This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File: gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier: fUjWIr3ipw2Qv+Axzf7t/2ANBnavWsonlHLm7TOwHJE=
Subject key identifier: BB:92:B5:91:72:2E:2F:D0:50:5C:D1:11:3D:F2:1E:6B:46:A0:54:30
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer: /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial: 019B51BD41DA85149EBC39C81A1B60A1812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number: 0D84
Signing time: Wed 24 Dec 2025 19:01:56 +0000
Manifest this update: Wed 24 Dec 2025 19:01:56 +0000
Manifest next update: Thu 25 Dec 2025 19:01:56 +0000
Files and hashes: 1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: OcrPeEXWLXO8bs1HHnS/onsEOsvtEx4wlG1hHbiWhuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:bd:41:da:85:14:9e:bc:39:c8:1a:1b:60:a1:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Validity
Not Before: Dec 24 19:01:56 2025 GMT
Not After : Dec 25 19:01:56 2025 GMT
Subject: CN=bb92b591722e2fd0505cd1113df21e6b46a05430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:f9:d7:52:be:28:d1:66:65:40:10:96:53:
55:bb:e4:98:2a:1c:7c:cd:76:c9:6b:7f:18:30:9f:
d9:86:55:ca:c7:8e:4a:c9:e8:6d:21:c9:cd:53:23:
03:e4:90:46:95:f4:6a:17:5f:71:ba:09:75:54:76:
f6:77:b4:20:28:4e:16:33:bc:bc:31:e1:f5:1b:80:
07:82:78:31:63:c5:47:b9:aa:b3:5d:86:48:9c:94:
ec:81:35:f8:79:60:43:af:8d:78:76:42:c5:f7:1e:
a6:93:43:27:e6:a1:40:0e:18:2f:8e:36:c6:1e:6c:
d0:fc:24:44:a9:3b:19:21:6a:0f:ee:fa:9d:28:60:
34:5a:37:25:6f:09:ab:21:02:b4:7a:a5:af:8f:e5:
1c:1d:56:20:08:67:41:49:d8:69:77:1a:64:e0:11:
bb:e8:aa:ee:c8:b4:8f:d4:fe:f7:7d:66:32:f8:59:
4b:e1:7b:59:2d:75:a4:a2:bd:ca:11:a5:23:a5:9e:
4f:6a:32:dc:60:2d:a5:18:6e:7a:01:77:39:05:12:
ce:f4:43:68:7e:56:2a:54:f2:82:4c:1b:dd:00:ab:
98:7a:7c:3e:0d:ea:43:b3:92:e2:3c:6f:28:df:0b:
bd:c4:d4:2f:89:c5:d3:89:ac:66:c1:e2:c9:3c:8e:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:B5:91:72:2E:2F:D0:50:5C:D1:11:3D:F2:1E:6B:46:A0:54:30
X509v3 Authority Key Identifier:
keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:59:95:2d:d0:89:4e:5a:8c:c8:58:9c:de:a1:47:97:c4:f7:
b8:fe:c6:78:87:19:5b:0f:96:10:37:24:08:c4:14:b2:2c:55:
e6:99:f6:45:48:a4:c7:b6:1d:26:76:50:86:4c:4e:dd:05:3a:
51:60:a6:1b:f7:9d:9a:0a:e3:e8:c2:50:3a:5c:6f:56:23:2b:
71:91:e4:47:17:2f:21:b2:c8:32:d2:a6:8e:cc:e6:c3:54:98:
7b:a0:0f:82:33:74:8f:17:84:fa:38:d1:8b:c7:4d:65:47:47:
f0:4c:08:bf:9f:2c:be:99:7a:8d:6c:bc:16:b0:43:10:90:ba:
13:9a:aa:85:da:71:d7:84:91:e3:64:8a:79:e2:7d:da:1a:9b:
22:f3:1d:ed:3c:9e:d9:a7:2a:18:25:01:bb:48:a7:b9:46:b5:
c0:d9:3b:27:b6:fb:f6:6f:80:15:65:18:ff:b1:75:00:40:67:
21:1d:67:3c:f9:2b:f8:5c:d5:a2:a1:ac:b4:47:0a:86:39:e8:
c7:2f:6c:9f:ce:e0:c1:e7:99:07:ef:b9:82:a9:87:b5:7f:40:
5b:ce:d4:54:54:53:67:25:0b:d5:2f:46:3b:65:88:ce:9e:c2:
4d:a3:45:92:a9:57:cd:4e:32:8b:38:e8:9d:3a:2a:3c:87:e3:
2f:55:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:31:29 2025 by rpki-client