This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: aASnR4PNf+gSrsQFQvhHr3McOaeGLEZyZ7P5csNRFKA=
Subject key identifier: 73:BF:39:78:D2:91:7B:8E:62:28:06:50:DB:1E:3F:81:AE:FC:E8:66
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 019B3EA35D65ADA75E25FD1213F6CAD9A708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0E1D
Signing time: Sun 21 Dec 2025 02:00:52 +0000
Manifest this update: Sun 21 Dec 2025 02:00:52 +0000
Manifest next update: Mon 22 Dec 2025 02:00:52 +0000
Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: tkNe4r/vFjdw5v1htmfXkr9YSrdvty0wBwvhzf4tmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:5d:65:ad:a7:5e:25:fd:12:13:f6:ca:d9:a7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Dec 21 02:00:52 2025 GMT
Not After : Dec 22 02:00:52 2025 GMT
Subject: CN=73bf3978d2917b8e62280650db1e3f81aefce866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:67:8a:6c:50:9a:aa:e1:36:c2:2c:4d:2b:
ce:c4:75:e0:59:48:ed:27:7a:9c:50:29:e5:00:48:
00:9b:d3:ab:0a:21:0d:06:66:ba:e6:bc:ba:c8:3a:
67:d8:82:7c:f9:d0:46:dc:f6:87:1e:d3:3f:1c:d5:
e2:d7:5f:eb:04:37:22:b3:5b:31:ae:69:7c:79:f5:
1e:81:65:e5:88:6d:d3:d2:e1:f5:e4:63:78:fa:99:
76:84:3e:56:d4:b5:56:88:e3:5d:a0:bf:e9:41:09:
1a:f4:30:f1:6c:f4:87:fc:2b:02:99:3b:36:7b:f9:
4b:83:94:57:f0:14:e0:46:22:3d:98:db:4c:8c:65:
c5:9c:1c:40:58:f7:93:b0:61:9e:3c:1e:63:c6:3d:
ab:4c:c6:71:7a:7d:6c:93:90:5a:b3:12:87:b4:2d:
f7:10:21:c1:c3:45:f0:52:43:be:37:f2:bd:86:06:
8d:8f:8d:63:c0:cd:b7:aa:31:d3:03:81:03:d2:e3:
a7:c3:92:f1:0a:29:da:91:e0:2b:e9:40:41:89:6c:
4c:dd:7d:76:94:de:04:b4:e0:38:40:cb:29:a6:eb:
ba:82:88:1b:0b:ac:bb:25:8c:5c:bb:9c:8d:73:14:
83:c5:6f:e0:6c:af:e7:96:ce:c3:fd:03:0b:b6:95:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:39:78:D2:91:7B:8E:62:28:06:50:DB:1E:3F:81:AE:FC:E8:66
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:36:a7:7c:d3:91:93:59:4c:c8:02:1c:01:e5:6c:f8:a1:
30:d2:2d:35:e4:b8:ca:fc:ad:cb:88:d6:cb:87:13:b8:84:74:
ec:3e:d8:e5:8c:fc:63:f2:ec:c3:6c:87:32:09:29:eb:1d:a7:
5b:a8:18:43:ae:1b:11:7f:5e:30:fb:4d:8a:c2:04:3a:9c:c1:
40:fa:db:8f:38:e1:34:a8:c9:02:56:c8:52:4e:c5:61:c9:0c:
2c:ab:9a:7c:09:ab:da:09:9e:0c:e0:ee:1b:64:75:3d:70:ef:
b5:46:0f:67:4e:a2:b8:ca:7a:f8:33:11:1d:f9:ec:8e:36:c3:
f4:d2:a0:0c:e3:4a:42:9f:14:5a:49:30:d3:f4:15:4d:2f:16:
b1:8c:8e:c7:84:b3:92:83:2d:8e:d0:de:9d:fc:01:9d:ac:91:
51:61:04:30:8d:6c:c4:bd:a9:af:2d:2a:c1:5a:1e:ad:73:cb:
d4:3f:76:8a:15:20:73:6c:e8:e4:4b:85:ba:da:48:ae:a3:46:
3d:f7:22:97:37:15:72:e4:b0:b9:1c:05:e1:92:5a:b3:f7:6d:
50:49:2a:13:9b:2e:f3:36:eb:81:1c:52:87:62:c7:55:cb:67:
d3:9f:3c:6a:9d:99:b6:0a:9f:54:1b:be:26:13:05:a4:aa:3a:
50:db:60:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+o11lradeJf0SE/bK2acIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh
Yzk5YzUwHhcNMjUxMjIxMDIwMDUyWhcNMjUxMjIyMDIwMDUyWjAzMTEwLwYDVQQD
Eyg3M2JmMzk3OGQyOTE3YjhlNjIyODA2NTBkYjFlM2Y4MWFlZmNlODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp5nimxQmqrhNsIsTSvOxHXgWUjt
J3qcUCnlAEgAm9OrCiENBma65ry6yDpn2IJ8+dBG3PaHHtM/HNXi11/rBDcis1sx
rml8efUegWXliG3T0uH15GN4+pl2hD5W1LVWiONdoL/pQQka9DDxbPSH/CsCmTs2
e/lLg5RX8BTgRiI9mNtMjGXFnBxAWPeTsGGePB5jxj2rTMZxen1sk5BasxKHtC33
ECHBw0XwUkO+N/K9hgaNj41jwM23qjHTA4ED0uOnw5LxCinakeAr6UBBiWxM3X12
lN4EtOA4QMsppuu6gogbC6y7JYxcu5yNcxSDxW/gbK/nls7D/QMLtpXxUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO/OXjSkXuOYigGUNseP4Gu/OhmMB8GA1UdIwQY
MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt
NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi
LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeU2p3zT
kZNZTMgCHAHlbPihMNItNeS4yvyty4jWy4cTuIR07D7Y5Yz8Y/Lsw2yHMgkp6x2n
W6gYQ64bEX9eMPtNisIEOpzBQPrbjzjhNKjJAlbIUk7FYckMLKuafAmr2gmeDODu
G2R1PXDvtUYPZ06iuMp6+DMRHfnsjjbD9NKgDONKQp8UWkkw0/QVTS8WsYyOx4Sz
koMtjtDenfwBnayRUWEEMI1sxL2pry0qwVoerXPL1D92ihUgc2zo5EuFutpIrqNG
PfcilzcVcuSwuRwF4ZJas/dtUEkqE5su8zbrgRxSh2LHVctn0588ap2ZtgqfVBu+
JhMFpKo6UNtgBA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:28 2025 by rpki-client