This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File: I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier: Un1Y4n4nF+2WHa0J55+XOOlY20F4NZ3YUauI0JkmuSY=
Subject key identifier: EC:92:0B:56:F0:12:39:99:CE:01:21:93:39:A5:17:90:E9:D2:25:AD
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019AF3523B415EE8037B370EEB7C6880E957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number: 1787
Signing time: Sat 06 Dec 2025 11:00:43 +0000
Manifest this update: Sat 06 Dec 2025 11:00:43 +0000
Manifest next update: Sun 07 Dec 2025 11:00:43 +0000
Files and hashes: 1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: 4dHf93Gy6eOzErBlWlNDxh+SWzxfkOh69wG7oXDRT+M=)
3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:3b:41:5e:e8:03:7b:37:0e:eb:7c:68:80:e9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Dec 6 11:00:43 2025 GMT
Not After : Dec 7 11:00:43 2025 GMT
Subject: CN=ec920b56f0123999ce01219339a51790e9d225ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:fa:a8:5b:ae:c1:29:4a:9d:1b:2d:cf:95:
3e:e3:07:ee:3a:f6:6c:81:6e:a6:21:b4:be:d1:f0:
02:05:8d:05:a5:bb:19:f0:9a:9f:c4:7c:99:82:bb:
27:1e:dc:89:de:bd:9b:6f:62:56:53:be:1c:67:c5:
b9:34:35:71:5d:a5:db:42:d3:ac:96:d2:6a:fb:87:
53:ca:2f:14:b8:56:1a:27:b0:13:89:35:96:36:69:
59:1c:90:f6:7b:4b:26:a7:b4:57:f6:9d:69:86:4f:
07:b9:c6:75:19:ab:b9:0e:d2:f6:37:ba:f9:78:00:
3c:9b:16:81:e2:9d:4f:50:1b:8c:83:6e:a6:ee:88:
ce:7e:ba:fd:a2:97:f9:63:6f:bc:fa:b6:04:f3:ab:
b5:6f:70:76:9f:d3:eb:d7:dc:79:76:4c:ec:94:b9:
80:17:7a:a1:29:b3:04:56:70:a5:34:ff:9c:99:ef:
91:8a:37:58:c4:00:f0:1f:19:45:e0:40:68:08:97:
1b:4f:1a:57:47:df:8e:8d:24:97:56:3b:af:c0:c2:
73:87:d5:ad:d7:4c:cb:3a:5a:1d:43:7a:9d:8d:19:
1f:4a:a7:22:2a:70:78:3c:92:e7:68:a1:2b:10:79:
ef:38:3b:36:96:09:0d:35:59:65:6d:7c:5b:fa:7f:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:0B:56:F0:12:39:99:CE:01:21:93:39:A5:17:90:E9:D2:25:AD
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:91:25:f6:f9:2e:59:c9:f2:88:93:9e:51:7e:ca:37:56:
41:04:22:b4:c4:a1:a0:68:c7:07:35:9f:4d:6a:93:23:27:de:
d6:7c:d7:8c:1e:9a:61:2a:f8:47:ce:6c:b8:87:fd:85:ab:2e:
4e:a6:58:20:38:59:f8:a7:81:b0:78:0d:3e:54:46:1b:f2:d7:
ae:c1:f5:cd:9a:62:e3:39:d0:1a:20:e4:73:76:c0:ca:b7:09:
6e:13:44:db:66:7d:17:c5:e0:cf:13:f1:2b:b1:c0:51:3e:f9:
e0:ea:29:2e:d9:88:0a:36:18:31:9c:25:74:2c:a1:c3:f0:2c:
9d:9f:22:27:76:eb:96:c6:62:08:5a:62:36:46:5b:ae:e7:37:
ac:2c:88:c3:1e:eb:54:99:7c:bc:75:a5:dc:53:e1:37:17:98:
9f:fc:91:ef:03:0e:9b:4c:45:c8:de:7b:d1:39:31:f4:f8:ba:
ca:57:eb:3f:01:c1:cb:7d:f2:1b:d0:05:87:5a:e7:8e:f1:1f:
9d:38:aa:4c:19:98:76:01:51:77:ac:3d:b0:8b:10:26:ad:87:
dc:8f:d1:eb:67:cd:7b:f2:30:f5:52:90:30:00:f9:41:b7:e8:
f4:04:77:04:3e:03:ea:93:80:f5:3f:f6:68:48:da:0c:12:86:
56:91:30:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUjtBXugDezcO63xogOlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD
EyhlYzkyMGI1NmYwMTIzOTk5Y2UwMTIxOTMzOWE1MTc5MGU5ZDIyNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiH6qFuuwSlKnRstz5U+4wfuOvZs
gW6mIbS+0fACBY0FpbsZ8JqfxHyZgrsnHtyJ3r2bb2JWU74cZ8W5NDVxXaXbQtOs
ltJq+4dTyi8UuFYaJ7ATiTWWNmlZHJD2e0smp7RX9p1phk8HucZ1Gau5DtL2N7r5
eAA8mxaB4p1PUBuMg26m7ojOfrr9opf5Y2+8+rYE86u1b3B2n9Pr19x5dkzslLmA
F3qhKbMEVnClNP+cme+RijdYxADwHxlF4EBoCJcbTxpXR9+OjSSXVjuvwMJzh9Wt
10zLOlodQ3qdjRkfSqciKnB4PJLnaKErEHnvODs2lgkNNVllbXxb+n9V0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOySC1bwEjmZzgEhkzmlF5Dp0iWtMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFSRJfb5
LlnJ8oiTnlF+yjdWQQQitMShoGjHBzWfTWqTIyfe1nzXjB6aYSr4R85suIf9hasu
TqZYIDhZ+KeBsHgNPlRGG/LXrsH1zZpi4znQGiDkc3bAyrcJbhNE22Z9F8XgzxPx
K7HAUT754OopLtmICjYYMZwldCyhw/AsnZ8iJ3brlsZiCFpiNkZbruc3rCyIwx7r
VJl8vHWl3FPhNxeYn/yR7wMOm0xFyN570Tkx9Pi6ylfrPwHBy33yG9AFh1rnjvEf
nTiqTBmYdgFRd6w9sIsQJq2H3I/R62fNe/Iw9VKQMAD5Qbfo9AR3BD4D6pOA9T/2
aEjaDBKGVpEwlQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:38:46 2025 by rpki-client