This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: 3HqMbZLytZXk6ql+IX4IJm4vYPZV00b+mvlyLjzVN2Q=
Subject key identifier: 4E:AD:AA:AE:61:D5:D8:B4:F4:27:F5:BF:F6:92:C6:71:ED:65:C4:47
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019AF1647A520457DE33948DF306C799CBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 130A
Signing time: Sat 06 Dec 2025 02:01:25 +0000
Manifest this update: Sat 06 Dec 2025 02:01:25 +0000
Manifest next update: Sun 07 Dec 2025 02:01:25 +0000
Files and hashes: 1: 4nkxi3-lAvnol4KZpv_fbMO-o8Y.roa (hash: 7IJ8WtHdrV8cqGqjR8uILsd0Nv/W6isRILc3Ixuy+NU=)
2: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: wHYEvfIaKja7QDGevhLNmHUfb4kXByGRSdo6351Tsfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:7a:52:04:57:de:33:94:8d:f3:06:c7:99:cb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Dec 6 02:01:25 2025 GMT
Not After : Dec 7 02:01:25 2025 GMT
Subject: CN=4eadaaae61d5d8b4f427f5bff692c671ed65c447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:51:61:58:3a:0b:f5:2d:d8:1a:79:19:e0:
6c:63:72:f7:c8:38:66:1f:2f:57:8e:91:d2:0f:5f:
f9:1f:46:bf:ea:2e:ac:a3:1b:1b:a5:7e:5e:dc:7b:
6e:f8:8f:44:5b:a8:31:0b:96:b1:a1:9a:60:d4:d5:
7a:9a:da:45:3c:c0:ee:f1:26:28:14:24:eb:51:47:
1e:d6:88:27:0c:57:19:d4:7c:8a:32:75:a8:29:5e:
17:68:8b:81:57:67:07:57:01:87:73:c1:6d:cc:a6:
2f:82:bc:ae:72:03:d4:ab:f6:8c:39:df:1b:8a:1b:
e7:46:ef:72:97:a1:bf:9f:f2:c5:3e:16:df:a9:bb:
7e:0c:8b:ff:75:5d:57:69:4b:78:c3:11:ee:36:55:
e1:f4:9e:87:ab:cf:ca:8a:c3:7e:cc:d9:9f:f6:cf:
49:62:13:c2:9f:ba:8f:02:4e:53:c5:4b:21:ac:a1:
0a:60:99:7e:cd:42:11:a0:f1:ca:50:c1:58:34:a4:
45:a1:c0:cb:2a:8a:f0:44:f9:c2:da:71:25:88:c5:
fc:69:d6:cb:1e:b8:18:e2:c7:76:26:05:aa:76:69:
44:11:3c:36:75:79:11:c9:9d:c9:a6:9a:5f:ec:40:
69:e9:8c:54:97:84:f2:db:d7:45:c5:03:dc:0e:ba:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:AA:AE:61:D5:D8:B4:F4:27:F5:BF:F6:92:C6:71:ED:65:C4:47
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7d:c6:c8:3e:b0:d5:80:01:b6:ed:ad:d9:eb:b3:0b:fa:61:
49:0e:a5:bf:3e:b8:e0:8a:bb:82:c8:8a:8f:00:ce:83:44:a0:
ff:9a:f6:07:f2:70:4e:47:22:25:a2:a0:a9:09:a3:ad:e0:01:
64:c8:e2:b3:61:ca:d4:cb:49:9b:e4:ca:92:2f:27:be:ff:3a:
7f:ee:3c:fe:3f:30:cf:3f:36:ad:a3:dc:bf:46:8c:30:54:99:
08:64:25:ea:bf:c4:5a:3f:25:a6:44:c8:52:16:c6:59:14:47:
12:7a:55:2a:f1:2d:73:6a:7a:79:5e:16:fd:42:f7:d2:68:e8:
16:46:2b:7b:c7:48:21:df:8d:91:a4:0e:84:df:0e:8f:03:31:
4f:61:99:b9:1a:05:91:fe:45:f3:fb:cd:9c:93:db:6c:6d:e8:
f9:8b:5f:ab:b0:bc:97:84:44:d7:09:22:18:58:88:03:bb:b7:
19:c9:32:fd:8e:a0:75:ef:44:30:66:55:06:bb:70:f8:5a:33:
60:c7:77:16:73:82:89:b9:42:84:8d:41:f3:8d:09:13:1e:c6:
cc:3d:73:a4:40:c8:e7:f1:0a:ab:fe:11:ff:d5:29:0b:ce:f0:
57:2e:d7:94:f5:31:a9:55:2d:f8:56:5d:49:ef:30:fb:44:5c:
59:23:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:09 2025 by rpki-client