This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier: 9imquRNqonjHnbjtrgFqgHE62kdBDOPsnb2wTgRfrr0=
Subject key identifier: 3C:6E:1C:B8:19:1A:64:66:9D:7D:B6:EC:6F:86:32:3D:A3:6A:48:FB
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019B3DC76D7992C17B0C63648E67CCECF183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number: 1363
Signing time: Sat 20 Dec 2025 22:00:38 +0000
Manifest this update: Sat 20 Dec 2025 22:00:38 +0000
Manifest next update: Sun 21 Dec 2025 22:00:38 +0000
Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=)
2: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (hash: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=)
3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=)
4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: Oi/I7mj+dU2COZFSCAi0PkHJrKeybi1Kq0WMVk3MTOQ=)
5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=)
6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=)
7: UFFeHJ2B-RAhKeZ_nrZFkBvEasw.roa (hash: u2aLD80nejdc0K41bLKONy7hFTGwZbf2uT0JcNGa4LI=)
8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=)
9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=)
10: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=)
11: p6pR2sVZIib8Cy9IAbRIMpW09ng.roa (hash: wVG14xqI26ImVNoE/wkia6KvIe7FCAvc+FGMDYGgFqE=)
12: ve8cB2fVV6i2ZCITFsZ-GmFfQUc.roa (hash: O6M0g7BdXXN/L6Zy8e00GJUveyJhgL60FbkjEIeJDe4=)
13: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:c7:6d:79:92:c1:7b:0c:63:64:8e:67:cc:ec:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Dec 20 22:00:38 2025 GMT
Not After : Dec 21 22:00:38 2025 GMT
Subject: CN=3c6e1cb8191a64669d7db6ec6f86323da36a48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:1f:74:3f:eb:b7:63:8b:fc:15:35:a7:69:
46:c0:54:c1:a1:61:8c:cb:f0:4a:3a:b4:b6:d7:8a:
98:53:c1:ab:d1:96:9d:c8:dd:eb:2a:b3:4c:a6:99:
7c:62:71:8c:63:15:1b:59:d6:89:35:76:a0:17:fa:
d2:dc:58:e3:5c:4a:99:ca:81:fa:46:3c:cf:bd:93:
5f:35:ff:5d:96:0d:67:27:d3:78:29:6a:05:a9:e9:
89:ff:9c:66:d9:19:a3:3d:de:7b:0b:6b:20:53:63:
12:29:47:e6:2c:5d:8c:52:c4:8a:85:27:2a:c7:30:
5d:f5:64:f3:e0:97:1b:3b:d7:19:4d:0b:47:b1:04:
25:33:a4:ad:14:fd:ef:95:f8:ad:cd:68:bd:48:36:
fc:64:b2:31:d3:19:2a:39:7d:5b:2f:fd:15:de:36:
30:1b:33:db:c2:cc:c5:3b:90:53:b9:9b:ae:70:8a:
8d:8a:9a:38:27:00:7a:0e:0f:fb:5f:23:7c:e0:f8:
e6:83:6e:f4:32:eb:1a:e0:53:3c:7d:a6:c0:e2:e7:
ac:52:55:9b:63:50:ff:c6:20:d5:f7:1f:66:03:7c:
42:e7:22:4c:bb:f7:03:52:56:8d:14:95:58:8e:fc:
2b:11:ba:63:9f:93:ea:29:ca:ea:01:55:83:0b:15:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:1C:B8:19:1A:64:66:9D:7D:B6:EC:6F:86:32:3D:A3:6A:48:FB
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:2c:c0:fb:83:3a:09:8c:f6:f9:04:62:93:fc:c5:66:3e:
8d:a3:ad:b2:a0:c3:6b:3f:01:74:08:dd:d5:fb:14:89:29:95:
c2:c2:c0:49:ee:50:de:2c:e5:21:b7:13:97:df:2b:6b:ce:06:
6a:ef:58:e9:47:9f:2c:c1:81:ed:4a:ac:08:11:24:38:2b:8c:
30:6a:4e:b8:20:e9:04:e4:25:51:cd:24:1d:76:db:d2:6a:69:
b0:97:95:e5:c2:9d:48:82:64:59:3a:3c:fb:b9:89:4a:49:bf:
36:6b:bd:e8:57:76:01:02:46:a6:d5:b6:4c:42:40:2b:fb:9b:
df:cf:35:2b:84:69:c9:a8:78:dd:84:33:77:21:6a:94:0e:9a:
f7:6e:ea:05:d8:bb:bc:2c:a4:2e:6c:be:2f:f8:1f:de:e8:a8:
e3:5a:53:50:cb:93:04:4d:9a:e3:79:64:cc:b8:e0:10:4b:84:
78:02:33:c6:cd:0a:a8:b1:69:8f:d9:8f:7d:dc:1c:cc:4d:3b:
d3:be:db:95:d6:8d:82:a8:7e:48:75:84:b8:87:28:0e:74:e9:
c5:9f:57:33:4b:66:29:c4:1e:bb:f9:66:9f:b6:b7:1b:e1:af:
0e:1f:4d:ae:6d:1f:dd:cd:2d:ca:8f:37:93:15:5d:16:0f:ed:
10:03:2d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9x215ksF7DGNkjmfM7PGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjUxMjIwMjIwMDM4WhcNMjUxMjIxMjIwMDM4WjAzMTEwLwYDVQQD
EygzYzZlMWNiODE5MWE2NDY2OWQ3ZGI2ZWM2Zjg2MzIzZGEzNmE0OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxMfdD/rt2OL/BU1p2lGwFTBoWGM
y/BKOrS214qYU8Gr0ZadyN3rKrNMppl8YnGMYxUbWdaJNXagF/rS3FjjXEqZyoH6
RjzPvZNfNf9dlg1nJ9N4KWoFqemJ/5xm2RmjPd57C2sgU2MSKUfmLF2MUsSKhScq
xzBd9WTz4JcbO9cZTQtHsQQlM6StFP3vlfitzWi9SDb8ZLIx0xkqOX1bL/0V3jYw
GzPbwszFO5BTuZuucIqNipo4JwB6Dg/7XyN84Pjmg270Musa4FM8fabA4uesUlWb
Y1D/xiDV9x9mA3xC5yJMu/cDUlaNFJVYjvwrEbpjn5PqKcrqAVWDCxXVNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxuHLgZGmRmnX227G+GMj2jakj7MB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlcswPuD
OgmM9vkEYpP8xWY+jaOtsqDDaz8BdAjd1fsUiSmVwsLASe5Q3izlIbcTl98ra84G
au9Y6UefLMGB7UqsCBEkOCuMMGpOuCDpBOQlUc0kHXbb0mppsJeV5cKdSIJkWTo8
+7mJSkm/Nmu96Fd2AQJGptW2TEJAK/ub3881K4Rpyah43YQzdyFqlA6a927qBdi7
vCykLmy+L/gf3uio41pTUMuTBE2a43lkzLjgEEuEeAIzxs0KqLFpj9mPfdwczE07
077bldaNgqh+SHWEuIcoDnTpxZ9XM0tmKcQeu/lmn7a3G+GvDh9Nrm0f3c0tyo83
kxVdFg/tEAMtiQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:57:05 2025 by rpki-client