This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: DKCt6278Remw/4uMUzuJW4kxqIAAUk8Jt+zwGydQfwo=
Subject key identifier: 6D:0B:3A:EC:D3:7B:BD:C5:03:BE:26:99:EC:24:CC:6B:39:5F:58:DB
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019B40C8ADC9B46BF7583D4789E329AAB036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0C3F
Signing time: Sun 21 Dec 2025 12:00:51 +0000
Manifest this update: Sun 21 Dec 2025 12:00:51 +0000
Manifest next update: Mon 22 Dec 2025 12:00:51 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: ck36xvMXObLTZMAPjUsnIJiWSc6Opb8LTEgK2scCgMU=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:c8:ad:c9:b4:6b:f7:58:3d:47:89:e3:29:aa:b0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Dec 21 12:00:51 2025 GMT
Not After : Dec 22 12:00:51 2025 GMT
Subject: CN=6d0b3aecd37bbdc503be2699ec24cc6b395f58db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:7e:57:e5:fd:4c:e7:7b:37:45:6a:ab:13:
d1:9b:ce:88:df:5e:9b:8d:c0:92:62:c3:70:21:f8:
58:e5:c2:bd:68:c8:ac:cc:84:34:18:1a:b5:8e:76:
bf:59:bd:a3:9d:be:60:a7:c2:c9:ce:23:07:06:8e:
0a:ca:f2:77:87:7a:56:99:8d:28:44:b7:3e:1c:4f:
a6:c9:fc:b4:86:06:c6:e2:40:19:18:c3:1e:38:2a:
c3:6d:ca:af:32:ff:f6:54:49:50:40:fc:54:63:5e:
ab:bd:0d:c6:69:59:3d:65:d6:c4:1f:f2:95:15:1d:
c4:d6:f7:bf:1b:2f:7d:91:8a:27:4c:b0:5a:7b:aa:
c4:b9:f3:fc:d2:a2:9e:fc:8e:25:66:fc:08:d7:f6:
6a:1b:e0:62:02:86:17:df:38:15:b3:7b:1c:8f:53:
0d:d7:b0:c9:81:71:01:b8:a7:e9:e6:51:ae:f6:1f:
4e:eb:56:be:b3:4b:17:2d:d7:32:59:a2:15:3e:54:
22:42:a5:40:bc:42:3c:61:0c:ca:09:ad:5f:f6:16:
3e:db:46:c2:d8:40:4d:e7:fd:84:87:fa:c8:33:bd:
6d:9d:7a:da:98:0a:9d:c2:19:f0:32:b8:dc:f8:64:
16:6d:69:8a:5f:d8:c5:4f:9a:24:5f:47:b7:d5:38:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:3A:EC:D3:7B:BD:C5:03:BE:26:99:EC:24:CC:6B:39:5F:58:DB
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9c:1e:26:9c:40:fa:c0:7b:ee:d5:eb:da:32:9c:06:29:3e:
04:57:0f:1e:28:a4:bf:24:48:d6:31:a8:8b:dc:cf:ad:be:ee:
f7:60:22:3f:ca:b1:ca:6c:bd:ba:ee:c0:01:8d:a8:f1:47:1b:
70:80:da:ce:98:43:ed:79:e5:5f:21:3b:03:d4:00:bf:de:e0:
e2:ce:53:45:e0:46:f4:22:64:cf:d0:11:f8:c2:75:c4:62:23:
36:33:39:ee:9a:8f:2c:05:ad:c4:a6:fa:8e:69:4e:36:5c:46:
1f:dd:33:92:bd:b6:0f:6f:e8:b8:0c:92:5f:b0:0c:00:a9:28:
c5:69:b4:ae:42:a3:39:2a:1d:1a:e4:23:76:92:9c:9a:39:df:
b5:93:9a:c2:5f:7c:aa:a5:64:ce:57:cc:16:5f:3d:17:31:74:
bd:57:87:ba:cb:5c:d5:52:0f:55:ad:e9:c8:62:f5:b6:a7:42:
07:c4:be:37:9e:98:32:60:81:a7:52:e0:75:7b:b4:c4:d6:32:
4a:94:c0:5f:45:40:11:b3:db:4c:56:3e:01:32:c6:0a:ac:3c:
91:73:ef:34:60:a0:71:0c:3a:ba:ac:b2:73:76:89:67:d9:22:
1e:be:b9:fd:e9:a2:d6:93:92:45:e4:3e:65:c3:7e:33:a6:25:
b6:53:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:24 2025 by rpki-client