This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: +nNQISrmuOTAlrmyUHExnrYy2iGTO+0vTUwMZjOAw7I=
Subject key identifier: 6D:C8:34:24:5C:0A:4D:4E:1B:48:4B:5C:BD:E7:6E:17:A2:D6:75:56
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 019B4324DB2A9D1874BCC0919D2FC1CDF06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0979
Signing time: Sun 21 Dec 2025 23:00:47 +0000
Manifest this update: Sun 21 Dec 2025 23:00:47 +0000
Manifest next update: Mon 22 Dec 2025 23:00:47 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: y/xLRqDb5Nmm1lhb0U1k85YYCwXZhvgNbnd2wb8ijQ8=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:24:db:2a:9d:18:74:bc:c0:91:9d:2f:c1:cd:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Dec 21 23:00:47 2025 GMT
Not After : Dec 22 23:00:47 2025 GMT
Subject: CN=6dc834245c0a4d4e1b484b5cbde76e17a2d67556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:32:b2:f5:45:35:a7:4c:74:76:4c:e9:f7:
7c:59:41:08:af:c4:d4:4a:45:cc:a8:4a:cc:31:36:
da:57:52:20:ee:ae:34:b3:4f:69:9a:1c:d5:a5:3f:
db:b1:ce:bd:32:d6:9d:fd:5b:65:6b:48:00:20:d4:
e5:57:22:ac:5d:77:c2:65:f7:4f:6e:a1:5a:fd:18:
10:bd:46:e2:eb:99:fe:e7:b1:75:1d:ae:2e:7d:16:
aa:a2:8d:be:c2:00:ca:c6:67:54:9d:44:d8:ad:92:
8a:11:06:98:bc:07:6a:8c:ee:db:a1:b0:24:41:89:
74:84:96:b7:68:f3:d3:db:09:f3:9c:27:48:60:d3:
ca:41:2a:19:e3:dd:54:ae:af:f8:8d:aa:53:be:46:
32:8c:b8:19:72:89:a9:a4:13:c6:2c:fe:04:51:6a:
3e:62:fa:dd:2c:23:08:04:fc:7b:eb:aa:f8:20:db:
8a:cd:39:83:0b:df:ae:c2:6f:7f:01:ca:7e:ce:73:
5a:5b:b3:7a:4b:56:3e:71:84:64:e4:59:bf:0e:a9:
6f:da:55:91:5f:48:2a:ae:e7:42:44:0b:3c:16:26:
d4:e8:31:d6:db:35:7a:be:bb:ef:1a:7b:fa:b9:04:
cf:5f:1f:3a:c9:cb:34:be:f2:8e:a3:52:57:b3:bf:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:34:24:5C:0A:4D:4E:1B:48:4B:5C:BD:E7:6E:17:A2:D6:75:56
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:1c:6a:b3:1b:0c:c4:76:e4:a7:47:e3:95:e3:72:53:ec:
c4:a2:3a:ff:7e:52:5a:7c:c1:39:ba:25:c3:e4:79:a9:21:a7:
7a:46:75:35:05:34:1d:1d:bc:70:cd:ce:19:de:0b:d0:13:2c:
57:6e:c8:45:b7:8e:7f:50:10:eb:65:8a:ae:dd:62:cd:14:b0:
d6:a6:f1:83:e9:f4:11:14:c6:f7:a3:91:14:b6:b8:1c:ce:38:
0f:24:1e:99:07:50:96:88:fb:52:d7:7c:ff:a4:be:54:ef:39:
88:02:df:97:fa:3d:b4:22:e0:da:56:d3:95:1a:38:33:26:aa:
c5:82:40:ef:0f:16:83:e1:6d:c7:82:ce:57:bd:fd:8c:0f:6b:
da:f4:c8:11:a6:a0:1b:96:3c:db:fc:29:dd:5f:f4:28:6b:36:
65:bb:e7:8a:db:77:de:fd:a7:ec:be:49:e0:84:75:9f:bf:50:
b1:5a:8a:4a:cb:d2:fc:92:0e:38:d3:66:48:fa:f2:2d:59:1d:
c9:27:02:22:5e:96:b4:8b:5d:70:68:c0:c1:ee:d5:47:fe:a0:
cf:99:54:88:eb:90:c0:03:78:05:bb:cd:63:4e:68:d4:a8:4f:
dd:ed:a0:0e:06:46:77:ab:22:ef:ed:3d:a3:35:0d:a6:f3:c4:
ce:92:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:33:12 2025 by rpki-client