This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File: i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier: /VDfETogYdb7wnGNXQ6mZwvaj/IiyhlVys5v1mA2tWk=
Subject key identifier: 37:3F:78:9B:06:1A:DD:CC:6C:88:9E:2B:74:1F:90:83:57:BD:11:A6
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019AF088AE95A26478559F928FBF57DC4DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number: 16D0
Signing time: Fri 05 Dec 2025 22:01:20 +0000
Manifest this update: Fri 05 Dec 2025 22:01:20 +0000
Manifest next update: Sat 06 Dec 2025 22:01:20 +0000
Files and hashes: 1: 32R6bWlY_kT-IdzSOS6jUQoRg-4.roa (hash: xWfBJ4oVxeGqTJ5vFTiwfbecb58t1uRd3p+DZin3epw=)
2: HP_SsTP0iECRo2qQTfpc4ow4BYk.roa (hash: bGvpmINQH9SYwwDIsLytTIqIgfQUsNxOvfIPBHdX/N4=)
3: Q_hIcWDqn-PPQ56DLKDjeCBoXsw.roa (hash: MwFedjwgPwjvhrH7DUyYSiNCIyagEddbNZKwfOKaBy4=)
4: UbRiiNRPdI8MdUZD3H45dXG9KbE.roa (hash: ++edDwYhafn/DmjVTYR5FglX/ixBfBBX5Ov1+q3i1ek=)
5: _tBUXGLFeeKTNMit4od0RNATZXo.roa (hash: athIqN712Nn9ZvwJAZkQ9ogvGwW83fg7Abmm94I+u1U=)
6: hEJxhg9SzRAq0K6L58EjzXPZnDg.roa (hash: ccaUWhka+1gikh07jNowzbblvhiIUCKQLkaV3vwDt2Q=)
7: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: lVElka/g8Z3ApD+5YcWs87P2QVPSKvk61oY/Ukb1gQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:88:ae:95:a2:64:78:55:9f:92:8f:bf:57:dc:4d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Dec 5 22:01:20 2025 GMT
Not After : Dec 6 22:01:20 2025 GMT
Subject: CN=373f789b061addcc6c889e2b741f908357bd11a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:f9:f0:73:40:f4:60:3e:fd:36:6e:a8:8c:
8d:e3:34:90:75:be:75:65:7d:3d:c2:e8:13:0c:69:
a5:c2:36:10:07:03:de:f4:5c:45:a6:1a:a2:e6:12:
b5:ac:85:66:9f:d5:f3:4a:68:d2:62:2b:39:f8:fe:
52:11:d3:81:3e:5c:e5:30:64:04:22:6e:4b:08:dc:
ea:92:f0:4e:1f:de:de:98:aa:8d:e7:0f:1d:78:a2:
d5:60:31:df:54:89:14:f3:77:a3:2d:36:9d:3f:80:
21:2d:ee:db:a3:ea:97:42:be:d7:99:d8:cf:b4:26:
10:33:63:50:22:70:a4:4a:b7:4a:3d:3d:ef:35:70:
b9:2a:93:91:94:c3:dd:b6:90:c4:a0:4e:9f:df:bc:
8d:93:5f:c4:8c:85:4b:22:91:5b:cb:00:56:18:8a:
17:cb:ce:81:ec:10:10:87:6e:fe:55:d9:f4:a3:75:
fa:79:4d:6f:ca:55:a8:aa:30:f8:2c:8b:53:f1:77:
8e:c9:33:dd:fa:68:76:5c:bd:41:95:0b:fb:d3:a9:
0b:4d:ba:2c:3a:81:0d:2d:5f:de:58:74:83:80:3b:
03:a6:76:c3:f0:93:2f:09:1e:08:55:27:74:0a:6d:
