This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: lEkKqCdawf63TecbxrfCoqU4mez+MIbJKKvcjZXb2mg=
Subject key identifier: B3:FB:DD:D7:82:08:C7:C1:E0:7F:E4:AC:54:8D:EA:46:2C:CE:8E:F0
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019B5298CE68FE4C2F4D47D9DBC796B8C1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 179C
Signing time: Wed 24 Dec 2025 23:01:44 +0000
Manifest this update: Wed 24 Dec 2025 23:01:44 +0000
Manifest next update: Thu 25 Dec 2025 23:01:44 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: AUkAf9MrYQQjRQbBs+7F+k/K3aS68Ynlq+VnJ+ylfVI=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:98:ce:68:fe:4c:2f:4d:47:d9:db:c7:96:b8:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Dec 24 23:01:44 2025 GMT
Not After : Dec 25 23:01:44 2025 GMT
Subject: CN=b3fbddd78208c7c1e07fe4ac548dea462cce8ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:d2:b7:52:7a:bf:d5:9e:86:56:ba:5c:e5:
2b:17:f2:43:51:8d:d7:83:2b:4b:a8:14:35:c6:09:
3a:c2:c3:21:d5:2f:6a:23:fb:d6:63:23:da:ee:73:
e6:dd:59:b7:7a:ef:14:e3:3c:f4:28:03:06:de:a7:
92:cf:33:2f:c9:04:ca:b5:34:6b:a5:c6:72:b8:41:
d8:83:5a:b8:6e:41:3a:49:fc:0f:87:4e:71:5d:de:
54:aa:b3:0e:26:0f:73:e0:4f:13:de:7f:6e:7a:dc:
a9:99:bb:17:51:e0:3c:15:18:c9:67:22:ea:15:bd:
3f:2f:1b:29:16:68:96:e2:78:30:1a:3c:49:94:a4:
50:87:b4:9f:a5:8c:69:07:88:5a:3c:1b:4f:f0:f8:
91:ef:58:1c:b4:db:b4:e9:41:82:f0:8a:f4:31:16:
59:ff:bf:7c:bd:e9:c9:6c:36:b7:c7:4c:4d:97:75:
d2:e6:8f:16:f3:e7:25:a2:3b:12:d5:71:b1:f0:bb:
ca:08:99:1f:a5:05:a0:43:3f:d2:1c:8b:31:ec:97:
27:53:5d:04:07:b2:92:35:35:93:21:31:43:e3:fe:
6b:31:2f:2d:cb:2f:18:8a:4b:02:07:cb:02:7d:ad:
5d:cd:a0:4e:98:39:5b:ec:eb:ad:35:03:dc:ed:f9:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:DD:D7:82:08:C7:C1:E0:7F:E4:AC:54:8D:EA:46:2C:CE:8E:F0
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:e0:a1:43:18:71:80:2f:a1:c9:a2:76:65:07:c7:9e:3e:
0c:23:27:54:37:2f:dc:85:f2:62:75:91:af:3f:be:ab:ff:c1:
fc:e4:9d:43:4c:bd:ca:3d:9d:0c:96:72:36:49:f6:7a:6b:6e:
1d:81:21:09:dd:af:10:9f:6e:fe:fc:47:7a:eb:39:4c:ad:15:
0f:ce:58:7d:dd:06:4e:02:4d:2e:20:58:59:b7:f0:99:60:6c:
35:a1:01:c3:47:d6:50:ac:b7:1e:11:e8:c6:41:06:c6:bc:c5:
38:1a:77:f2:c6:09:09:49:27:4e:62:10:22:c4:19:bf:a9:19:
5f:6b:50:ed:fc:51:7e:2b:7f:ce:d4:95:3e:5c:5f:fc:a9:34:
72:2c:f3:f6:ec:13:3e:3a:d7:4a:10:ac:90:94:2c:b1:8d:91:
92:ab:99:52:f6:ae:88:7e:22:4f:59:1d:61:29:ae:f6:1d:4a:
53:f0:da:e0:d3:79:55:15:01:04:77:c3:6a:e8:c2:26:3d:c4:
d5:5e:51:ea:84:aa:ef:f0:e7:ed:e4:90:e1:90:98:a9:9f:6f:
6d:2f:86:26:89:be:e1:c0:b2:a6:75:79:7a:16:ae:46:12:ac:
c4:23:1b:56:b3:6d:69:90:6f:6f:e1:6f:36:8c:c5:15:f5:0f:
46:7e:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:30:40 2025 by rpki-client