This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: RlQHoHIwwk5zc2U2RbA6x4nz5w2yeLZNzR17ylRBzEQ=
Subject key identifier: 73:9C:E6:71:1D:02:CB:8B:B6:CA:CA:E9:FD:9A:55:AB:DA:61:A7:77
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019B529806374E8D3F495312C8998B023C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0E3E
Signing time: Wed 24 Dec 2025 23:00:53 +0000
Manifest this update: Wed 24 Dec 2025 23:00:53 +0000
Manifest next update: Thu 25 Dec 2025 23:00:53 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: 70CaMpsxkGpuYsvvSJeYRAPDBFtrd0E4HHYTZARUTYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:98:06:37:4e:8d:3f:49:53:12:c8:99:8b:02:3c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Dec 24 23:00:53 2025 GMT
Not After : Dec 25 23:00:53 2025 GMT
Subject: CN=739ce6711d02cb8bb6cacae9fd9a55abda61a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:2a:7e:b5:5d:a6:3b:cb:8b:6f:d6:2f:0a:
00:8e:80:1e:f7:4b:33:ba:93:61:e6:11:2e:bf:b6:
8d:f8:d4:a8:83:e2:c5:b5:9f:61:23:8d:45:ef:34:
eb:ce:45:68:cd:a9:17:fd:70:a2:4e:17:ab:78:e1:
66:9d:91:a8:bc:3b:9a:f0:ff:a5:df:2f:d7:b6:82:
d0:10:8c:2c:13:07:5d:b0:07:b0:1e:73:df:ac:d8:
93:f6:79:bf:b6:91:f2:95:84:9d:49:67:03:4c:bf:
4b:fd:63:de:33:8a:2e:0e:a9:4f:67:4e:7f:85:11:
62:6b:4d:65:62:34:ad:78:e9:09:04:68:0e:fe:76:
30:8a:8d:fa:68:61:b0:1d:65:e2:7a:2d:bd:0f:88:
26:37:fd:0d:74:8e:0c:da:02:74:5a:50:1e:ff:1f:
63:66:fd:b9:dc:b1:60:72:65:16:3b:fa:82:d1:0c:
b9:f3:67:1d:02:86:11:be:26:fb:ef:ec:01:25:0e:
f5:58:f6:83:6c:3b:3a:3f:a4:e8:25:43:17:10:7c:
86:b7:3d:ca:d1:ce:8d:0d:0c:8d:c7:9b:3f:31:b1:
b6:bd:d3:01:9f:cc:ae:60:fc:a3:4c:63:81:2c:f6:
7c:ab:37:e6:52:17:5a:5f:ad:1f:51:d0:c4:4b:b2:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9C:E6:71:1D:02:CB:8B:B6:CA:CA:E9:FD:9A:55:AB:DA:61:A7:77
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:c6:dc:c4:c4:0e:be:e4:db:71:b7:60:2c:db:ff:2f:f5:
22:81:b7:f0:c6:86:6f:17:38:2e:48:3e:d1:40:a9:9f:ac:53:
4c:90:cb:ce:ef:97:49:41:89:45:b1:8a:56:7d:a3:dd:e3:5a:
d1:ff:48:ea:b8:2d:7f:a1:3c:b9:cd:17:84:f6:f1:f3:cf:96:
f4:8c:e7:97:5c:42:91:ba:d3:4b:25:4e:0e:6c:89:25:f6:d5:
01:f3:7f:73:f6:a7:51:71:e8:f1:5e:72:28:9c:1a:aa:8e:0f:
f6:44:ed:92:96:2f:57:40:51:e2:86:41:4f:4a:cb:83:1a:08:
1c:af:37:c9:4a:4f:10:e4:20:40:cb:f7:53:51:55:9b:4a:c4:
e6:77:05:95:fe:e0:89:b5:d4:46:9c:46:43:20:61:87:d9:5f:
8c:39:75:73:e0:f4:06:df:e2:24:0f:16:ce:14:52:bd:98:37:
ad:63:62:27:b8:20:77:d0:bf:e5:9f:dd:90:bb:0a:b7:a2:80:
41:aa:50:10:c6:d5:c1:4c:bb:1a:bd:09:5c:b2:25:a6:f9:d1:
e7:41:9a:e5:5a:9e:99:5b:cc:2a:58:40:fa:51:e4:56:ef:75:
49:68:42:18:7c:a7:c6:52:70:c6:c7:e2:ff:89:b8:d9:e5:1d:
90:64:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 06:21:21 2025 by rpki-client