7d:87:0a:85:e7:64:6b:f0:ee:a6:78:90:62:52:10:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:78:9B:06:1A:DD:CC:6C:88:9E:2B:74:1F:90:83:57:BD:11:A6
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7a:42:24:98:a0:f4:98:c2:21:e1:f8:b4:22:d2:70:e3:32:
ac:46:e7:f8:58:e0:26:8e:4a:f4:d3:13:39:70:66:88:0f:4a:
78:b2:72:a9:e1:00:23:f8:eb:52:19:84:60:7d:ea:4c:39:2f:
28:ce:c8:64:c4:28:7e:a7:a8:56:80:c5:39:89:80:1b:d1:13:
35:a1:9c:14:10:6a:f1:a3:e2:c9:40:32:b8:6b:d0:09:59:8b:
6d:3d:eb:36:c6:c4:93:6e:16:70:bf:9e:d7:34:b0:56:e0:a1:
33:d4:50:0e:0c:1d:1a:5b:4d:03:9f:ee:6f:06:67:f9:6a:47:
06:21:a9:cd:97:4a:36:19:3f:43:ef:10:be:bc:b3:58:f0:60:
8c:4b:80:42:6a:ce:d2:31:20:dc:52:4f:41:fa:92:a1:3c:c0:
97:90:24:91:85:dc:35:bf:cc:75:53:53:29:41:b0:40:c5:96:
db:f6:92:d5:64:e7:45:e9:98:db:21:b1:4d:6c:61:58:c8:17:
69:e8:88:92:72:d9:bd:8b:72:cf:33:d9:b3:10:cb:61:e7:cf:
9c:27:bb:f0:b6:ee:69:6b:74:9f:73:be:d1:fe:09:0f:56:5f:
90:19:8f:fd:2c:4a:3f:e8:03:37:43:1e:9d:eb:dc:56:0b:33:
4b:f2:31:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwiK6VomR4VZ+Sj79X3E3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz
Mjc0MTMwHhcNMjUxMjA1MjIwMTIwWhcNMjUxMjA2MjIwMTIwWjAzMTEwLwYDVQQD
EygzNzNmNzg5YjA2MWFkZGNjNmM4ODllMmI3NDFmOTA4MzU3YmQxMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ358HNA9GA+/TZuqIyN4zSQdb51
ZX09wugTDGmlwjYQBwPe9FxFphqi5hK1rIVmn9XzSmjSYis5+P5SEdOBPlzlMGQE
Im5LCNzqkvBOH97emKqN5w8deKLVYDHfVIkU83ejLTadP4AhLe7bo+qXQr7XmdjP
tCYQM2NQInCkSrdKPT3vNXC5KpORlMPdtpDEoE6f37yNk1/EjIVLIpFbywBWGIoX
y86B7BAQh27+Vdn0o3X6eU1vylWoqjD4LItT8XeOyTPd+mh2XL1BlQv706kLTbos
OoENLV/eWHSDgDsDpnbD8JMvCR4IVSd0Cm19hwqF52Rr8O6meJBiUhA3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc/eJsGGt3MbIieK3QfkINXvRGmMB8GA1UdIwQY
MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt
YzNjYzVkZTFlY2U5LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5
LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnpCJJig
9JjCIeH4tCLScOMyrEbn+FjgJo5K9NMTOXBmiA9KeLJyqeEAI/jrUhmEYH3qTDkv
KM7IZMQofqeoVoDFOYmAG9ETNaGcFBBq8aPiyUAyuGvQCVmLbT3rNsbEk24WcL+e
1zSwVuChM9RQDgwdGltNA5/ubwZn+WpHBiGpzZdKNhk/Q+8QvryzWPBgjEuAQmrO
0jEg3FJPQfqSoTzAl5AkkYXcNb/MdVNTKUGwQMWW2/aS1WTnRemY2yGxTWxhWMgX
aeiIknLZvYtyzzPZsxDLYefPnCe78LbuaWt0n3O+0f4JD1ZfkBmP/SxKP+gDN0Me
nevcVgszS/IxRw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:38 2025 by rpki-client