This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier: WPTGooq9XTAzAFkK762qJ6D7Ctuvm8xIya+zsY+STPI=
Subject key identifier: C7:69:49:39:36:FC:C0:87:C1:17:53:A6:89:6B:13:63:01:FC:24:D8
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 019B3CB53FAB4B017102E133D42702BA55A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number: 178B
Signing time: Sat 20 Dec 2025 17:01:09 +0000
Manifest this update: Sat 20 Dec 2025 17:01:09 +0000
Manifest next update: Sun 21 Dec 2025 17:01:09 +0000
Files and hashes: 1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: 4QWWBN8yVmKk/WxYYPK0ZT43ObOx4eEf3haSO97iXUA=)
4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b5:3f:ab:4b:01:71:02:e1:33:d4:27:02:ba:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Dec 20 17:01:09 2025 GMT
Not After : Dec 21 17:01:09 2025 GMT
Subject: CN=c769493936fcc087c11753a6896b136301fc24d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:2a:fe:35:61:60:73:16:73:96:e3:17:b4:
a5:72:c5:bd:f9:4c:02:d3:ea:6f:fe:a9:c7:1a:3e:
d4:87:84:b6:60:69:61:0b:38:5b:5c:d0:bf:c7:28:
01:3a:1e:54:0c:3e:c5:d9:46:e9:6d:d6:5f:cc:d8:
bd:65:07:e1:7d:12:25:e5:89:73:8a:cf:a0:79:a1:
09:02:51:19:7c:0b:d8:24:0e:0b:dd:f1:47:30:d3:
ea:d2:73:2d:25:77:12:f2:3a:aa:77:a4:7b:f8:e8:
37:42:2d:5b:0e:53:e4:5b:ee:85:14:e4:fa:50:a0:
3e:0b:fe:65:ad:64:0d:b1:0c:6c:c8:0f:af:77:1d:
8d:62:d2:8b:06:e6:12:52:b3:24:75:5a:2f:c2:82:
87:08:29:98:b7:d7:7d:18:14:6c:98:75:56:f4:c8:
d7:73:00:ec:e4:84:b6:12:80:9c:80:52:24:77:63:
de:3f:ee:10:d0:c3:55:31:a5:1c:a3:4c:0a:82:dd:
34:e7:5f:70:e8:f8:67:f1:a5:53:6e:80:62:72:9c:
f1:c2:0e:ec:c5:50:18:75:3d:2b:b3:3d:8d:34:23:
bf:35:93:d9:35:67:32:e3:38:b8:21:e0:73:26:97:
7b:fd:fa:02:ac:89:48:55:66:f9:1d:00:bb:b5:20:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:49:39:36:FC:C0:87:C1:17:53:A6:89:6B:13:63:01:FC:24:D8
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:af:cc:7e:f3:bb:fc:60:d4:eb:4d:81:f1:93:83:4c:a4:7c:
20:24:73:c3:ff:59:39:b0:24:30:1b:73:ec:2e:ff:c8:ee:34:
6e:84:78:8d:b4:05:82:1c:ff:92:ef:cf:a5:8f:68:3b:61:c9:
48:20:08:2a:a5:45:92:a8:25:48:a4:48:db:e3:01:98:7a:6f:
4d:53:28:d4:de:13:6b:9e:db:07:4d:2a:30:eb:2f:d6:30:11:
f5:7f:0e:e6:0d:98:40:0c:69:57:b6:e5:82:35:90:6c:11:0f:
d0:eb:e0:4c:23:40:ef:93:c1:d5:0a:83:57:87:63:f4:4b:1a:
89:57:7d:a2:19:7a:e0:52:61:4e:11:e9:97:b8:fb:9e:77:35:
3f:31:4e:da:5a:8d:79:d4:0d:c6:ae:67:ba:ad:0d:c2:25:58:
c8:06:ca:af:5a:f1:0a:f7:63:db:dc:d0:f5:6d:af:8e:d1:83:
54:24:ce:3d:25:5b:60:2b:98:de:46:28:76:ec:1a:7a:46:1a:
8d:be:ec:ab:ea:b8:0d:c1:13:59:3a:79:fe:a6:58:6c:1d:89:
80:88:28:77:cc:b1:26:cb:09:49:25:0d:b7:76:83:d4:8a:7b:
7c:e3:dc:6b:b4:ff:6d:3b:53:55:ff:74:85:39:b0:a8:1b:95:
7d:30:9b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8tT+rSwFxAuEz1CcCulWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj
OTYwZWMwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD
EyhjNzY5NDkzOTM2ZmNjMDg3YzExNzUzYTY4OTZiMTM2MzAxZmMyNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQq/jVhYHMWc5bjF7SlcsW9+UwC
0+pv/qnHGj7Uh4S2YGlhCzhbXNC/xygBOh5UDD7F2UbpbdZfzNi9ZQfhfRIl5Ylz
is+geaEJAlEZfAvYJA4L3fFHMNPq0nMtJXcS8jqqd6R7+Og3Qi1bDlPkW+6FFOT6
UKA+C/5lrWQNsQxsyA+vdx2NYtKLBuYSUrMkdVovwoKHCCmYt9d9GBRsmHVW9MjX
cwDs5IS2EoCcgFIkd2PeP+4Q0MNVMaUco0wKgt00519w6Phn8aVTboBicpzxwg7s
xVAYdT0rsz2NNCO/NZPZNWcy4zi4IeBzJpd7/foCrIlIVWb5HQC7tSA0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdpSTk2/MCHwRdTpolrE2MB/CTYMB8GA1UdIwQY
MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt
Y2YxNzQwODIzNDAwLzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw
LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6/MfvO7
/GDU602B8ZODTKR8ICRzw/9ZObAkMBtz7C7/yO40boR4jbQFghz/ku/PpY9oO2HJ
SCAIKqVFkqglSKRI2+MBmHpvTVMo1N4Ta57bB00qMOsv1jAR9X8O5g2YQAxpV7bl
gjWQbBEP0OvgTCNA75PB1QqDV4dj9EsaiVd9ohl64FJhThHpl7j7nnc1PzFO2lqN
edQNxq5nuq0NwiVYyAbKr1rxCvdj29zQ9W2vjtGDVCTOPSVbYCuY3kYoduwaekYa
jb7sq+q4DcETWTp5/qZYbB2JgIgod8yxJssJSSUNt3aD1Ip7fOPca7T/bTtTVf90
hTmwqBuVfTCb3w==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:29:56 2025 by rpki-client