This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: 4ZKdr6lXB6NIa5Ru7+1ZSTItAu2XGhNKeKDJigAYRYM=
Subject key identifier: 6D:EA:9C:15:DC:F7:93:AF:05:A4:E4:C4:C1:15:0D:A8:D4:58:68:C6
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019B3A8FBFFDB2CD0439E7374E283C938997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 178C
Signing time: Sat 20 Dec 2025 07:00:57 +0000
Manifest this update: Sat 20 Dec 2025 07:00:57 +0000
Manifest next update: Sun 21 Dec 2025 07:00:57 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: YzA2l7HXXwlTr72Q+Yvwvymt672Vdyh7+zVeYHNartI=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:8f:bf:fd:b2:cd:04:39:e7:37:4e:28:3c:93:89:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Dec 20 07:00:57 2025 GMT
Not After : Dec 21 07:00:57 2025 GMT
Subject: CN=6dea9c15dcf793af05a4e4c4c1150da8d45868c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:ae:36:4c:22:e5:a6:9a:b6:de:25:87:97:
ba:9b:42:56:71:e5:3f:fd:89:68:95:38:ab:29:8c:
8c:30:44:b3:de:de:76:b4:0b:08:a6:49:7d:91:25:
02:b7:d4:c8:36:0a:11:3b:d3:1b:5d:fa:0b:ee:bf:
a6:be:5c:d8:93:7e:a5:cb:dd:5a:65:f7:0f:eb:24:
52:55:8a:a4:9f:9d:9b:86:4c:4e:21:58:ea:11:8a:
69:39:c7:c8:55:e4:40:f9:52:92:19:c0:19:9b:c7:
24:52:17:4b:31:29:5b:68:07:f0:65:e3:95:fa:2a:
8f:98:a3:56:1f:ec:3b:2b:85:e8:99:a8:1b:30:06:
ed:25:aa:07:e4:94:28:8a:52:ec:a4:28:45:3d:3e:
21:cf:8b:45:f8:43:44:35:22:b7:38:dc:42:9f:fd:
71:fd:ea:18:9e:7f:7f:7a:f0:a2:67:ac:11:8f:4f:
82:bb:b5:c3:70:16:b6:d6:0f:16:1a:f7:7e:28:83:
d7:5b:a0:cd:83:cf:eb:85:4a:9e:85:eb:22:99:04:
87:84:49:cf:9b:a4:91:ef:9a:f7:36:64:92:66:f7:
4e:8c:d1:0f:0b:8d:e0:60:1c:06:7b:10:4b:ff:00:
82:56:98:cb:be:0b:2d:0e:50:b1:1f:2c:60:65:75:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:9C:15:DC:F7:93:AF:05:A4:E4:C4:C1:15:0D:A8:D4:58:68:C6
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:2f:34:38:72:73:9d:b0:fe:53:ba:05:95:b8:3e:e0:41:
8d:aa:e9:df:21:81:75:5f:d1:aa:c7:fc:12:48:d0:87:4f:21:
0c:e1:4b:2e:9e:ae:75:64:d7:ab:94:c4:8f:ba:21:ee:c1:cf:
df:d9:b1:c7:3d:0a:06:52:32:e3:0f:f6:e3:eb:2a:fe:7c:7e:
fc:c7:f6:d2:e8:8f:e6:66:9c:b1:86:90:70:06:47:e9:96:fa:
b5:7c:a0:d7:77:5d:7f:84:1e:94:03:ee:6b:5c:b5:55:f7:b3:
22:4c:47:88:38:46:f9:e4:bb:ac:19:02:87:31:10:96:48:a1:
b1:9b:fc:eb:55:5e:93:ac:a7:04:e0:29:da:4f:c2:5c:57:af:
a7:a2:a9:d3:ee:f8:67:01:90:45:f2:f6:22:03:8c:1e:ce:9c:
f3:dd:33:20:7c:b5:c7:ad:d8:4d:fd:79:fe:dc:43:d1:e5:27:
d6:95:c3:14:b7:04:31:d2:ec:67:64:fc:4c:a5:21:49:8c:e8:
a9:f7:07:ce:4c:ac:78:74:bd:3a:09:6f:27:b5:d4:d2:f2:7b:
1f:5d:d3:14:1f:f8:fb:2c:2f:95:c5:9d:f4:32:da:ec:27:40:
c0:af:9f:cc:6e:a7:a2:f5:2d:9f:08:87:9d:9c:8c:04:d2:08:
13:b3:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:44:21 2025 by rpki-client