This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: qn5ReaYp/owQ6ybTlh6J6AJ5HGKqNthxm7t89yRNF1Q=
Subject key identifier: FC:D4:A0:2A:2D:75:19:BE:AF:29:AD:BF:DE:B2:41:44:E9:34:25:B4
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019B3CB5538CBC36DDD7C70EAF681FFDC0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1797
Signing time: Sat 20 Dec 2025 17:01:14 +0000
Manifest this update: Sat 20 Dec 2025 17:01:14 +0000
Manifest next update: Sun 21 Dec 2025 17:01:14 +0000
Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: j4GKG8QQIWK066J0U5PiWoglhJJ0SZPBtngCDxrj/rc=)
7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b5:53:8c:bc:36:dd:d7:c7:0e:af:68:1f:fd:c0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Dec 20 17:01:14 2025 GMT
Not After : Dec 21 17:01:14 2025 GMT
Subject: CN=fcd4a02a2d7519beaf29adbfdeb24144e93425b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:0a:ba:d1:c3:ba:05:2a:1d:d4:8f:4e:04:
64:70:e3:4e:d1:4c:ed:b8:3b:66:cc:5b:86:10:1d:
74:2e:b9:f5:82:3c:ea:57:22:7b:6e:6b:f0:ea:25:
f7:27:16:24:5b:03:0a:58:00:6a:e0:bb:c8:d2:b8:
df:85:be:16:b1:57:68:1f:85:36:09:b6:db:9a:51:
26:9e:27:55:da:ee:2a:ce:64:f3:61:c8:58:88:bb:
cf:f4:68:22:b3:5d:b9:94:30:c5:d7:ab:a5:9c:d3:
f2:a7:63:4a:d0:a8:8b:9b:8a:68:96:3e:59:54:60:
c6:b8:f4:07:df:eb:59:c6:ee:5a:ad:79:36:87:e5:
4f:4f:5b:80:26:bb:2f:ff:5d:c5:50:94:70:c5:e9:
cb:d2:15:22:64:9b:4f:9f:74:9b:e7:ef:4c:da:eb:
24:02:f8:04:df:61:48:af:7c:b1:77:a8:12:77:7f:
1b:0f:e6:0f:15:fe:24:ec:24:00:72:21:1b:b1:6e:
9d:b4:46:e5:de:6b:4a:06:6a:90:ea:c7:f1:13:79:
33:37:7b:96:8f:e6:2f:67:30:85:40:65:09:42:92:
bb:d8:b5:e3:be:1b:48:ff:59:f6:f7:e0:b0:92:15:
14:73:ae:d7:c6:de:13:12:c2:36:4c:36:7e:e7:66:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:A0:2A:2D:75:19:BE:AF:29:AD:BF:DE:B2:41:44:E9:34:25:B4
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:f3:af:1f:01:50:75:8d:ea:4c:bb:34:29:f7:de:b3:ea:
a4:f3:d5:44:0c:f7:dd:56:e6:da:72:38:fd:3b:ba:91:05:91:
6c:07:08:0c:3e:99:34:6f:18:23:d4:4b:52:23:b5:6d:50:ba:
82:58:5f:b1:22:22:a3:43:44:b9:30:05:76:de:fb:85:24:29:
21:44:8c:93:2b:e4:a5:e0:88:85:4b:4e:7e:25:cd:9b:3f:5d:
48:54:92:4d:91:77:66:0e:f3:4e:36:a8:0d:e0:92:69:f3:0c:
7d:72:df:01:89:0d:3e:cc:0d:2f:0b:e4:fa:8a:e0:43:b9:82:
87:19:0a:2e:00:20:b6:bb:35:69:0e:29:d9:19:65:d3:1e:46:
01:ab:3e:00:1f:07:12:ff:a3:43:59:62:a7:22:2c:2f:56:e7:
5c:56:af:5e:71:ad:e2:a8:b4:e1:45:62:ec:13:1c:9f:af:0a:
7d:fa:4c:ee:1a:d9:1b:0a:f4:82:93:75:78:d9:5d:28:ba:76:
04:2a:0b:83:97:85:40:62:a8:59:ec:61:31:03:70:ed:9c:01:
1d:20:a6:68:d3:10:21:2a:b0:77:2b:19:8d:c7:77:d3:27:c8:
49:47:e3:55:03:d3:3c:47:1a:82:dc:23:23:4a:49:82:b9:36:
2e:49:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:48:10 2025 by rpki-client