This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: Q8NNcLxL77QYn8iZmpzic2j4y5XYA6hv54FxSksqSbY=
Subject key identifier: 87:84:18:1F:12:49:11:74:E3:A1:57:38:58:30:7C:EC:07:B3:FE:14
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019B3A58915EC422AF4E1C332D65D9EA2BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 1093
Signing time: Sat 20 Dec 2025 06:00:41 +0000
Manifest this update: Sat 20 Dec 2025 06:00:41 +0000
Manifest next update: Sun 21 Dec 2025 06:00:41 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: vLP8/TncHZI7Jwae5B0ph8MrKd6kto3WoXDtp4j5wDY=)
2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
5: Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa (hash: Jg/jOB8cB9GuZDvZAaZXrBbzDRGk3pxwKEfz4X5Tl/0=)
6: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
7: xIeAXdfn38yQDbyF7veotWoFZu0.roa (hash: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8=)
8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:58:91:5e:c4:22:af:4e:1c:33:2d:65:d9:ea:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Dec 20 06:00:41 2025 GMT
Not After : Dec 21 06:00:41 2025 GMT
Subject: CN=8784181f12491174e3a1573858307cec07b3fe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:d8:8e:8b:8d:69:56:b2:c4:b4:11:ea:e3:
b9:6c:9f:80:3b:f2:8a:6a:58:b7:94:4d:c2:bf:74:
75:dd:8b:de:a3:ea:9c:d6:10:bc:a4:cc:c5:28:dc:
01:a9:09:d6:55:99:69:ce:4f:a6:9e:3f:23:d6:df:
8a:8c:af:69:86:ae:dc:7a:28:d6:3e:31:c9:53:3c:
3c:bb:c0:49:40:80:6d:6a:2d:fe:0e:e4:f8:ef:05:
75:04:5a:76:31:e3:92:fa:bb:a2:59:15:af:46:4e:
b0:d7:1e:b8:fa:f4:c5:79:a1:18:37:d0:4f:2e:06:
0e:ac:57:35:cb:b2:8d:58:7a:1c:14:b4:3f:40:73:
19:92:45:29:2e:84:95:fc:5c:36:01:2f:00:17:a9:
3b:9e:41:fa:89:64:35:4c:34:1e:db:19:a1:0a:11:
7a:18:fe:2d:ea:5e:79:f3:7b:2f:93:42:06:7b:77:
15:b3:ad:2e:be:ac:74:35:9d:c2:5c:e9:38:b1:58:
33:76:09:e0:9f:d6:f7:f9:eb:ed:21:fb:26:5c:7c:
33:32:e6:c4:16:69:84:32:fb:72:10:fe:13:4e:67:
b6:62:61:ec:5c:53:6d:61:6f:a1:7a:dd:93:aa:e4:
1c:2f:42:f6:66:90:1c:e2:6e:7f:ad:b9:fa:5a:f3:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:18:1F:12:49:11:74:E3:A1:57:38:58:30:7C:EC:07:B3:FE:14
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:1d:f9:ae:6b:ca:60:d2:56:ec:68:f9:a7:8c:ab:9a:09:
96:8d:18:22:0a:1e:dc:79:30:4c:60:dc:d3:ed:bb:ae:7e:ec:
64:3e:47:96:89:11:b4:9d:de:77:16:62:98:d7:7e:00:d9:00:
43:c1:fb:4b:b0:bf:0b:36:0a:8e:48:66:73:f6:77:7a:e1:2b:
66:da:b6:1f:de:f7:06:fd:38:75:e4:cc:d5:47:97:a9:15:45:
94:8c:5d:c1:aa:71:e6:a0:fa:ea:c5:86:bc:1b:16:24:1c:87:
72:db:c9:9d:d0:1f:f8:02:a7:d7:4c:fb:01:19:32:e1:09:56:
2e:76:aa:2e:94:9d:8a:6c:ad:3d:0f:b2:27:ea:e8:c7:c6:ea:
c3:74:53:cd:59:a2:83:af:c7:af:47:7a:5c:20:82:90:d5:dc:
42:2a:46:37:81:13:d1:3a:ff:53:10:9d:c6:f3:53:26:a7:7c:
98:d0:5a:78:6e:ce:09:24:34:6b:62:ac:b1:d6:5f:e5:e8:0c:
09:ec:fc:f4:b3:5d:52:18:da:63:ad:cf:5b:c9:80:06:44:dd:
0a:25:24:f4:13:89:9b:0f:3b:c2:f5:94:04:8e:9f:38:12:13:
fe:93:7c:6e:fe:f4:33:43:e3:29:00:94:26:93:0a:60:b2:a0:
7f:c8:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:41:02 2025 by rpki-client