This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: FVId0rsO2HfLsWkFWXhqmxEViYwW9Kj8wAzKOAWwT7c=
Subject key identifier: 97:83:E1:45:C0:94:2F:57:55:44:3F:2B:37:4E:B4:F4:A1:60:D5:C0
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019AF389B75356D68069CABF1292F3B3B99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0492
Signing time: Sat 06 Dec 2025 12:01:20 +0000
Manifest this update: Sat 06 Dec 2025 12:01:20 +0000
Manifest next update: Sun 07 Dec 2025 12:01:20 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: CoztTDX0/ZixnMhX/n6Sz43XZUuLRYUbUKTXesiIB3Q=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:b7:53:56:d6:80:69:ca:bf:12:92:f3:b3:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Dec 6 12:01:20 2025 GMT
Not After : Dec 7 12:01:20 2025 GMT
Subject: CN=9783e145c0942f5755443f2b374eb4f4a160d5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:ec:b5:b7:ca:00:92:cf:b5:60:5e:47:b6:
2b:51:fa:25:92:4a:37:56:0b:be:8e:c3:7c:0a:35:
c6:6e:89:30:19:db:82:92:e5:28:a8:5e:e6:5f:5d:
07:0e:d0:ab:e2:b8:c6:89:cc:ba:67:00:39:d8:60:
f2:45:fe:64:ea:18:7f:e2:a5:78:43:98:ca:ec:2a:
a2:75:6f:12:84:44:4f:41:4b:cb:81:45:b8:7f:09:
7a:90:13:7b:4b:d4:0b:0e:91:91:47:5d:1d:bc:f7:
bf:3b:d3:5b:0c:05:44:c1:11:02:b7:51:b3:92:15:
1b:a2:51:4f:b7:77:53:b5:a7:b2:66:73:3e:b5:40:
1f:56:7e:4c:7f:18:c7:b8:64:b8:0e:a4:d5:3b:4a:
70:8e:e3:a1:62:28:1f:9c:f3:e0:c1:e4:08:96:6e:
89:db:ab:da:75:4e:c9:47:1e:e0:42:b6:fa:bb:61:
bd:1e:17:ed:24:aa:08:f0:78:72:f1:43:5e:d6:31:
39:72:e3:9a:57:93:07:54:5b:77:fe:de:c6:a5:7a:
fc:98:80:67:31:1d:ce:13:05:c5:e9:b3:b0:56:03:
02:71:1a:34:10:3d:b2:f8:3e:60:53:e0:f9:a8:09:
96:e1:4a:94:56:45:83:be:ca:af:08:32:e5:0e:18:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:E1:45:C0:94:2F:57:55:44:3F:2B:37:4E:B4:F4:A1:60:D5:C0
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:fa:8a:0e:bd:3f:a4:d3:6a:a2:dc:f3:7c:a2:9b:fc:c9:
d6:8b:a7:6e:09:78:fb:7b:ff:27:00:17:05:71:00:a3:59:02:
13:58:fc:0a:0f:f2:df:c5:19:80:ad:4d:7c:81:21:88:1b:36:
b8:ce:6d:b8:c0:46:72:63:61:20:22:f4:e8:03:e5:f4:5c:9f:
3a:81:61:d7:d9:4b:9b:cf:19:b1:b8:25:e0:09:85:1d:47:42:
88:8d:cf:2b:cd:92:f9:35:46:01:f1:c1:c6:71:7b:07:0e:29:
d5:22:e9:b7:48:37:b9:ac:b0:5b:cb:31:ea:bc:16:bd:65:f8:
6c:5c:8d:9e:2c:a5:2f:cd:14:8d:20:d7:2a:f0:55:02:dc:55:
2d:cd:da:91:85:b7:69:ac:a0:76:4e:5a:da:6f:ff:a3:c2:c7:
b9:d5:89:8a:dc:d2:1c:6d:98:e4:2f:4d:1f:9f:be:d0:b6:47:
4c:3a:59:12:95:09:9b:ae:2e:62:c4:b0:ec:54:d7:77:48:3d:
42:da:4b:59:db:29:bd:08:66:2c:b6:ed:53:de:b9:e3:e8:af:
0f:51:db:0b:23:f4:5f:81:c3:75:66:1a:07:76:27:69:0e:56:
14:ed:ff:91:40:19:e8:57:ae:d8:e2:ae:c8:ec:70:b4:7f:37:
4d:ed:3b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzibdTVtaAacq/EpLzs7meMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjUxMjA2MTIwMTIwWhcNMjUxMjA3MTIwMTIwWjAzMTEwLwYDVQQD
Eyg5NzgzZTE0NWMwOTQyZjU3NTU0NDNmMmIzNzRlYjRmNGExNjBkNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8HstbfKAJLPtWBeR7YrUfolkko3
Vgu+jsN8CjXGbokwGduCkuUoqF7mX10HDtCr4rjGicy6ZwA52GDyRf5k6hh/4qV4
Q5jK7CqidW8ShERPQUvLgUW4fwl6kBN7S9QLDpGRR10dvPe/O9NbDAVEwRECt1Gz
khUbolFPt3dTtaeyZnM+tUAfVn5MfxjHuGS4DqTVO0pwjuOhYigfnPPgweQIlm6J
26vadU7JRx7gQrb6u2G9HhftJKoI8Hhy8UNe1jE5cuOaV5MHVFt3/t7GpXr8mIBn
MR3OEwXF6bOwVgMCcRo0ED2y+D5gU+D5qAmW4UqUVkWDvsqvCDLlDhjGlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeD4UXAlC9XVUQ/KzdOtPShYNXAMB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLT6ig69
P6TTaqLc83yim/zJ1ounbgl4+3v/JwAXBXEAo1kCE1j8Cg/y38UZgK1NfIEhiBs2
uM5tuMBGcmNhICL06APl9FyfOoFh19lLm88Zsbgl4AmFHUdCiI3PK82S+TVGAfHB
xnF7Bw4p1SLpt0g3uaywW8sx6rwWvWX4bFyNniylL80UjSDXKvBVAtxVLc3akYW3
aaygdk5a2m//o8LHudWJitzSHG2Y5C9NH5++0LZHTDpZEpUJm64uYsSw7FTXd0g9
QtpLWdspvQhmLLbtU9654+ivD1HbCyP0X4HDdWYaB3YnaQ5WFO3/kUAZ6Feu2OKu
yOxwtH83Te077g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:05 2025 by rpki-client