This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier: Qys1MG8Ozu5nX32U4HvR0+hwGn6huzc5HvZfJTS4rG8=
Subject key identifier: 26:03:2D:DF:2D:26:5B:04:7B:A7:25:37:DB:6B:13:AC:DA:31:2E:DF
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019AF42E2281038A1074B4043EDB0C561707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number: 1788
Signing time: Sat 06 Dec 2025 15:00:55 +0000
Manifest this update: Sat 06 Dec 2025 15:00:55 +0000
Manifest next update: Sun 07 Dec 2025 15:00:55 +0000
Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=)
11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: BMK1LX4atHumHMgTI1nEutdBhzTgon7+cLEpzRvQq+8=)
13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=)
24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=)
26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:22:81:03:8a:10:74:b4:04:3e:db:0c:56:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Dec 6 15:00:55 2025 GMT
Not After : Dec 7 15:00:55 2025 GMT
Subject: CN=26032ddf2d265b047ba72537db6b13acda312edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:e3:a3:9e:cc:b9:d9:cc:4d:bb:44:e4:a4:
b2:83:99:77:37:23:6b:e4:a0:8f:2c:6f:74:ab:4c:
d6:9e:e7:47:21:73:80:80:e7:50:34:c9:ab:c7:54:
51:c5:0b:0c:45:b5:09:ab:e1:bb:bc:ba:f1:04:98:
68:44:98:0d:d4:6d:57:09:13:00:a1:32:04:5e:81:
e1:65:40:9a:67:b3:ee:9f:c6:c9:29:21:0c:ed:87:
26:10:27:36:32:e5:60:0d:eb:50:7d:e0:c9:73:9a:
ef:d8:96:95:7f:58:a4:ae:67:37:b6:78:f1:0c:c6:
71:9f:31:c6:10:9b:3c:d1:8e:b2:0d:d2:8a:26:a7:
a1:f6:36:1f:cd:07:b4:12:7c:5e:57:04:c1:2d:0f:
6c:2f:6f:34:ae:d7:70:96:bc:15:e0:68:59:b5:a6:
af:2e:ce:bc:4b:b7:74:46:c0:99:46:dd:b5:00:3d:
50:14:c3:26:b7:98:ea:17:1a:3e:07:3a:36:8e:a2:
43:57:30:9c:66:76:f9:7e:d0:77:75:ee:8c:8a:94:
6f:62:22:3a:7d:cc:6b:e7:d1:3c:83:d4:7e:4d:5f:
63:1e:1d:1a:42:e9:ef:3d:12:57:5b:37:a2:8c:48:
ce:ac:25:a5:95:6f:f8:b2:d6:2b:52:07:ab:d9:04:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:2D:DF:2D:26:5B:04:7B:A7:25:37:DB:6B:13:AC:DA:31:2E:DF
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:ed:0b:e3:2a:16:8d:a3:39:d6:e2:40:51:2f:01:8d:4a:
67:c3:40:16:43:ca:eb:c0:22:1f:14:92:13:7e:21:6e:7d:19:
b3:00:12:ba:06:a9:2d:d1:25:1b:e0:a9:71:82:c4:61:93:77:
50:b4:6e:bc:66:b6:b1:1d:63:f2:75:4a:f2:c2:b6:58:95:c2:
c6:5d:ed:95:cf:32:88:62:a6:c6:d0:1d:df:29:2c:46:b2:2f:
12:72:67:79:12:1b:74:2d:70:66:cd:a2:e9:65:88:5f:3e:5c:
24:cc:14:5e:b5:65:ab:45:b6:50:9c:5f:54:26:0c:07:ad:6a:
15:8b:99:f7:79:03:66:75:e7:02:12:49:12:17:9a:49:3d:24:
cc:d1:3c:1f:5d:15:a7:5a:48:13:44:cb:13:cb:51:09:34:9e:
4e:e3:3d:a5:b1:13:ef:21:22:ff:4f:8d:6f:32:ee:b8:33:82:
27:ec:e6:15:cd:1c:2c:b5:7e:ff:f2:ee:af:c0:39:88:10:a0:
41:f9:f1:26:ac:45:47:c5:1e:49:d5:62:d1:52:de:98:c8:76:
07:6e:9c:06:0a:3e:da:fa:5f:45:7e:ea:bd:5c:dd:38:e3:51:
f3:04:ac:5a:ce:4b:90:83:75:2d:7e:c3:4f:6f:5e:97:01:e1:
d8:ff:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:55:55 2025 by rpki-client