This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: ziBfLlT8hNyW1h3JK9JK6oU1NObH6XlOSVsAx8EQfkk=
Subject key identifier: BC:61:43:5E:D4:53:2A:E4:95:D6:66:BD:87:28:00:35:C9:01:56:F8
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 019B3EDB0250BDD3A99F7FD622912C02A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 0617
Signing time: Sun 21 Dec 2025 03:01:38 +0000
Manifest this update: Sun 21 Dec 2025 03:01:38 +0000
Manifest next update: Mon 22 Dec 2025 03:01:38 +0000
Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: vSIN8zl/+UZXoB2hPCnev2Wz/jM2jd/IVKXG0DW9KS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:db:02:50:bd:d3:a9:9f:7f:d6:22:91:2c:02:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Dec 21 03:01:38 2025 GMT
Not After : Dec 22 03:01:38 2025 GMT
Subject: CN=bc61435ed4532ae495d666bd87280035c90156f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ce:db:d3:93:6e:46:9a:dc:49:c9:d3:67:
69:03:0e:fd:18:f1:e9:0c:9e:65:fe:d7:68:8a:a3:
e3:cb:d3:66:03:71:3d:62:d6:b8:57:06:dc:63:32:
5f:5d:f8:be:ef:f6:eb:cc:ac:ff:b1:6a:7e:d0:36:
e7:a1:c2:33:a5:3b:aa:11:0a:6f:cb:47:1c:3c:20:
fb:6c:b8:ce:70:e5:24:da:8c:7c:38:17:0e:7d:f9:
99:ad:91:15:5e:e4:be:3e:55:36:87:28:a8:e8:7f:
fb:ba:f5:02:ab:f4:c7:99:08:01:03:9d:7e:6b:b3:
2a:4b:1f:e4:3d:ad:43:09:04:97:a1:e7:4e:41:1a:
09:2d:f1:c8:51:c1:27:a3:35:af:7f:3a:dc:14:ac:
e4:cf:b2:83:59:32:47:03:b1:c7:1e:cd:a2:a2:3c:
6c:d5:3a:7a:62:4b:bd:4e:42:cb:16:4b:be:60:4f:
57:40:10:e6:a8:86:0f:95:57:25:17:55:a7:3e:36:
0f:00:c0:a5:e0:f6:48:dc:7e:ba:27:c2:68:d0:f4:
a7:a0:3c:00:13:a6:21:18:75:49:d6:0b:b2:ea:69:
af:b2:43:b8:06:12:df:3d:15:93:77:27:2a:46:bd:
3b:e6:e2:97:58:55:ca:d9:c5:9e:2a:4e:54:87:49:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:43:5E:D4:53:2A:E4:95:D6:66:BD:87:28:00:35:C9:01:56:F8
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:1d:45:b0:52:18:d2:e3:f9:0f:3f:ac:2a:f2:9f:bc:e3:
66:d1:af:36:c1:6e:5e:6f:0b:37:db:ab:48:2f:48:80:b7:68:
3a:6d:0f:0d:6c:1b:d3:4d:bc:f6:16:4e:ec:34:87:fe:ea:79:
c7:66:14:4c:67:39:e6:cd:1f:42:b6:fe:4c:03:0f:23:00:44:
0e:05:e1:d5:a9:e7:09:e2:58:25:ee:a5:ac:64:58:a2:9c:bb:
3a:0a:f4:33:23:82:f5:fd:99:d3:f9:3c:f2:dc:38:33:fd:f3:
87:46:f3:c0:a9:d8:51:64:00:63:43:50:02:fe:53:9a:97:a1:
b3:d6:33:d3:d4:fc:b1:41:17:cf:43:50:e1:b8:09:b6:67:91:
89:2a:4c:86:e3:01:17:9a:c3:9c:e0:c1:95:60:6c:67:df:64:
57:11:73:34:64:30:8e:65:b9:ff:79:cb:53:5b:5e:c7:ef:3e:
34:8e:23:a8:df:7c:5e:22:27:ae:9f:16:e7:f0:d8:a0:5c:ec:
a3:66:fb:40:bd:e1:fe:78:01:23:1a:fe:a3:44:6d:33:3d:2c:
67:5b:c9:ee:46:03:3a:42:8a:54:39:2d:73:73:ab:bc:f5:31:
4b:9f:41:d8:9d:7a:16:b1:3c:83:48:0d:b5:41:53:d1:74:26:
6e:82:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:00:56 2025 by rpki-client