This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File: g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier: +SteztMHgiJdw5aBSRjMoqeiJQVhVh4iaDJosNxBesM=
Subject key identifier: 2D:3D:CA:70:CB:B5:71:A7:4F:04:9E:A9:72:CD:6A:39:29:11:F3:E1
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019B39EAA660C1F3ACF20C9E0034AC8C31A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number: 0ED6
Signing time: Sat 20 Dec 2025 04:00:37 +0000
Manifest this update: Sat 20 Dec 2025 04:00:37 +0000
Manifest next update: Sun 21 Dec 2025 04:00:37 +0000
Files and hashes: 1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: luEyFwHWYidQdsEFrKoi5SkpfWqxRfBCVVf6HZlLnjo=)
6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:ea:a6:60:c1:f3:ac:f2:0c:9e:00:34:ac:8c:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Dec 20 04:00:37 2025 GMT
Not After : Dec 21 04:00:37 2025 GMT
Subject: CN=2d3dca70cbb571a74f049ea972cd6a392911f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:66:71:d2:d0:85:ae:f7:7e:71:e8:a8:f6:
78:5a:f9:8d:17:a5:44:05:4e:ab:6e:55:64:34:83:
5d:fc:00:ee:42:58:e2:c4:1d:46:7f:fa:c7:f3:03:
48:65:95:d0:8d:04:95:f8:bc:29:9c:02:0b:af:77:
a2:a2:e8:39:dc:c1:26:39:05:4e:ba:2b:eb:d8:bb:
89:74:2c:3c:9f:13:8c:5a:85:0f:be:bc:33:11:69:
97:38:e1:00:24:54:b8:fb:45:f6:24:5b:2d:49:4f:
49:72:cb:2f:57:01:48:d0:95:6b:46:09:e6:ce:dd:
a7:8e:d3:72:0e:20:45:ea:d8:16:75:97:cf:6c:f2:
18:22:7f:df:a9:0f:eb:a9:a4:68:ad:d9:16:1b:4c:
6a:47:09:35:78:87:47:30:ef:e7:76:70:1d:13:a8:
71:72:a2:29:f3:bc:e7:31:cc:2f:22:0d:59:34:03:
c2:9c:e5:f2:14:58:85:e3:76:f5:c5:fd:56:bc:da:
03:43:93:d2:4d:cf:75:95:21:6a:f8:00:c1:cf:38:
73:1d:d1:73:d6:09:b3:e6:99:dd:46:74:ca:69:07:
0f:8d:bb:c6:4d:91:ec:1b:68:eb:59:03:6f:52:7b:
ea:b0:98:9f:9d:f9:17:26:8f:0f:63:01:82:88:bc:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:CA:70:CB:B5:71:A7:4F:04:9E:A9:72:CD:6A:39:29:11:F3:E1
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:89:7d:2f:5f:82:a7:53:52:72:fa:2f:ff:1d:98:2f:d2:
31:b5:94:12:20:af:e3:91:ed:b8:85:fb:77:30:64:57:9e:0e:
14:a1:13:88:5c:c3:24:67:f3:37:e2:17:3d:39:9b:92:dc:83:
9a:1b:4f:fd:f6:2b:8f:3d:e0:b6:e6:a1:b3:2e:a6:36:a9:ff:
eb:b2:22:d5:c4:2e:23:a2:88:86:5b:93:0f:cc:35:6c:9d:72:
43:14:91:e9:c0:47:cb:46:aa:20:70:8c:01:97:3f:e5:8d:d5:
c1:d7:ee:d3:23:b6:29:f0:47:cb:de:bf:96:f5:ae:0a:92:12:
33:44:58:60:cb:ee:42:b4:dc:4f:02:af:bd:1c:23:2a:4e:e7:
80:ea:eb:9f:4c:12:f3:0b:b2:ef:bf:88:4a:50:0a:ce:2c:89:
15:9d:74:75:11:6d:ac:78:79:4d:51:40:71:f6:ee:b5:ef:c7:
e8:f8:98:85:34:72:1f:94:af:07:a3:34:52:d7:1b:cb:83:35:
51:49:86:f9:89:9e:75:a5:87:2c:92:d7:fa:e7:04:2c:2f:0c:
9e:7d:40:af:27:c9:74:9c:00:f4:58:ec:65:b7:7c:a3:8a:19:
dc:b1:85:d7:a6:92:58:07:4a:6e:15:f2:03:fc:fe:cf:4e:ae:
d1:5e:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:35 2025 by rpki-client