This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: m1t/y1aq1kbhovCFANedGGaRHXK0ua1zyej+NlxC2WQ=
Subject key identifier: DF:83:91:31:65:AC:4E:24:12:0F:F9:04:77:36:9D:C4:7D:C1:CA:60
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019AF2E43F6D3B23CF95E44853638C45DEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0EB3
Signing time: Sat 06 Dec 2025 09:00:35 +0000
Manifest this update: Sat 06 Dec 2025 09:00:35 +0000
Manifest next update: Sun 07 Dec 2025 09:00:35 +0000
Files and hashes: 1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: rWbudVVxUZUJ0g9JNyMmkpuyz6a6h3IsYtU7pjmka3A=)
3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:3f:6d:3b:23:cf:95:e4:48:53:63:8c:45:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Dec 6 09:00:35 2025 GMT
Not After : Dec 7 09:00:35 2025 GMT
Subject: CN=df83913165ac4e24120ff90477369dc47dc1ca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:2d:2c:25:80:75:b6:81:ff:78:4a:9a:5f:
e0:24:4e:a5:7c:08:53:58:a9:d2:ef:a9:41:a4:6c:
07:4d:7e:95:c3:e6:93:2c:fa:44:b7:bf:f7:0c:23:
59:18:24:69:41:e9:ec:77:67:6f:f2:21:16:76:9b:
51:29:7c:f3:b4:6a:6b:e4:69:db:73:79:a4:ef:3e:
64:34:10:63:db:9f:0b:7b:a4:11:9f:bf:49:2a:df:
40:39:61:c2:ae:c7:8b:cb:92:b7:65:78:c6:31:e8:
29:96:d2:2e:08:67:44:94:50:80:1f:78:6e:bd:5e:
27:50:d1:ed:36:87:4e:8d:23:60:c6:a4:ea:0b:9b:
3d:ee:b0:d8:26:a2:1e:e6:eb:f4:1a:02:4e:2c:99:
02:0e:d4:18:17:7c:08:84:f6:12:2e:20:93:22:ab:
c0:eb:6c:97:dd:20:cd:f8:35:79:0d:43:ce:c6:48:
a5:e9:d8:89:4d:40:3d:2d:80:51:d0:c7:d7:ac:d6:
c2:b6:15:2e:df:2b:53:62:50:e2:14:f2:4c:0a:d6:
58:65:7f:92:67:69:36:0a:9a:ad:6f:4d:e7:cd:c4:
de:ed:a2:7b:33:56:16:01:32:7e:ca:79:26:55:89:
48:65:97:f6:51:b0:87:3d:b1:61:47:d0:50:7f:2e:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:83:91:31:65:AC:4E:24:12:0F:F9:04:77:36:9D:C4:7D:C1:CA:60
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:13:3a:d7:b9:e6:73:83:59:87:01:2f:db:3d:e9:ff:83:51:
8c:0b:44:17:c2:38:5e:68:43:43:71:c6:38:ee:dd:a7:7c:29:
12:69:33:7b:f9:74:be:61:5a:8f:86:bf:7a:a8:3a:e9:93:ff:
f1:1d:c8:ec:7b:4c:3e:e9:8d:51:a7:fb:1a:78:16:8e:f1:c8:
18:d8:b4:90:d4:b4:4d:f6:2a:b0:9a:2f:e1:3a:2c:36:2a:9c:
b8:31:bd:77:ea:d9:d9:a3:c3:75:99:59:ae:63:0d:3b:b5:71:
5a:e5:7d:bb:c4:a1:d1:ac:cb:75:18:ce:86:27:8c:b7:c0:b7:
23:e4:68:ea:67:1b:be:cd:96:02:04:05:f6:e1:bc:ea:79:7f:
a9:1b:8b:4d:29:e0:1d:5c:dd:3e:b5:e2:e6:a1:c8:12:73:39:
c1:d6:63:34:b0:5f:4e:ac:c9:2d:3b:b9:1f:76:02:62:4a:8d:
8b:f0:fa:c3:55:a5:40:c7:06:b8:ff:01:9d:44:e1:7b:83:0b:
cb:58:14:f0:7a:17:aa:fd:13:c2:fe:79:58:51:bc:ae:b1:0b:
08:8c:69:36:be:89:2e:cc:ac:d0:b4:48:77:e4:70:19:47:cd:
df:e0:a1:d8:35:c6:99:a5:d3:e6:cf:f3:48:48:b6:bc:ec:3e:
fb:ad:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:37 2025 by rpki-client