This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: 2xw1b2O+6Jm+cGihbo6TA4gJdGkM3QLARRXE0s9WeTQ=
Subject key identifier: 86:87:18:F6:10:9D:49:BC:57:6D:7D:AB:B8:D9:99:AB:23:84:71:7B
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019AF1D1B931DABAFEDF6C989F7205A3FE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0814
Signing time: Sat 06 Dec 2025 04:00:44 +0000
Manifest this update: Sat 06 Dec 2025 04:00:44 +0000
Manifest next update: Sun 07 Dec 2025 04:00:44 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: HkzkbXmn0g+q0qzrOGAbkyohVkSj4dzlTZ2AyzQQVbE=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:b9:31:da:ba:fe:df:6c:98:9f:72:05:a3:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Dec 6 04:00:44 2025 GMT
Not After : Dec 7 04:00:44 2025 GMT
Subject: CN=868718f6109d49bc576d7dabb8d999ab2384717b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:db:2d:b4:5f:28:c5:36:4c:a2:f2:67:71:
e9:2b:79:3f:f9:19:5c:6c:7f:77:f9:46:12:70:f4:
9b:0b:37:c2:fa:b4:91:ba:2f:b6:50:7a:25:80:1b:
66:9f:97:3b:af:1f:5c:9d:c0:a1:fb:31:85:ea:21:
68:94:94:d6:31:7b:2b:9d:0c:36:0f:b5:79:45:dd:
8a:aa:cd:e4:16:eb:ac:25:80:5f:76:53:44:75:64:
91:e5:93:cb:75:3d:5c:77:f1:79:00:fd:3f:95:55:
5c:15:43:48:2b:ca:24:42:26:b2:ff:10:ac:8b:56:
61:59:4e:1d:a4:9f:0b:82:0c:a1:4f:fc:db:67:8a:
c2:ee:c8:70:36:89:38:ef:b5:59:d2:9c:d4:64:8f:
f6:78:7b:bf:52:ce:c6:00:a3:4f:dc:ec:17:8e:5f:
26:a7:1c:dd:07:74:58:54:e8:9b:57:06:2b:0d:b3:
08:08:1c:d8:37:6e:cf:d5:53:e3:b2:f9:da:d4:46:
fb:f1:b0:2b:45:c9:b0:15:d4:df:bc:db:59:84:99:
fc:55:27:7f:3f:a6:6e:99:92:f2:ba:55:e8:bb:9f:
67:44:9c:98:8e:a6:35:60:e5:62:92:39:1b:af:a8:
00:0b:95:55:af:ff:5a:ca:f0:8a:e0:70:a2:0e:c5:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:18:F6:10:9D:49:BC:57:6D:7D:AB:B8:D9:99:AB:23:84:71:7B
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e1:17:1b:76:91:17:57:27:fd:ae:a1:ec:c6:b2:bb:a1:40:
98:17:94:5d:93:11:37:16:ab:b8:ec:a8:a2:bd:2d:97:c7:02:
ef:f8:62:99:2d:1c:1b:d1:f1:e3:96:e6:3c:09:da:1d:c1:8e:
9c:1a:58:56:26:44:17:77:90:de:da:17:d0:da:dc:df:83:2b:
08:14:93:e0:56:4a:ad:65:41:53:69:b1:28:86:e2:ce:65:35:
9b:89:9e:39:f4:de:db:35:c3:81:9b:60:a6:ff:6b:c1:85:7a:
6b:a0:d2:aa:72:36:19:16:85:1b:2b:7c:6f:7b:13:b7:b4:a5:
e2:f0:02:3b:21:30:71:18:fa:f7:88:4a:aa:ac:e5:71:55:41:
05:79:df:e4:5b:22:91:d6:91:c8:72:22:e6:a3:73:b8:27:4c:
a6:99:93:33:8a:06:2e:fc:0e:ab:ef:a2:96:b0:fc:fa:f7:20:
6f:0f:b7:98:73:c8:68:a3:aa:e3:07:c6:3e:b3:58:c0:13:36:
3c:87:07:0a:0f:7e:a5:4d:ea:8f:d2:d0:23:7f:0f:ca:cd:a3:
ec:19:b1:45:d2:d7:38:fc:1a:47:b3:4f:fd:76:a8:fd:30:ba:
4a:47:e2:91:0d:fe:45:ad:4a:04:8b:31:68:04:7f:0b:8d:ae:
1d:db:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:12:41 2025 by rpki-client