This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: 5sSb272XDCUJocQIw3Bsincixgd45n85fQJ1UO2sYsg=
Subject key identifier: 42:CC:F0:A7:DD:26:E7:67:2E:D5:6E:8C:6D:A2:3A:20:F4:14:4C:B6
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019B3DFEF09722061F7845B08D18E174972D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0360
Signing time: Sat 20 Dec 2025 23:01:16 +0000
Manifest this update: Sat 20 Dec 2025 23:01:16 +0000
Manifest next update: Sun 21 Dec 2025 23:01:16 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 8gj3gBHpQRqFb8E2ZZatzrFwrSkh0+WboX6wSXpqOZ0=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:fe:f0:97:22:06:1f:78:45:b0:8d:18:e1:74:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Dec 20 23:01:16 2025 GMT
Not After : Dec 21 23:01:16 2025 GMT
Subject: CN=42ccf0a7dd26e7672ed56e8c6da23a20f4144cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:13:05:35:89:31:45:32:ea:6d:f5:09:73:
d8:27:c3:77:24:41:3c:98:a1:9a:b0:57:7d:bf:14:
45:d3:3b:c3:28:6d:a4:c2:96:47:9d:e8:f7:b3:a2:
70:85:a6:15:59:38:cf:68:db:c5:73:3b:6c:95:25:
28:b8:c6:6d:62:91:95:9d:68:cd:30:0a:f7:c5:28:
e8:ac:25:e9:d0:d0:ba:17:3c:f1:dd:34:54:76:c5:
d4:ab:02:b5:2c:a2:f4:09:71:85:03:3e:ec:f1:47:
64:21:64:b9:dc:6e:fb:c7:3b:5d:eb:16:d3:73:81:
86:1b:a9:04:02:2a:56:55:d5:01:b1:27:4a:30:c1:
a6:16:50:34:b7:b9:6c:b1:3a:c4:e2:3d:18:cb:f4:
31:51:bd:8e:4d:0c:a6:81:62:fd:a0:63:82:31:a8:
78:f9:5e:f6:39:1b:d4:f3:dd:d7:56:a7:9c:30:8c:
06:40:9b:be:78:57:41:2c:09:5f:36:68:fa:f8:f1:
7e:c1:59:68:18:b0:aa:29:e9:e8:eb:d0:89:5c:23:
a7:d1:b6:ca:4b:77:a8:49:a7:ce:fa:2b:5e:42:4e:
52:62:d6:1d:f5:c2:e5:b0:39:51:5a:0a:e8:11:75:
45:cb:b2:46:81:e9:24:bb:7e:a3:61:03:4a:df:67:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:F0:A7:DD:26:E7:67:2E:D5:6E:8C:6D:A2:3A:20:F4:14:4C:B6
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:63:8f:a9:ea:e8:9a:0e:90:3c:6d:a3:ac:d9:1e:f8:97:6a:
ec:3d:b5:c2:da:1a:6d:eb:2f:2b:41:82:bc:2f:30:e9:b6:02:
4f:bb:e3:57:61:5a:c4:25:fa:3c:97:37:f3:49:a4:11:1a:82:
c3:c4:39:51:81:8d:c4:99:63:75:17:d4:bb:fb:a1:68:4e:13:
64:d5:04:49:86:87:48:6d:a6:75:66:19:ed:5a:ec:9c:df:03:
c9:94:08:24:c0:18:33:5a:08:b8:24:1e:bc:f3:27:e4:e5:41:
96:8c:63:0d:f8:42:8e:30:4e:5c:bc:42:ff:2f:b0:37:d4:2c:
07:e5:69:a9:25:f5:42:82:05:ca:4e:f3:76:5f:68:9b:fa:5d:
f8:9e:1c:02:77:b7:db:9c:05:31:52:58:b3:94:0d:b6:9b:33:
92:b2:3f:89:95:3d:38:28:d1:3e:ad:0e:75:90:ea:9b:41:07:
e9:69:60:d3:3e:f1:0c:2f:70:c0:17:1b:b3:af:c8:4a:b4:58:
53:fd:38:1e:1f:c1:78:c1:38:76:53:9e:70:c3:08:48:df:cd:
fd:c7:72:bc:e1:de:62:fc:dd:36:de:39:66:a8:b8:23:41:de:
ba:3a:53:7d:67:a5:82:86:ad:f6:e0:fc:ca:de:a9:76:1f:8f:
8e:94:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:06:53 2025 by rpki-client