfA=)
6: YlVsrGk2FZaYHg9DL_b6T31F-PE.roa (hash: 6ghnnb7YLDy1rZ3UtZpJiI6PWk771A2KY0/uSf7gTno=)
7: _RelMXyqVvatSoVuVmnYjAhfL1g.roa (hash: 9i79ip05V8wfMGU8MmuJQC48JRJKFZbVh5oydWx0TJQ=)
8: qThv5Dn9-qqsuNIICPACaTpfi2Y.roa (hash: MxnlHH8jSB1lnRDj8hbwISSVcoLyKx3BOa7K+Kz+tQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ee:99:da:9f:6d:8c:80:d6:59:e8:4a:fc:26:a0:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Dec 5 13:00:51 2025 GMT
Not After : Dec 6 13:00:51 2025 GMT
Subject: CN=3516e4de7c3987e616392d6a205f2be0647f7fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:1d:1f:d2:e3:4e:b9:b5:e6:3b:69:1d:5b:
e4:35:1b:fa:4f:bb:22:4a:4d:77:1e:0b:71:6b:16:
54:65:3a:9a:f9:64:29:63:f3:da:0c:ca:97:b1:db:
19:e6:e9:dd:a0:00:1b:7e:a3:d9:77:17:02:62:43:
ff:df:64:35:c7:92:ea:e8:6f:7d:30:cd:a9:f9:fd:
cf:ce:47:fe:87:af:52:61:4d:1e:16:96:1b:99:01:
ce:7b:75:82:bd:50:a5:ed:df:02:f4:2a:6c:49:16:
6f:0e:f1:d4:83:41:b8:1b:64:ee:5d:2f:a2:82:16:
82:c0:40:e4:4f:65:9e:22:af:39:1e:f7:6a:ac:fa:
ce:c5:50:37:e6:da:4e:51:a5:fb:8d:10:35:2f:e1:
1c:2e:05:9e:52:cf:9c:5c:e4:ca:96:2a:7c:17:41:
2c:d2:4a:26:0d:bd:b5:06:74:62:ec:5b:33:cc:1d:
63:20:2c:4f:91:26:c0:a5:2b:30:62:c8:98:6e:e1:
77:a0:2b:e0:8b:a9:2a:27:02:13:01:ee:55:6c:94:
fb:d4:f5:c7:21:0f:3c:3d:ed:f9:c4:37:ff:eb:67:
ae:b9:a0:3c:9f:61:a1:63:6d:a7:79:47:0c:25:12:
78:65:e1:cd:49:bd:33:e7:58:dd:01:88:d7:94:83:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:E4:DE:7C:39:87:E6:16:39:2D:6A:20:5F:2B:E0:64:7F:7F:C0
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:60:19:10:39:6d:3f:77:8f:f0:91:16:2c:6e:a0:c3:fb:f8:
a6:6e:42:a9:c8:19:b9:1b:30:20:ac:3e:63:79:0b:d9:24:6f:
d4:9c:20:64:a5:7d:12:8b:65:27:2c:39:52:f5:4c:de:35:2c:
17:5e:33:3a:27:1a:ea:12:f4:44:09:9d:0f:84:4b:fb:aa:28:
bb:ee:8a:36:c9:36:c3:76:e6:87:af:a1:ba:e7:e7:0f:6d:fe:
93:62:8b:91:4a:08:da:98:f9:fb:0f:6a:9a:8e:2b:b5:b9:2b:
29:56:b4:f1:fa:a2:d1:2a:e3:5c:9e:c2:06:6c:f8:a1:95:0e:
06:8d:db:52:63:94:59:a4:24:e0:32:c0:5c:31:1b:af:77:5d:
a1:dd:31:ac:f8:b6:9e:c5:db:59:bf:8f:70:cd:08:d9:06:77:
4f:d8:fd:59:35:38:78:ef:20:2d:4c:11:48:cf:3a:5e:e6:ab:
18:ab:62:46:13:76:b5:09:b5:ed:2d:da:d2:f6:09:15:8a:03:
9f:32:4f:ec:29:05:44:51:00:2a:23:e0:37:90:d3:16:95:c0:
c2:50:f3:e3:96:f2:8c:22:2c:d3:29:4c:54:77:90:11:e0:cb:
6f:ce:f6:5a:70:a3:41:c6:0a:93:39:e4:fd:1f:7a:1d:1b:e5:
c1:09:de:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrumdqfbYyA1lnoSvwmoEd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz
Mjc1ZGYwHhcNMjUxMjA1MTMwMDUxWhcNMjUxMjA2MTMwMDUxWjAzMTEwLwYDVQQD
EygzNTE2ZTRkZTdjMzk4N2U2MTYzOTJkNmEyMDVmMmJlMDY0N2Y3ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptAdH9LjTrm15jtpHVvkNRv6T7si
Sk13HgtxaxZUZTqa+WQpY/PaDMqXsdsZ5undoAAbfqPZdxcCYkP/32Q1x5Lq6G99
MM2p+f3Pzkf+h69SYU0eFpYbmQHOe3WCvVCl7d8C9CpsSRZvDvHUg0G4G2TuXS+i
ghaCwEDkT2WeIq85HvdqrPrOxVA35tpOUaX7jRA1L+EcLgWeUs+cXOTKlip8F0Es
0komDb21BnRi7FszzB1jICxPkSbApSswYsiYbuF3oCvgi6kqJwITAe5VbJT71PXH
IQ88Pe35xDf/62euuaA8n2GhY22neUcMJRJ4ZeHNSb0z51jdAYjXlINW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUW5N58OYfmFjktaiBfK+Bkf3/AMB8GA1UdIwQY
MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt
ZDFkNmRlYTk4NzkwLzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw
LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2AZEDlt
P3eP8JEWLG6gw/v4pm5CqcgZuRswIKw+Y3kL2SRv1JwgZKV9EotlJyw5UvVM3jUs
F14zOica6hL0RAmdD4RL+6oou+6KNsk2w3bmh6+huufnD23+k2KLkUoI2pj5+w9q
mo4rtbkrKVa08fqi0SrjXJ7CBmz4oZUOBo3bUmOUWaQk4DLAXDEbr3ddod0xrPi2
nsXbWb+PcM0I2QZ3T9j9WTU4eO8gLUwRSM86XuarGKtiRhN2tQm17S3a0vYJFYoD
nzJP7CkFRFEAKiPgN5DTFpXAwlDz45byjCIs0ylMVHeQEeDLb872WnCjQcYKkznk
/R96HRvlwQne8w==
-----END CERTIFICATE-----
Generated at Fri Dec 5 16:52:08 2025 by rpki-client