This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: MinvH0gC/ZtZw/77QbrMF3x2C2tGD3FGntR3p4kiA0c=
Subject key identifier: C9:D7:FF:E8:35:6C:B6:11:80:1C:76:D9:70:C6:28:32:94:F4:07:E6
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 019AF208BECF142B9C4C5B77ADA9083B3F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 033E
Signing time: Sat 06 Dec 2025 05:00:50 +0000
Manifest this update: Sat 06 Dec 2025 05:00:50 +0000
Manifest next update: Sun 07 Dec 2025 05:00:50 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: I8aCFTN/a+d+ZPlnuiIQmK9LF9m5Fiica8h29TlWlTQ=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:be:cf:14:2b:9c:4c:5b:77:ad:a9:08:3b:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Dec 6 05:00:50 2025 GMT
Not After : Dec 7 05:00:50 2025 GMT
Subject: CN=c9d7ffe8356cb611801c76d970c6283294f407e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:be:45:cb:99:da:a1:5f:a1:79:71:99:cf:
dd:2d:ce:20:da:67:63:09:0c:3a:4e:ef:a1:18:ed:
61:78:12:72:19:fd:a3:28:a6:56:a6:9b:49:32:a1:
5e:9c:32:1d:8e:0c:ec:f5:b9:a3:1a:32:5c:ca:29:
20:79:99:0b:d0:b8:80:2d:27:4e:5b:2a:8f:e9:f2:
65:bd:21:57:47:44:2f:92:81:cc:5c:08:4a:bf:2f:
58:88:80:1f:cc:5a:9c:b9:fa:00:fe:8e:56:b1:d3:
b2:24:1b:ba:5f:88:6a:a1:6e:54:ab:e0:8b:ca:3f:
3c:14:0d:ff:ad:45:a1:4a:fa:87:f5:d4:2c:81:61:
e0:b2:19:92:18:64:06:99:1f:39:65:2a:fd:db:c1:
e8:b2:33:83:03:90:f8:15:46:ec:7d:e8:97:7a:0f:
97:10:e6:7f:0e:14:e9:15:98:d7:bb:75:55:3c:2e:
02:41:ba:73:9f:e3:bd:6c:d6:db:35:4d:be:8e:cd:
f6:b1:25:4d:64:e6:63:ac:43:95:61:b8:bb:e1:74:
18:19:e1:5c:5e:70:f9:77:ff:c9:4b:f5:a3:40:95:
c0:3e:22:32:36:7f:33:e3:76:cb:a7:0f:bd:10:7b:
aa:fd:8a:af:10:1b:62:ea:96:3f:18:f3:e3:08:ab:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:FF:E8:35:6C:B6:11:80:1C:76:D9:70:C6:28:32:94:F4:07:E6
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:4c:99:cc:7a:59:a7:7f:3b:8a:b6:61:9f:82:30:3b:b5:
1c:1b:1a:43:30:ae:bc:4e:b1:e8:8d:f6:61:04:7e:48:77:e6:
97:bd:c3:f4:70:30:72:c2:3f:c5:ce:71:d1:c0:59:35:02:5e:
b0:a7:39:0d:c2:73:36:89:6e:a4:c2:ab:c1:f3:19:f8:b4:a3:
be:2f:43:7f:a8:05:a3:24:fa:07:60:54:4b:1d:f7:fc:de:c4:
48:b6:9b:83:d6:52:16:14:ec:c1:83:ba:f6:84:de:87:f8:94:
d8:c6:99:3f:5a:61:7e:16:53:4b:92:94:c0:fa:54:2d:11:89:
99:a5:1f:2c:cd:d6:6b:a8:e0:c7:25:d8:f3:a4:61:af:54:c2:
52:44:05:35:34:93:73:e3:0a:ec:2e:1c:1c:00:8f:7e:73:d2:
93:09:8d:36:fc:57:76:8e:a0:88:ef:30:65:5b:57:3a:29:d1:
26:ce:d2:84:1b:3d:6c:1f:da:98:f2:87:69:23:08:dd:50:1d:
ac:6a:ac:22:79:be:29:ca:fe:a6:22:ec:88:b3:70:65:9a:91:
43:6b:20:15:80:32:11:b7:66:48:e6:06:4f:9e:a0:b5:72:54:
ce:74:0b:40:d5:01:ee:63:91:d8:60:bb:18:bc:b7:59:9f:ea:
a9:4c:b6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCL7PFCucTFt3rakIOz9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw
ZDViMTEwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD
EyhjOWQ3ZmZlODM1NmNiNjExODAxYzc2ZDk3MGM2MjgzMjk0ZjQwN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wC+RcuZ2qFfoXlxmc/dLc4g2mdj
CQw6Tu+hGO1heBJyGf2jKKZWpptJMqFenDIdjgzs9bmjGjJcyikgeZkL0LiALSdO
WyqP6fJlvSFXR0QvkoHMXAhKvy9YiIAfzFqcufoA/o5WsdOyJBu6X4hqoW5Uq+CL
yj88FA3/rUWhSvqH9dQsgWHgshmSGGQGmR85ZSr928HosjODA5D4FUbsfeiXeg+X
EOZ/DhTpFZjXu3VVPC4CQbpzn+O9bNbbNU2+js32sSVNZOZjrEOVYbi74XQYGeFc
XnD5d//JS/WjQJXAPiIyNn8z43bLpw+9EHuq/YqvEBti6pY/GPPjCKuDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnX/+g1bLYRgBx22XDGKDKU9AfmMB8GA1UdIwQY
MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt
Yzk5OGYwMjkyMTM1LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1
LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSJMmcx6
Wad/O4q2YZ+CMDu1HBsaQzCuvE6x6I32YQR+SHfml73D9HAwcsI/xc5x0cBZNQJe
sKc5DcJzNolupMKrwfMZ+LSjvi9Df6gFoyT6B2BUSx33/N7ESLabg9ZSFhTswYO6
9oTeh/iU2MaZP1phfhZTS5KUwPpULRGJmaUfLM3Wa6jgxyXY86Rhr1TCUkQFNTST
c+MK7C4cHACPfnPSkwmNNvxXdo6giO8wZVtXOinRJs7ShBs9bB/amPKHaSMI3VAd
rGqsInm+Kcr+piLsiLNwZZqRQ2sgFYAyEbdmSOYGT56gtXJUznQLQNUB7mOR2GC7
GLy3WZ/qqUy2OA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:44 2025 by rpki-client