This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: GTopQyShdGQ3VWMVRBD1WGFH2mTXf0JT6kBSXHyOnbE=
Subject key identifier: A6:11:25:B4:5E:87:7A:B8:5C:C9:18:E8:BC:05:22:2D:73:2E:FF:8A
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 019AF3C003346FB849934D86A9AB9FADFCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 1791
Signing time: Sat 06 Dec 2025 13:00:38 +0000
Manifest this update: Sat 06 Dec 2025 13:00:38 +0000
Manifest next update: Sun 07 Dec 2025 13:00:38 +0000
Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: U0ahsFDx5u0UK2eywjGAnw5EwfqVY53uBaJijCxJsRI=)
7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:03:34:6f:b8:49:93:4d:86:a9:ab:9f:ad:fc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Dec 6 13:00:38 2025 GMT
Not After : Dec 7 13:00:38 2025 GMT
Subject: CN=a61125b45e877ab85cc918e8bc05222d732eff8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:af:36:ec:76:6a:96:34:64:fa:56:29:6f:
79:94:46:36:69:bb:ba:87:13:a7:a8:80:11:77:d6:
63:6b:44:6a:5f:17:85:b6:52:aa:4f:b3:7f:38:fc:
cd:5f:3b:a1:34:51:e3:54:a7:2a:43:99:f1:03:36:
b4:51:1c:49:72:c1:09:8e:59:8b:0e:12:70:90:4a:
15:7d:00:0e:6a:a2:90:7a:cb:42:03:e0:48:da:9d:
7d:fd:a7:93:ac:b4:fd:f2:a6:77:f5:f5:e8:ea:60:
14:ce:05:3a:11:5b:86:4d:25:56:51:05:48:c7:98:
ad:6e:2a:d2:2b:47:be:bc:ff:06:bb:70:59:6e:30:
b5:79:05:d0:9c:07:79:cd:50:55:15:5d:81:5b:f0:
2f:78:69:1b:7f:07:f5:60:34:a1:2b:1a:0b:01:80:
84:db:7b:e4:1b:c8:a0:90:21:07:8a:bb:45:f4:eb:
18:80:87:c8:ec:a4:a2:d8:f5:53:5f:66:a9:6c:39:
29:c2:04:a5:59:82:f2:9e:b6:91:87:1c:90:a6:01:
ae:d8:3b:52:6c:2b:83:ba:b8:5a:49:0d:f4:2b:c5:
a9:b3:18:94:8e:fa:9a:cd:8e:13:41:2d:aa:34:7d:
3c:8f:35:6c:18:96:c1:c0:53:d1:41:3d:49:65:50:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:25:B4:5E:87:7A:B8:5C:C9:18:E8:BC:05:22:2D:73:2E:FF:8A
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3f:f3:75:c3:08:dc:30:46:17:e6:40:05:53:ef:e6:db:fb:
d1:ef:a9:21:c8:c6:de:b8:d0:c8:79:2c:3a:d8:b8:81:f1:2d:
fc:d9:05:26:3b:b8:87:e6:bd:88:df:55:27:5f:40:55:89:45:
29:2e:11:67:da:c2:6d:91:5a:fa:4d:e9:22:00:36:b5:87:25:
8e:a0:8f:1d:13:60:4f:2c:62:dd:a5:a0:fd:18:a6:2b:cc:6e:
0e:5f:39:53:7f:37:3e:74:d6:7b:15:2c:81:f3:f1:0e:08:d5:
d1:08:17:3d:60:dc:61:a7:8d:76:37:39:70:be:a2:99:8d:1f:
f1:1b:91:98:f6:dc:ce:a9:b5:65:53:11:75:18:37:c7:9c:10:
22:29:16:b4:fd:c9:26:bc:3e:a6:1c:42:a4:c5:54:20:2b:d9:
eb:03:cd:e5:51:db:41:de:e9:d3:9f:f7:bc:8c:cb:00:6f:35:
85:e4:51:c7:87:b3:e8:3f:bc:df:de:e4:e6:f0:c8:16:39:88:
ec:3f:22:87:e6:2e:dd:80:b0:00:68:5f:02:0b:c3:1f:1c:b7:
94:7d:3c:bd:98:cd:5a:8a:1d:06:9f:6d:47:9a:08:b5:a5:d7:
f2:a6:c0:00:bc:45:b7:c7:96:e0:63:fb:90:f3:24:75:c8:c5:
c2:3c:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:41:44 2025 by rpki-client