This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: 5Wr/pLIroub1rV2huOIVxQBWGSwQvuuR+03eh/WqYsA=
Subject key identifier: 24:F9:53:C2:CC:4E:F1:41:7D:BD:E1:1B:8F:8F:0F:AD:2E:6C:DE:95
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019AF2770671E42BA67E7E7D31FD6B881FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 13C1
Signing time: Sat 06 Dec 2025 07:01:17 +0000
Manifest this update: Sat 06 Dec 2025 07:01:17 +0000
Manifest next update: Sun 07 Dec 2025 07:01:17 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: Z+zlEeqit4GZw5yaFRnee6n0o295QXaHy0mgEP0oeKU=)
2: O18qD-IOxU7Qpx-7qCdZCriatME.roa (hash: XB9lqyR5AkwxeYq52oBczF39tInCtjYqPPhU7+xJ+5I=)
3: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
4: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:06:71:e4:2b:a6:7e:7e:7d:31:fd:6b:88:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Dec 6 07:01:17 2025 GMT
Not After : Dec 7 07:01:17 2025 GMT
Subject: CN=24f953c2cc4ef1417dbde11b8f8f0fad2e6cde95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:a2:1a:75:e0:81:b0:2a:e4:9c:fe:74:6f:
3f:46:4c:85:9e:03:fa:f6:6a:5f:cb:f4:9c:9e:7d:
d4:61:e8:39:37:0e:c9:a4:d5:8c:b2:31:ca:d1:34:
e3:27:c0:3f:eb:20:b7:a0:af:a5:06:11:1d:e7:f4:
a8:5c:d6:ef:11:2b:f1:d5:ea:e5:cb:21:1b:b5:ef:
31:95:b4:55:7d:ff:8e:db:fb:b6:f1:e4:fd:6b:9f:
b3:7a:1a:bd:b2:fc:c9:cf:f9:46:8a:03:3a:d0:47:
42:95:95:df:b5:8d:98:ee:5c:3c:70:ee:85:8a:6e:
07:54:c7:9e:63:97:58:04:62:cb:92:b1:26:36:84:
3d:87:e0:1f:02:16:ca:fe:5f:8e:b9:b9:17:0f:4e:
5b:37:79:f7:aa:3a:88:a7:a1:10:5c:90:93:3e:21:
a0:ce:9f:80:a6:bb:f6:f3:cf:53:07:57:b1:a2:ba:
c1:ff:c2:6a:14:a4:3a:8f:53:19:c9:77:81:aa:f8:
8c:ac:67:2c:58:b6:93:3d:5f:a0:5a:04:4c:38:04:
d6:88:6b:09:55:e3:51:93:55:d9:13:ab:ed:78:91:
45:bc:6e:6f:43:4f:84:e4:29:ef:74:58:d6:d7:f7:
8d:26:8e:ca:14:60:02:8f:3b:b9:3f:c7:62:b8:34:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:53:C2:CC:4E:F1:41:7D:BD:E1:1B:8F:8F:0F:AD:2E:6C:DE:95
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:90:e5:1c:5b:68:7f:34:e9:18:68:3e:c0:46:eb:9d:52:00:
16:57:c0:48:ed:ee:5d:0e:b4:37:f5:21:8f:9b:6b:bf:4e:aa:
5f:29:97:dc:47:bd:04:09:f1:55:da:7d:ec:93:40:87:af:bd:
21:fa:42:57:2e:ce:9b:52:19:2e:42:45:6b:18:bb:3b:b5:95:
7f:2d:08:65:40:ec:49:f5:a7:52:ba:f7:3c:ae:d8:5b:80:6a:
b6:f5:84:bf:c0:02:6b:b3:c3:f2:12:eb:3b:ac:5d:95:c3:ba:
75:25:d2:fe:b1:eb:63:11:5b:0d:8d:a4:18:67:5d:6d:d7:a4:
63:2a:52:ca:13:9d:c6:44:42:ea:67:59:44:01:32:81:0d:6c:
90:0d:f4:70:1d:bd:91:5b:b2:e1:99:15:4c:4f:64:60:e2:09:
cd:d0:99:f1:c1:fb:00:a6:8a:b8:77:a7:0f:f6:8a:3b:05:21:
bd:84:e2:ac:91:3a:dc:20:f9:2e:5a:69:62:3d:bd:b9:87:99:
82:cd:a0:44:45:3f:6c:0d:4f:9c:6f:f5:e4:d0:01:01:1e:22:
18:14:ce:0b:a0:f7:5e:09:28:ee:d7:ae:27:78:b6:e0:71:f9:
55:7f:fb:38:8d:f9:fb:d0:aa:25:d8:47:c6:f5:a1:a8:d7:17:
ec:29:85:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydwZx5Cumfn59Mf1riB/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz
YTAzZWMwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD
EygyNGY5NTNjMmNjNGVmMTQxN2RiZGUxMWI4ZjhmMGZhZDJlNmNkZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjGiGnXggbAq5Jz+dG8/RkyFngP6
9mpfy/Scnn3UYeg5Nw7JpNWMsjHK0TTjJ8A/6yC3oK+lBhEd5/SoXNbvESvx1erl
yyEbte8xlbRVff+O2/u28eT9a5+zehq9svzJz/lGigM60EdClZXftY2Y7lw8cO6F
im4HVMeeY5dYBGLLkrEmNoQ9h+AfAhbK/l+OubkXD05bN3n3qjqIp6EQXJCTPiGg
zp+Aprv2889TB1exorrB/8JqFKQ6j1MZyXeBqviMrGcsWLaTPV+gWgRMOATWiGsJ
VeNRk1XZE6vteJFFvG5vQ0+E5CnvdFjW1/eNJo7KFGACjzu5P8diuDRJQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT5U8LMTvFBfb3hG4+PD60ubN6VMB8GA1UdIwQY
MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt
NDI2MDM5Nzg4OTE5LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5
LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZDlHFto
fzTpGGg+wEbrnVIAFlfASO3uXQ60N/Uhj5trv06qXymX3Ee9BAnxVdp97JNAh6+9
IfpCVy7Om1IZLkJFaxi7O7WVfy0IZUDsSfWnUrr3PK7YW4BqtvWEv8ACa7PD8hLr
O6xdlcO6dSXS/rHrYxFbDY2kGGddbdekYypSyhOdxkRC6mdZRAEygQ1skA30cB29
kVuy4ZkVTE9kYOIJzdCZ8cH7AKaKuHenD/aKOwUhvYTirJE63CD5LlppYj29uYeZ
gs2gREU/bA1PnG/15NABAR4iGBTOC6D3Xgko7teuJ3i24HH5VX/7OI35+9CqJdhH
xvWhqNcX7CmF8A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:47 2025 by rpki-client