This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: GkLDDWOjsi0MrwU4DbBbYkLoB0MCu8y+Y9BFoUM27cg=
Subject key identifier: 5B:33:ED:83:06:CA:08:92:C9:B1:4C:6C:1D:F2:96:03:E2:61:5E:82
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019AF42DD9AE123947DFFECA11F1FA6A91A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 15:00:36 +0000
Manifest this update: Sat 06 Dec 2025 15:00:36 +0000
Manifest next update: Sun 07 Dec 2025 15:00:36 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: rRJAaq44E5iarujRMJ6aW/ylb+JenOchV65/IskIEnI=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2d:d9:ae:12:39:47:df:fe:ca:11:f1:fa:6a:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Dec 6 15:00:36 2025 GMT
Not After : Dec 7 15:00:36 2025 GMT
Subject: CN=5b33ed8306ca0892c9b14c6c1df29603e2615e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:3e:8e:23:b7:6d:8b:6d:6e:64:02:ab:22:
ca:c3:69:93:54:53:70:34:41:84:6e:f9:f2:ad:33:
83:07:f5:0d:cf:a9:30:83:5d:60:30:5e:94:bf:e3:
15:52:b0:8c:b8:f9:f0:4f:84:fd:f6:f7:9a:5e:87:
9b:1f:68:22:da:5d:9a:92:cb:f2:86:e4:63:13:7c:
16:a8:18:9e:dc:2e:cc:54:b1:5f:0e:55:45:74:f3:
6f:db:d9:15:98:9a:bd:dd:90:68:2f:d7:c5:e1:19:
95:75:da:68:07:06:95:69:9d:ec:b7:f2:9e:83:f4:
87:cc:12:e6:35:c6:16:68:e3:b0:fc:9f:24:e9:e3:
41:c5:fb:f3:2b:94:72:f3:0e:03:b4:9a:98:2e:4e:
11:bd:c6:2c:8a:7e:8a:06:d6:33:ec:fe:fb:3e:7a:
d4:52:fd:76:b0:24:9e:f2:27:80:42:06:d8:ae:ec:
08:05:11:29:ab:89:87:3c:c9:c3:0d:61:3f:d6:e1:
c5:9f:5e:df:ec:6b:82:ec:72:8a:6f:21:66:9f:9d:
3a:fd:06:29:95:56:8f:97:47:d6:90:c8:c4:ee:8e:
a8:bf:70:9b:6f:0c:50:2c:c8:ce:b1:cf:fe:94:ac:
68:61:30:28:50:d0:fc:63:e2:cd:7a:7f:3b:3b:f1:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:ED:83:06:CA:08:92:C9:B1:4C:6C:1D:F2:96:03:E2:61:5E:82
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:88:a8:bf:4f:fc:d1:c6:aa:b7:08:e4:3f:e1:b1:5b:43:
b6:72:cc:52:3d:7a:8e:73:ea:0b:b5:f5:ab:31:e0:15:bc:40:
90:0c:c3:3c:5f:c7:16:f3:01:74:4a:ab:80:16:87:f6:7d:2e:
2d:fc:02:05:53:00:b0:90:af:13:8b:cd:be:5b:72:df:91:ed:
d7:1c:4c:9f:77:21:ea:53:5e:e5:00:2c:df:23:69:64:9e:36:
4a:f7:c3:03:3b:f5:13:4d:43:58:f3:e0:96:e9:c7:64:68:4d:
9e:e5:61:be:da:9d:e3:ac:6e:ed:e1:ea:89:14:42:50:72:8d:
7e:b2:8b:96:95:2e:a4:a0:6b:8b:9e:cc:8f:2f:10:0f:26:6a:
d4:17:cf:3e:7e:8d:cf:ed:b5:41:27:58:f2:49:21:41:02:06:
56:0c:19:96:d8:c8:dd:60:fe:a7:d6:c1:cf:fa:16:b6:57:d0:
fd:5f:ec:8f:6a:27:e3:5f:bc:7c:09:19:7e:6e:61:f0:09:54:
92:93:d6:9c:2a:87:d7:e8:4e:71:46:53:93:46:34:39:22:7c:
6c:63:50:e7:6f:74:62:97:de:8f:3f:d4:d9:5d:e5:00:a7:b4:
4e:0c:4a:88:09:ea:a4:1d:79:0e:4d:29:26:bb:37:fe:10:81:
fd:d0:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:40 2025 by rpki-client