This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File: pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier: oDZZYyBceiz3l9fSaj8DExvI74XtRM6jBDWgWoZhmts=
Subject key identifier: 93:EE:28:96:14:98:21:F8:14:7E:FE:BE:FB:25:48:CB:04:F3:E4:2D
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 019AF23F94F7E00FAEC4FB597861981ECD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 06:00:44 +0000
Manifest this update: Sat 06 Dec 2025 06:00:44 +0000
Manifest next update: Sun 07 Dec 2025 06:00:44 +0000
Files and hashes: 1: 0jMTux-3swOFYJuHmZf_7dIUV-M.roa (hash: FrxVTzFJQeHe8mjWBidC6aBhDpb0ro+aRCPDmQWBbvc=)
2: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
3: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
4: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
5: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
6: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: JeI3SQ4ffvs0yVT7UHzhKuVvwXOeoRGBft49W8iol+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:94:f7:e0:0f:ae:c4:fb:59:78:61:98:1e:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Dec 6 06:00:44 2025 GMT
Not After : Dec 7 06:00:44 2025 GMT
Subject: CN=93ee2896149821f8147efebefb2548cb04f3e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:50:5b:77:35:c9:d2:98:7d:06:71:6f:19:
55:3f:61:e7:24:ba:69:aa:92:74:99:1d:00:1e:0e:
64:74:d0:08:6d:7c:3f:bb:d2:bd:66:b6:b9:40:60:
2b:3f:bf:05:be:12:bc:fe:2e:5a:9c:45:ae:ce:82:
9a:de:83:c1:40:3c:ca:30:0d:e0:87:c8:33:ca:01:
0e:a3:ab:02:2c:92:39:f4:d2:94:73:c2:c6:a9:fd:
1a:9f:87:50:9b:ce:c9:48:a9:08:54:42:9a:d6:6c:
6a:3b:61:49:fd:1d:76:f8:e3:a8:58:27:c1:90:57:
20:98:db:51:2f:e6:3b:9c:8f:41:42:03:09:d6:d8:
d8:25:f0:50:8a:80:e8:da:51:43:46:33:56:99:b3:
fd:0f:7a:49:7d:5a:47:f1:d6:b9:16:1f:a3:e8:f7:
3a:6a:4d:71:cf:db:74:86:74:07:37:f0:30:80:b5:
8a:33:d0:d3:72:82:ca:eb:42:db:79:98:7d:8e:e9:
26:d2:85:14:6c:21:91:c9:5d:92:82:02:a4:ab:e7:
b0:38:a5:d0:48:c6:c8:02:e9:fe:52:d1:86:38:d3:
81:f1:fb:02:50:36:8c:59:e0:d2:2e:5f:0b:8d:e5:
f2:d1:db:89:ce:82:60:a1:19:3f:68:02:5c:0e:b8:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:28:96:14:98:21:F8:14:7E:FE:BE:FB:25:48:CB:04:F3:E4:2D
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:83:e4:62:c2:e3:54:43:6d:93:9e:92:a5:88:db:55:4a:75:
62:69:13:6c:77:a3:e1:85:cc:59:ba:b3:ac:a4:06:67:44:1b:
77:56:b2:fe:09:35:7d:71:32:5a:48:9c:9e:b6:e4:b6:d1:f4:
0d:47:fe:c6:7a:0e:12:77:b2:54:09:fb:1f:5b:e4:d2:32:e5:
75:73:22:27:cb:db:a4:37:0a:06:ca:7d:98:13:70:48:1a:1a:
20:02:8a:ff:8b:3b:be:66:aa:86:d4:e5:da:e1:4a:92:01:7e:
98:d5:35:9e:15:e0:db:e7:34:7c:e7:0b:ba:90:d4:df:79:b5:
00:97:0c:a7:7f:55:d3:b6:b9:08:8a:ca:3e:61:65:56:73:cf:
66:cc:01:ac:cb:b9:65:e8:49:88:0f:5e:4a:f0:0a:f4:20:17:
25:30:1c:eb:75:be:68:3b:0b:9b:e0:06:8a:1f:e4:4a:1d:43:
a5:76:71:97:0f:23:1a:07:2e:dd:17:ad:87:e2:04:01:f0:a4:
06:5b:7b:ce:88:7d:ac:e6:44:85:9f:e5:f4:0c:e9:3c:64:0c:
94:4e:2e:5b:a3:ca:65:9c:5d:3c:92:fb:63:f1:44:76:4b:65:
b2:63:e6:20:4e:85:dc:bf:02:f5:8a:16:98:ee:72:2d:bb:c5:
ef:3e:90:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP5T34A+uxPtZeGGYHs1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg5M2VlMjg5NjE0OTgyMWY4MTQ3ZWZlYmVmYjI1NDhjYjA0ZjNlNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOBQW3c1ydKYfQZxbxlVP2HnJLpp
qpJ0mR0AHg5kdNAIbXw/u9K9Zra5QGArP78FvhK8/i5anEWuzoKa3oPBQDzKMA3g
h8gzygEOo6sCLJI59NKUc8LGqf0an4dQm87JSKkIVEKa1mxqO2FJ/R12+OOoWCfB
kFcgmNtRL+Y7nI9BQgMJ1tjYJfBQioDo2lFDRjNWmbP9D3pJfVpH8da5Fh+j6Pc6
ak1xz9t0hnQHN/AwgLWKM9DTcoLK60LbeZh9jukm0oUUbCGRyV2SggKkq+ewOKXQ
SMbIAun+UtGGONOB8fsCUDaMWeDSLl8LjeXy0duJzoJgoRk/aAJcDrhMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPuKJYUmCH4FH7+vvslSMsE8+QtMB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoPkYsLj
VENtk56SpYjbVUp1YmkTbHej4YXMWbqzrKQGZ0Qbd1ay/gk1fXEyWkicnrbkttH0
DUf+xnoOEneyVAn7H1vk0jLldXMiJ8vbpDcKBsp9mBNwSBoaIAKK/4s7vmaqhtTl
2uFKkgF+mNU1nhXg2+c0fOcLupDU33m1AJcMp39V07a5CIrKPmFlVnPPZswBrMu5
ZehJiA9eSvAK9CAXJTAc63W+aDsLm+AGih/kSh1DpXZxlw8jGgcu3Reth+IEAfCk
Blt7zoh9rOZEhZ/l9AzpPGQMlE4uW6PKZZxdPJL7Y/FEdktlsmPmIE6F3L8C9YoW
mO5yLbvF7z6Qyw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:02 2025 by rpki-client