This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File: scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier: /iv+66/Gn9bXHTmMLXIShT/B5cMrksNMgH6L8A1rC9c=
Subject key identifier: 93:86:A7:E6:40:16:FB:60:87:9F:A6:92:A4:F7:07:20:12:FB:A0:16
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 019AF50B13B52232B7AEAB65949A110AFC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number: 0BC8
Signing time: Sat 06 Dec 2025 19:02:15 +0000
Manifest this update: Sat 06 Dec 2025 19:02:15 +0000
Manifest next update: Sun 07 Dec 2025 19:02:15 +0000
Files and hashes: 1: 1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa (hash: fTf9uHn8S4snxNzJSBwP8hjJbSyOEDEo+V6Skd5EbnQ=)
2: mzggpIs3sQdC-By4RECl5EHSVoo.roa (hash: HOfUhS8ipu1UXqbPyFHe1CLF65LINHNNkw7+cQ+eI7E=)
3: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: QTFBiZ4scSXy4SVVAfmD3Xa1D9MRnioCRFsOlDe+L9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:13:b5:22:32:b7:ae:ab:65:94:9a:11:0a:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Dec 6 19:02:15 2025 GMT
Not After : Dec 7 19:02:15 2025 GMT
Subject: CN=9386a7e64016fb60879fa692a4f7072012fba016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:06:50:15:1d:c2:86:b1:cc:42:33:e7:b4:
91:02:e6:f2:84:6a:ba:18:67:58:99:d5:e5:23:d0:
e2:dc:76:c8:86:bc:34:11:6c:0a:c0:b8:e7:ab:60:
ee:17:e5:ab:74:59:bb:58:61:ff:ea:b3:ab:93:f8:
ea:44:d5:2c:76:06:e7:bd:e0:1e:57:ee:d7:75:ad:
6a:05:55:d9:bb:93:a8:f8:f9:e0:be:63:6e:d8:6e:
80:53:1a:c5:eb:4e:71:3f:e6:39:ed:e6:ae:63:d6:
21:5c:ad:1b:97:af:cb:24:81:37:a7:ad:bc:48:80:
61:c4:b3:b5:3a:b0:32:e9:3b:11:db:04:c4:7e:73:
1c:f5:1e:3e:9c:90:85:f8:55:3c:bc:03:39:ca:8e:
bb:8a:9d:42:22:1c:6c:09:15:e3:e5:0a:18:48:a0:
ab:41:66:c3:50:b8:e6:a7:d4:b3:68:ee:44:26:fa:
dc:89:5e:d8:39:02:cf:3d:00:bb:42:34:7a:53:ae:
40:01:c2:1f:55:6b:9e:4a:ea:a6:33:8e:aa:61:24:
02:58:83:cb:26:45:41:43:25:fb:c6:fc:16:93:f0:
40:61:42:9a:86:a0:ff:de:88:f0:43:4d:67:8a:1e:
95:0c:23:8c:c6:59:6e:2a:7b:e4:37:7d:a0:1e:0c:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:A7:E6:40:16:FB:60:87:9F:A6:92:A4:F7:07:20:12:FB:A0:16
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:8f:17:5a:81:b2:57:cc:ef:9f:ad:75:ab:cf:87:a0:37:
8d:91:1c:63:74:9b:57:20:f7:e7:d6:53:09:c0:95:08:65:e9:
52:7d:ee:4b:7a:e2:3f:e8:64:d1:44:a7:00:6e:8f:f4:76:19:
8f:36:e4:ef:62:2c:85:bb:fd:82:2a:13:ff:eb:fb:7c:66:9d:
50:d0:4b:49:d5:42:e8:ca:d0:61:00:22:cd:dd:50:ae:c8:f3:
ee:9b:ba:b0:d8:10:59:51:ae:e2:22:fb:b9:43:27:e8:c0:d5:
f7:91:c0:97:69:90:01:4f:be:19:59:88:80:df:ed:35:29:6e:
e5:87:b3:61:cd:e7:8e:88:0e:fd:d4:35:39:1a:27:06:cc:91:
42:50:b3:ae:4b:81:6c:78:e9:d6:0c:d4:ff:ce:1e:48:ad:9d:
2f:94:cb:0d:35:85:7b:81:e1:08:fa:db:df:77:6d:6b:28:21:
0c:53:82:31:72:33:6c:7b:75:ac:1c:a1:4d:f5:83:42:0a:d6:
89:78:78:13:be:68:f0:d1:01:d1:71:36:28:34:a8:17:23:44:
02:aa:39:76:a8:62:62:51:a5:ba:55:59:16:c2:44:55:83:64:
ab:21:89:70:a6:1a:04:0e:4b:06:08:af:9a:5a:52:9c:38:19:
de:a9:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:37:14 2025 by rpki-client