This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: rQ5hnt31X2TZXiMsCL/W1uGqkaHMDYw2yuYOBeQTwYY=
Subject key identifier: 3E:68:2E:7D:08:74:C8:A1:C1:D3:24:FE:C9:EC:B3:59:CB:77:9F:E1
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019AF164376BA043C09113E9E54D1124C113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1770
Signing time: Sat 06 Dec 2025 02:01:08 +0000
Manifest this update: Sat 06 Dec 2025 02:01:08 +0000
Manifest next update: Sun 07 Dec 2025 02:01:08 +0000
Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: RbV0nU0qkbMI6YpxsuO8/PdJtndQiutxqxJJLYoWjmE=)
7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:37:6b:a0:43:c0:91:13:e9:e5:4d:11:24:c1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Dec 6 02:01:08 2025 GMT
Not After : Dec 7 02:01:08 2025 GMT
Subject: CN=3e682e7d0874c8a1c1d324fec9ecb359cb779fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:91:30:78:d9:ad:98:8a:b8:60:47:e7:f0:
e3:19:21:7e:11:fc:c4:5e:ce:d3:25:3c:17:8b:d9:
c3:08:0f:61:a1:67:21:52:11:2e:2f:0d:5a:18:bb:
f7:48:2e:4e:3d:28:48:3b:7e:90:3b:91:d4:c0:9e:
bb:fb:97:c4:ca:f4:b3:cf:f6:ce:56:e1:62:90:6f:
4b:4c:b3:ea:28:3f:b2:ca:22:c6:d0:05:c9:28:49:
fc:c8:14:ec:29:9a:fd:74:2e:4e:dd:a9:7b:59:5a:
f7:68:2b:29:c9:f8:96:56:97:9b:0c:b5:bd:bc:f8:
a8:d9:22:f9:af:d6:41:4b:d2:5d:8e:14:2e:97:fb:
42:16:8d:f4:b0:27:b5:d9:82:f8:a7:dd:5d:b9:b2:
26:7a:cc:7d:35:f9:c2:d0:42:3d:cc:16:f1:e7:66:
e5:f5:07:dd:42:48:17:ea:1c:58:61:e8:67:31:34:
c8:04:c3:7b:ee:bb:96:bf:cc:4a:e9:73:11:46:02:
ae:59:02:c3:ee:1f:8c:72:f4:ac:74:52:20:8f:a6:
9b:2f:b8:5a:b1:5f:5c:8c:5f:a6:06:78:3a:ec:10:
51:ce:18:0c:9d:c9:b0:ec:0a:6f:a7:68:8b:cc:95:
84:2d:62:95:11:43:02:3d:d4:53:d6:a3:d7:be:40:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:2E:7D:08:74:C8:A1:C1:D3:24:FE:C9:EC:B3:59:CB:77:9F:E1
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:06:d9:ec:55:dc:35:9d:8c:a7:09:44:75:96:fa:dd:b9:
d3:30:46:9a:3c:aa:41:e4:38:8e:a8:b0:fd:57:38:d6:df:51:
6d:1b:49:37:6d:3c:17:3b:fa:2d:82:b3:56:02:c7:e5:3d:e4:
25:b8:b5:39:26:c6:56:96:d4:0e:10:fd:79:4d:76:7f:4a:a7:
86:20:b5:b4:70:a8:3c:74:84:b7:90:fe:4b:c5:6c:ba:a2:64:
79:2b:45:89:7c:45:a4:0a:9a:db:fe:8b:28:5f:0e:29:bb:f6:
5c:3f:b9:bb:e0:32:79:ae:63:ac:bc:5a:97:3f:f7:b5:93:5f:
d5:f0:4d:91:1e:7f:5a:73:05:e4:ef:f5:f1:c1:2c:2f:cf:e0:
06:f4:d7:78:1d:21:75:92:f8:6e:06:ff:a3:e3:37:e9:e4:f0:
e7:c5:b3:37:c5:41:35:e0:44:12:1c:97:ca:33:3a:84:7f:5a:
f2:6d:3a:2b:ba:88:8e:10:63:fd:b9:4c:1d:77:d2:24:8a:18:
e7:d8:c8:9e:57:53:24:fa:c2:a6:b6:f7:37:fb:44:de:74:f8:
30:09:cf:90:0d:ec:f2:fd:9d:75:47:20:d1:ea:d0:9a:37:8f:
7e:5f:3f:81:48:54:ab:32:e3:09:5e:ea:62:15:09:d7:ad:9f:
28:9f:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:30 2025 by rpki-client