This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: JNcT4LZc/L9zY0SXNEBkvXAmNLic/F1k+Nzfzym9eKM=
Subject key identifier: 03:16:C6:84:9D:60:E7:1B:72:D9:8D:87:08:2E:2C:96:C8:3D:A0:0F
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019B348D63342DCD31960218E92E937C784F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0B30
Signing time: Fri 19 Dec 2025 03:00:39 +0000
Manifest this update: Fri 19 Dec 2025 03:00:39 +0000
Manifest next update: Sat 20 Dec 2025 03:00:39 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: DeTAUDuFSKBLrCathPtMZ2pTx8qBur3rIMwB5tM83gM=)
6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:8d:63:34:2d:cd:31:96:02:18:e9:2e:93:7c:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Dec 19 03:00:39 2025 GMT
Not After : Dec 20 03:00:39 2025 GMT
Subject: CN=0316c6849d60e71b72d98d87082e2c96c83da00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:be:e9:d8:82:aa:27:3a:9a:72:a1:04:85:
47:80:16:42:29:07:8a:60:0a:93:11:31:f3:aa:b6:
8d:5c:28:e4:fc:1b:11:3f:67:a0:50:0b:5c:c9:0d:
ad:a0:bc:6f:71:f8:ea:50:65:e4:96:5d:5b:6e:84:
f1:7a:16:19:21:9e:3c:63:93:44:d5:63:d5:d5:5f:
44:f1:c2:2e:0e:22:3e:4f:5b:ac:2b:e6:68:5b:f7:
45:a6:7a:e9:5a:28:55:ca:91:42:b8:0f:01:52:c4:
b3:33:6a:62:21:98:80:9f:0c:a3:ad:00:24:d9:21:
e9:5d:fe:6a:e0:29:cc:8a:18:72:8b:3e:e3:05:50:
38:59:8a:88:62:90:e4:2b:c7:18:42:be:5a:70:3c:
14:2a:2c:0a:b8:fa:55:21:65:c7:f9:2a:e1:4d:f3:
e0:d0:60:60:9c:cf:f4:e7:f4:33:b8:4f:8b:61:10:
cc:76:2f:85:a6:83:ca:8f:26:cc:c8:94:a2:0c:4d:
21:fe:93:a0:de:33:13:ed:34:66:8c:41:9d:0e:14:
cf:04:2a:0e:53:19:cb:40:0d:b4:c1:e8:d9:34:ff:
f6:15:0e:d7:49:0b:be:92:67:15:0e:ee:c2:66:65:
07:b1:70:53:3b:74:39:e9:ca:82:e3:e0:96:18:b8:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:C6:84:9D:60:E7:1B:72:D9:8D:87:08:2E:2C:96:C8:3D:A0:0F
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:8c:e1:1a:b2:67:9d:34:6c:f1:08:6c:7e:d2:50:ab:3f:
c7:35:f6:14:03:c9:a3:bf:e7:77:6a:85:dc:44:cd:3c:bf:69:
e2:53:ff:b5:fe:be:3a:db:15:bb:80:18:43:bf:fb:fe:a7:1b:
1d:89:76:3b:b6:f7:a9:24:a4:14:ea:cb:54:ec:1e:5a:d0:f1:
d7:00:eb:fc:f7:d8:cd:1c:ab:7b:3e:89:b1:78:4c:50:f6:8e:
d2:24:40:76:54:ef:19:5e:b7:5a:47:54:31:44:6c:01:51:03:
ce:ad:d0:29:07:5a:ce:05:7d:fe:be:ed:43:a9:9c:9f:c7:c9:
d3:73:d6:2e:ae:d3:f1:eb:1d:f9:55:3a:22:14:1d:34:2a:40:
2c:0c:b6:c8:cf:37:57:e1:bf:4e:bd:ef:46:42:78:08:db:97:
91:50:5d:14:dc:96:d4:a5:29:0e:9e:20:41:29:9e:93:19:03:
58:ff:8f:34:19:ec:30:b4:a7:54:ce:ea:37:94:98:98:0b:3b:
6c:ba:3a:a2:6f:7d:c3:5d:2a:d4:e8:63:73:bf:76:9f:13:fd:
59:8c:e0:06:15:d4:74:f4:05:ec:13:fb:a3:d7:36:a3:0c:f8:
0f:12:6f:08:7c:56:8b:cd:04:aa:ec:b6:bb:91:6a:5f:85:72:
13:cc:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:54:49 2025 by rpki-client