This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File: C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier: 0UDtnvawPG4OUlpar13k/kU9TL3aFy6XXm4T7N7oXTc=
Subject key identifier: CB:E2:3A:4D:20:E6:74:D3:1C:70:1D:35:3E:88:E1:4B:2A:B7:87:86
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial: 019B2C2F1F71CBBD6BF6EB51486756DCB96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number: 145C
Signing time: Wed 17 Dec 2025 12:00:44 +0000
Manifest this update: Wed 17 Dec 2025 12:00:44 +0000
Manifest next update: Thu 18 Dec 2025 12:00:44 +0000
Files and hashes: 1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: F2REefFh4Jdt+jw4NYGzf7g4XvnSMSdjgfppOntvFRk=)
2: VDV2mgvPqpRmmoenb9SaX1u1440.roa (hash: ivvVUYPgums0E545lnqR4Wp+TXCXyBK6qgVWasD11m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:2f:1f:71:cb:bd:6b:f6:eb:51:48:67:56:dc:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Validity
Not Before: Dec 17 12:00:44 2025 GMT
Not After : Dec 18 12:00:44 2025 GMT
Subject: CN=cbe23a4d20e674d31c701d353e88e14b2ab78786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:d9:6c:4f:ea:1f:66:ac:62:5f:42:d0:e6:
d5:1c:23:53:05:9d:33:c7:83:4a:d4:ff:90:55:09:
0c:35:34:58:ac:12:5b:ab:64:e1:66:2c:94:9b:b3:
67:09:8e:6e:58:8e:e8:da:08:39:cb:a0:01:5e:5b:
30:66:74:e6:5e:b6:bc:2f:f6:d9:f8:07:db:46:d8:
f5:f4:67:1e:cf:5b:c2:71:bf:28:fb:1d:0e:d3:e1:
f1:15:7a:3d:7a:06:5c:95:b6:ec:20:55:20:ee:44:
64:7e:51:07:08:93:14:23:fd:d7:44:5b:19:4e:9e:
be:68:2c:08:3a:24:c0:f7:08:db:37:03:24:af:ed:
b5:ee:34:96:77:2c:99:78:44:d1:a1:48:f2:7b:24:
fc:88:43:b8:56:87:cd:18:7e:9f:a3:c1:66:83:c3:
60:97:8a:8d:1e:48:94:62:ae:07:e8:27:c4:24:84:
60:4d:fe:44:fe:2d:fb:fc:92:f8:54:1e:fb:f3:0c:
77:3f:55:af:ce:23:2c:69:49:02:18:13:e0:13:e2:
68:8b:b3:8b:73:cc:58:a1:ef:9d:60:9e:02:35:68:
da:62:f2:95:76:39:6c:3b:f2:0d:09:d0:bd:06:e0:
96:e5:d1:cf:7f:fb:41:fa:99:d9:3d:ff:7e:ff:c2:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:3A:4D:20:E6:74:D3:1C:70:1D:35:3E:88:E1:4B:2A:B7:87:86
X509v3 Authority Key Identifier:
keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b3:6a:d4:44:c7:0f:79:a2:d9:f0:e0:4b:4f:26:1f:a4:cf:
f5:13:40:98:b4:45:1f:22:5c:3b:33:84:ef:a3:df:21:c7:dd:
3f:4b:ac:99:8f:91:df:4c:10:c9:2c:ae:95:e5:b4:6e:5a:66:
43:df:c1:6d:13:70:d7:7f:3b:a4:0f:71:96:78:bd:1e:ca:dc:
cb:ef:94:64:bb:ca:3a:64:1e:86:f0:da:87:96:da:db:42:7b:
a1:e1:4d:7b:07:99:d9:fa:59:3a:fa:1d:ed:f2:f4:6f:80:2e:
63:70:a0:12:99:5a:2d:33:a2:75:19:6a:42:ad:c8:2c:e0:11:
bc:7b:62:13:0f:26:bf:25:f7:81:23:01:44:e6:d7:ef:d6:29:
c3:6a:4e:ee:15:66:8f:36:7b:f3:4b:fa:69:ac:f9:5c:aa:0f:
50:e9:e0:06:12:0c:5e:1b:42:2c:70:fd:c0:50:d4:ff:fb:92:
af:0d:5e:c0:c5:6e:61:ad:05:bc:5d:ff:fc:80:11:89:dc:01:
8e:cd:48:8b:66:6a:32:76:4f:c7:73:17:49:d1:ee:0e:e5:88:
4b:7d:61:fb:de:e9:5f:cf:01:5c:1d:5c:36:5d:eb:a1:8f:2e:
06:e2:0b:04:cd:23:bc:68:95:78:2e:de:ff:f1:09:c2:a5:f1:
93:56:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:23:44 2025 by rpki-client