This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: 7gTFVEn6iYpOKin3T70xasVwwWhhZR6JVNlGYAvkS5E=
Subject key identifier: 88:77:DE:98:12:5C:AD:8E:69:10:DD:84:7D:D1:EB:16:61:70:6B:74
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 019B413679932A804F35834A23892AA8077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 178C
Signing time: Sun 21 Dec 2025 14:00:47 +0000
Manifest this update: Sun 21 Dec 2025 14:00:47 +0000
Manifest next update: Mon 22 Dec 2025 14:00:47 +0000
Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: wJ/ZB7X20o5w1Du4dBQa1mH3Qq9HtNgDguSjT5iYJJ4=)
3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:36:79:93:2a:80:4f:35:83:4a:23:89:2a:a8:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Dec 21 14:00:47 2025 GMT
Not After : Dec 22 14:00:47 2025 GMT
Subject: CN=8877de98125cad8e6910dd847dd1eb1661706b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:13:23:f5:60:9e:82:42:ef:6f:eb:9d:84:
47:21:c7:1e:15:79:41:04:c6:27:1a:05:6f:ae:ae:
ea:c2:26:31:46:cf:e8:40:f1:ac:01:e4:49:d2:ac:
fc:fe:52:5a:f2:fa:7f:58:d3:e4:4a:81:7c:f3:5e:
49:aa:5a:8c:a5:17:03:dd:59:ea:92:85:bc:7a:b0:
ca:d8:db:8c:2e:f7:8c:c6:fe:16:40:59:2d:83:ca:
11:6b:7c:00:c1:63:f0:d3:83:e4:e4:4e:a4:e8:38:
1b:c8:dc:c2:71:45:fa:48:cf:49:1b:92:e9:31:61:
aa:84:d2:e2:e1:ec:c8:f3:b1:1a:0e:bc:45:70:f7:
20:17:f5:42:cf:f9:ef:c9:d2:08:98:8f:75:14:40:
05:d5:7a:3d:1f:d6:13:0c:4f:a3:6c:1e:af:73:6e:
bf:d9:5f:91:6e:83:2c:75:c5:82:a6:b8:96:5a:76:
85:ff:5c:14:09:da:cb:0f:0e:da:b2:cd:c8:7a:52:
8c:b7:10:16:29:d8:e5:25:29:ff:42:a7:91:01:4b:
e7:bf:a8:f9:1f:b0:38:dc:06:cc:d9:e3:98:04:a1:
4c:8e:49:9c:b7:b1:56:2a:52:49:3a:f3:1b:6c:10:
73:70:24:7c:1f:17:14:10:fd:13:3a:49:79:09:ee:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:DE:98:12:5C:AD:8E:69:10:DD:84:7D:D1:EB:16:61:70:6B:74
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:c1:76:c0:a2:90:1b:4d:09:69:ac:c8:d7:32:ef:d3:30:
82:a5:9c:1d:c7:03:e8:d5:3c:e7:97:6e:7e:f8:25:21:ff:c0:
80:ae:34:b7:05:33:da:b0:62:50:69:f4:7b:eb:f6:2b:a3:89:
63:84:10:39:ff:18:21:ac:6f:a1:bb:3b:f0:e8:dc:88:95:7e:
6d:30:52:f1:97:27:05:9c:f9:de:49:01:a2:78:cb:89:69:32:
e1:11:e2:5f:af:a3:3a:ab:cb:7a:a6:7c:11:86:e8:7c:ab:ba:
82:8b:b3:d2:ee:cf:20:19:1d:24:a5:a0:cd:ca:51:8b:c9:37:
4f:5f:58:24:58:48:f5:6b:b6:de:fd:54:c7:40:fe:3e:d9:93:
22:81:ee:84:51:21:e4:0f:02:11:44:54:93:90:04:3b:e1:67:
cc:29:58:a6:b7:c8:be:c1:95:a9:d3:a2:77:9b:8f:40:ac:6b:
fc:54:ff:e3:78:bd:6a:e9:6d:3b:81:df:d7:c7:11:b7:fa:96:
b4:5c:7c:52:3a:de:39:89:d1:1b:cf:a1:12:0f:6c:fe:11:c6:
8e:79:23:a4:e6:b3:26:d9:64:9d:bd:db:b1:1a:88:51:0d:b6:
cb:a2:c1:60:19:bc:e4:19:ce:80:9c:91:3d:aa:94:a8:c7:b6:
d8:0a:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:15:28 2025 by rpki-client