This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier: +hEj2M8ejRgxxdShaiDVfOMWHClt+MbNZ3MR+aBzDVs=
Subject key identifier: 45:F3:EC:26:AE:1C:CB:4E:93:1C:FB:7A:B6:6D:B5:50:91:31:02:1D
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019B3BA282D67842543B83BD59B3D07CFF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number: 17DB
Signing time: Sat 20 Dec 2025 12:01:04 +0000
Manifest this update: Sat 20 Dec 2025 12:01:04 +0000
Manifest next update: Sun 21 Dec 2025 12:01:04 +0000
Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=)
2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=)
3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=)
4: Il-erxMI4M94_jrG5zUQVeoL7sI.roa (hash: k2tfe5PGNF5YTVczprADK+deYh+5lz2pJBVEO5+Hrkc=)
5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=)
6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=)
7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=)
8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=)
9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=)
10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=)
11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=)
12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: D4NdJOsuIQImHWh5+QOartPP/2bxWzmSTnkvlG7k8+c=)
13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=)
14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=)
15: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (hash: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA=)
16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:a2:82:d6:78:42:54:3b:83:bd:59:b3:d0:7c:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Dec 20 12:01:04 2025 GMT
Not After : Dec 21 12:01:04 2025 GMT
Subject: CN=45f3ec26ae1ccb4e931cfb7ab66db5509131021d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:18:25:7c:19:5a:eb:ed:10:48:c5:76:4f:
d7:08:4a:4f:b5:c6:65:27:09:d7:53:9a:1b:8c:9c:
c8:85:e6:78:49:3d:9b:70:14:d1:eb:d7:6f:3f:67:
2f:23:f0:8f:27:fe:04:eb:d7:bb:c2:34:7a:9a:fd:
93:3d:6a:d5:7a:60:b1:f7:59:87:c8:a4:5f:f1:07:
5b:77:34:c3:97:75:a6:87:bd:b6:ef:bf:11:cf:eb:
cd:e3:c2:f8:86:55:29:2b:d3:f7:59:f1:3c:1d:93:
07:d4:6e:41:93:f4:32:c0:d6:db:55:29:75:3d:4d:
c1:45:88:f3:1f:06:cc:13:ac:44:92:c1:95:20:6e:
1c:92:84:8b:ed:94:95:16:10:78:6c:10:fb:f3:e1:
6a:41:43:7c:d5:f0:ec:ab:87:8d:25:a6:62:72:25:
ef:67:30:25:fa:5f:1c:f4:29:91:4f:d2:e4:e5:61:
18:ec:b1:bb:66:cf:04:3d:1b:33:09:f6:53:ff:59:
db:bc:d5:05:ed:a2:f5:2d:d0:3c:6b:ac:d6:dc:fe:
e4:a7:44:39:66:a9:06:3f:e5:44:7b:2c:a5:4b:d6:
0d:27:6c:41:c4:66:be:90:fc:c0:af:3f:c4:2e:d6:
79:f0:cc:29:65:27:d6:eb:60:5a:88:cc:bb:05:0c:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:EC:26:AE:1C:CB:4E:93:1C:FB:7A:B6:6D:B5:50:91:31:02:1D
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:12:75:0a:c7:da:2e:5c:55:97:3c:0b:aa:dd:26:75:2b:
96:a2:c7:3c:ea:ca:d8:94:14:1c:f5:41:be:59:87:e1:1c:56:
1d:bd:c7:b1:4d:db:50:59:a9:3b:d8:e1:8e:ea:0a:9f:bf:c0:
85:70:bb:cb:3d:53:96:27:73:5f:d9:9e:6e:37:78:56:44:5b:
eb:9a:79:e4:72:ec:9e:9e:5e:be:22:75:e0:ca:71:fa:8d:01:
db:48:b3:bc:8a:5a:96:1b:91:d3:76:4d:75:a6:f2:f4:70:bc:
d1:51:3f:07:7a:3e:0c:a9:f9:19:58:41:32:bb:a3:51:10:6c:
7b:bd:72:a5:76:25:3b:de:cb:22:7b:26:aa:3c:03:fd:26:9c:
e6:df:68:f4:a4:8e:14:45:47:01:17:de:be:06:57:93:61:e2:
4c:e1:20:41:f2:e3:14:b6:b1:30:15:bd:73:27:59:17:c3:bf:
2e:02:03:37:e0:86:ea:34:bd:c9:08:2e:c1:6e:a0:dd:8f:93:
44:db:79:57:d2:32:c0:f2:2b:49:4d:05:1d:98:18:62:a2:8f:
8a:f3:1c:bc:71:04:3c:ea:c4:1a:27:0f:5b:17:d2:af:aa:fa:
db:4f:fc:f4:c1:7f:47:56:7d:ec:fb:95:af:3e:6a:2f:73:e7:
65:cb:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:12:20 2025 by rpki-client