This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: kPmMRF9UuSI/fXudBD9RXFovrbq36nBzGRDvZ8dZQGo=
Subject key identifier: 04:8D:8D:51:B3:8D:F6:73:39:EC:EE:6E:E3:22:26:7A:49:95:9C:2E
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019B66FC11EB1A92BE66B41B52757A11186F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 091D
Signing time: Sun 28 Dec 2025 22:02:33 +0000
Manifest this update: Sun 28 Dec 2025 22:02:33 +0000
Manifest next update: Mon 29 Dec 2025 22:02:33 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: Vx4CvWuMhdAfMljgHJH0QsUmmh061UEiYxEWp+GHs04=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 20:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:66:fc:11:eb:1a:92:be:66:b4:1b:52:75:7a:11:18:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Dec 28 22:02:33 2025 GMT
Not After : Dec 29 22:02:33 2025 GMT
Subject: CN=048d8d51b38df67339ecee6ee322267a49959c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:9d:65:ba:a4:81:80:a4:ca:8e:9b:f9:9b:
48:23:cd:09:65:af:56:76:12:e0:d3:29:ca:86:de:
a5:7a:bf:1c:67:7a:8b:33:2a:db:14:bf:de:3d:c1:
81:7f:4a:29:20:52:a8:4d:d5:02:a0:22:e7:03:a5:
d0:ca:ac:19:e3:b0:da:87:f8:56:89:2a:4e:4f:c4:
59:f6:65:7a:19:7b:63:e8:fe:de:bc:7a:33:f0:e5:
b4:2e:90:8a:aa:a6:a1:c5:ea:48:bf:8b:f5:a4:58:
9a:c1:13:40:71:cb:04:7a:b2:67:7f:ef:e1:28:28:
0b:99:ae:7f:4b:c7:05:55:00:e2:d3:d7:b6:6c:e7:
e1:a9:4e:e4:6c:d4:ff:8b:70:d4:7f:01:dd:75:28:
1c:58:06:90:e5:0e:af:43:e9:f3:66:6e:ea:84:13:
c3:5e:78:db:01:17:8c:d4:be:bd:a1:2b:af:bb:0f:
25:34:09:fd:15:61:c5:0f:8c:cb:bb:08:59:77:89:
95:38:4e:fc:07:bb:5f:27:74:51:7e:b2:6a:9e:58:
2e:4a:bc:f5:18:ce:36:5d:e6:1b:eb:3e:8b:48:c2:
3c:6e:39:6c:86:c7:85:42:81:76:c6:03:cd:fc:ba:
82:9e:41:e7:5e:72:66:29:91:12:5d:cf:02:72:f1:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:8D:51:B3:8D:F6:73:39:EC:EE:6E:E3:22:26:7A:49:95:9C:2E
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:a2:e0:4a:7d:bc:b0:d3:96:87:1f:ed:f9:84:2d:cf:50:
e1:e7:99:5f:a4:58:37:67:b3:72:92:b6:44:7b:f9:35:5f:cc:
a8:9f:72:8f:fc:e9:8b:2c:0e:b0:8e:8c:7e:bc:b7:f9:02:91:
e6:bd:ec:ad:b0:70:0d:d6:e0:44:07:ec:15:65:6c:1b:48:16:
bf:f4:bd:4c:ff:1a:44:be:3b:fe:8a:37:7b:78:58:79:fb:e7:
72:01:c7:55:ca:88:30:27:55:1a:05:95:8b:71:2a:4e:73:4c:
41:ec:57:9e:96:ef:1b:58:0d:dd:ea:29:0b:0e:65:74:b6:de:
d8:56:b1:70:f9:a8:cb:38:53:e7:be:e2:59:7f:a1:c7:a1:39:
72:6f:0c:d8:09:c1:fe:07:bb:8d:60:8e:40:6f:3a:e1:0e:45:
50:61:9b:0f:8c:23:4b:2e:c1:23:ab:5d:c9:48:24:51:53:2b:
4d:e4:23:8f:44:fd:35:05:e0:60:f2:b4:b6:79:57:d5:2b:21:
fb:38:04:f9:64:7f:28:f2:9e:9e:89:37:a4:70:fd:3e:3f:12:
d1:0f:a1:36:39:a8:02:0e:c8:73:25:d2:87:d7:66:d8:a7:fc:
a5:ab:d0:f8:cc:79:8c:ae:f1:a2:c8:b1:cb:0d:8b:ea:18:b2:
05:84:62:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:27:43 2025 by rpki-client