This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File: IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier: OjdZw2U2RBS+Fw+OI9bUGZ+YO5WwhKeza6KSWx/76Ck=
Subject key identifier: 6D:79:75:DE:F2:2E:CD:C0:C1:5D:D1:27:2F:04:D4:56:31:E0:D6:15
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 019AF42E4A8BB6B933A4ED74778719AFF635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number: 058B
Signing time: Sat 06 Dec 2025 15:01:05 +0000
Manifest this update: Sat 06 Dec 2025 15:01:05 +0000
Manifest next update: Sun 07 Dec 2025 15:01:05 +0000
Files and hashes: 1: 4qvZpbHlQrEVGaculmgT9y6fbp0.roa (hash: tCJqK90XfNlOzC+CJIY2YiVu1YRsdGe0qc+sYvxZZ4k=)
2: GCeJWQXp53i0_T9Els2HFdD580c.roa (hash: F4jM2A6o7cg7dalyRSsXPRHMxAUn8dJXwNlkzBZKjRk=)
3: Gx7WZJ-NdyF04pUk4gdMYoHuQzk.roa (hash: t6M0KFjILBRmG74F5TahE0UmVDYYLhcbj+iOGjxmViM=)
4: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: RiEF5mnkuIm1NCX26ZY8+UPWcRWGad+7cKJmKayTwKI=)
5: P8uTVptxd-UGzkymXhOkvbitcEU.roa (hash: 61AnrtiCoFhbr8PK6p0Fhr8c0CNn0nd06ZAGuQwz1l8=)
6: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (hash: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:4a:8b:b6:b9:33:a4:ed:74:77:87:19:af:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Dec 6 15:01:05 2025 GMT
Not After : Dec 7 15:01:05 2025 GMT
Subject: CN=6d7975def22ecdc0c15dd1272f04d45631e0d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:0d:7c:e0:0f:dd:5e:f8:6b:b5:37:e9:6c:
ab:72:d7:b0:fb:61:c5:44:0c:70:06:dc:22:be:6c:
0c:73:a8:47:27:9f:b1:0e:af:b0:4a:ec:5a:b3:5f:
9c:e1:bc:53:0d:45:7a:04:d8:69:c6:d1:8e:b9:45:
b3:67:3d:53:78:b6:46:af:dd:df:c1:a5:2d:44:9b:
04:01:f5:1e:06:fa:1c:a3:8d:0f:6c:9a:c7:2f:f0:
60:7e:39:bb:aa:cb:fe:06:de:6a:d1:5b:65:73:3b:
b8:f2:d8:7c:c5:97:36:ea:74:f4:24:61:a7:17:fd:
9c:f7:80:a5:f1:ea:73:62:9d:b6:d7:8e:22:6c:d5:
7f:87:63:dc:25:a8:12:34:b9:4b:08:fd:1a:ec:20:
3a:db:b7:d9:45:ce:59:f9:c5:e1:ad:74:79:5a:54:
f0:59:4f:24:96:23:5c:12:7f:b5:cc:67:70:2a:fa:
b7:15:42:5e:65:fd:d4:e8:73:ce:34:a3:72:6f:c0:
94:f5:af:0c:be:2b:15:80:41:5e:26:f4:aa:bf:92:
ad:93:bf:2f:2f:8e:6d:84:13:1f:8b:3d:90:c7:53:
da:8b:f7:c3:9f:34:88:b1:b3:01:bb:2f:7e:9e:c4:
98:4f:68:8a:7b:54:b1:ae:72:b4:a1:74:1b:f6:92:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:75:DE:F2:2E:CD:C0:C1:5D:D1:27:2F:04:D4:56:31:E0:D6:15
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a1:61:36:79:87:18:df:ff:b8:ff:cf:30:c5:d9:fa:22:56:
1c:27:2c:35:28:22:d7:50:90:14:b1:31:38:f7:be:14:73:ce:
d0:e0:21:aa:21:e5:cb:12:5d:9c:46:c2:88:3f:5e:b7:97:75:
0a:3f:b3:35:bd:de:df:7c:78:09:40:68:02:17:9f:8b:d1:35:
de:40:6f:19:ce:60:ed:c9:5a:8b:21:39:40:40:7b:6a:76:ec:
e5:d4:a4:63:fd:8b:ce:f5:76:eb:39:f0:6c:d1:bc:8a:71:de:
dd:1a:52:51:1a:f5:89:4f:e0:9e:37:2c:bd:d7:16:85:be:d2:
80:94:8a:28:cb:db:57:ed:9a:9e:6b:82:37:b5:f9:64:91:7b:
2b:ee:24:ef:82:14:d6:36:b5:18:ef:8c:68:ca:c9:24:ed:2f:
2a:54:bc:b1:ef:85:9b:ae:c8:6b:b3:0e:62:35:dd:e2:ca:65:
fb:a1:c1:00:c1:73:c1:d9:fd:69:cd:13:77:dc:31:2b:c5:5c:
b6:0d:f4:ea:a7:ef:ef:da:b9:b7:6e:e2:91:74:4d:4e:18:8c:
89:3e:54:01:80:fd:69:d3:1d:0f:e4:ac:65:c3:46:37:4c:5a:
8c:b8:74:a5:9b:fa:47:45:30:ad:18:08:32:ca:86:0e:3d:3f:
2c:5d:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:27 2025 by rpki-client