This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File: gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier: FMMrvr0Yk1iJqVsEkYWEvtgGAkc8ceVExNELCC0Uuwk=
Subject key identifier: 30:EF:45:38:55:C3:1F:E0:F7:8A:F2:00:82:21:D3:00:B2:D2:02:25
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 019B3D911528DB136856F297C08556D45954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number: 178B
Signing time: Sat 20 Dec 2025 21:01:16 +0000
Manifest this update: Sat 20 Dec 2025 21:01:16 +0000
Manifest next update: Sun 21 Dec 2025 21:01:16 +0000
Files and hashes: 1: 2Fa9I4eMPzfo939SHVylXbzPrz8.roa (hash: nGUhV51P4Xt7y4WWujwqar1e4qSQSqC/VceFTeZqU6Y=)
2: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (hash: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=)
3: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: 5YIAFxz2TpebA+1dz+8dC78H8XBcCigF0L//R6Xc3Kc=)
4: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (hash: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:91:15:28:db:13:68:56:f2:97:c0:85:56:d4:59:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Dec 20 21:01:16 2025 GMT
Not After : Dec 21 21:01:16 2025 GMT
Subject: CN=30ef453855c31fe0f78af2008221d300b2d20225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:01:70:83:3c:83:4c:86:33:b7:b0:bf:e7:
27:8e:53:08:96:db:f2:d0:d0:1d:f0:44:a2:04:b0:
c9:88:af:f8:71:c6:aa:9d:87:01:3e:53:40:71:84:
9e:5d:fd:88:88:a9:9d:4a:f9:f2:78:95:d8:32:dd:
bb:85:58:0c:9f:c8:ec:c2:e9:c8:bd:75:1c:c9:42:
4c:9a:53:8d:61:70:69:0a:d4:ec:6e:34:fa:00:b4:
9e:dc:2a:5f:8d:7c:c4:e6:41:7b:36:af:62:d3:22:
fe:cc:40:11:c0:fd:7c:bc:5a:d4:3f:3b:63:8c:c6:
cd:a8:ec:e5:57:30:09:35:26:19:0a:0d:33:12:05:
86:80:38:b6:25:b2:c2:57:25:6b:d9:f2:9b:e4:65:
08:7c:95:30:89:05:93:c6:d7:a9:71:ba:e0:e6:51:
ff:11:25:80:56:4b:0b:88:b6:5c:79:c2:3f:ad:23:
6a:6d:4f:38:00:6f:81:d7:59:9e:36:44:65:cf:c3:
fb:b6:79:69:41:9f:7a:92:1f:5d:1f:37:66:9c:6e:
5c:a3:43:47:47:f8:a9:18:3a:3b:16:3f:6c:68:80:
8b:b0:24:14:ca:35:d3:5e:f2:38:82:c1:5f:12:bd:
33:71:5b:00:44:9a:63:53:0e:de:d4:f5:ea:1a:db:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:45:38:55:C3:1F:E0:F7:8A:F2:00:82:21:D3:00:B2:D2:02:25
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:6f:1b:60:a3:c9:8a:57:56:de:3d:07:7a:9a:e3:a6:1b:
57:7e:60:70:c6:fe:7f:38:3f:6e:5d:fd:ed:e7:df:c5:a2:da:
8d:24:74:84:b0:19:0c:c2:bd:66:b8:c3:3a:e9:e2:72:92:8a:
21:30:9b:4b:88:6e:f2:9b:d5:89:8b:2b:81:a2:4f:85:e3:5c:
d6:94:9f:9e:7c:ff:8a:56:9d:d6:17:47:4b:1e:3d:71:4b:a2:
f6:47:4f:af:55:6c:80:5b:dc:74:cb:e2:65:b2:55:85:0c:59:
f9:8b:8a:79:72:69:51:31:35:e6:e0:ad:f3:11:0e:32:cb:71:
ff:bc:d4:e5:65:59:b2:4e:12:39:88:0f:46:6e:3e:c6:14:c3:
b4:d6:01:b8:70:9d:1f:f9:a4:94:58:06:e4:28:1f:bf:a0:0a:
d4:89:4d:f0:96:6a:e5:d7:a9:87:2e:8e:f5:cd:0b:5e:cf:13:
a6:e3:4d:79:af:84:68:53:42:cb:86:b7:55:f8:d4:8b:a8:ad:
2b:8c:38:bb:dd:ce:9e:df:fc:1e:2c:8a:cb:b4:b2:94:92:18:
85:88:42:a9:d4:0a:ed:5d:9d:ef:91:3c:0f:67:0b:74:32:0e:
b4:c5:16:bf:d5:de:89:3b:59:6d:e2:8c:b7:b3:2c:ff:a4:0b:
00:89:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:50:37 2025 by rpki-client