This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: txuFTG8ByouYL+1AWk+REtfqFFdmaocc2BA7GoYseJ0=
Subject key identifier: 96:84:F1:AE:3F:52:36:42:C6:FA:56:50:AA:ED:73:13:AD:08:78:F9
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 019B73DA644A27BBFA5735FB083360EEFCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 17C5
Signing time: Wed 31 Dec 2025 10:00:50 +0000
Manifest this update: Wed 31 Dec 2025 10:00:50 +0000
Manifest next update: Thu 01 Jan 2026 10:00:50 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (hash: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
5: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: UFhd2lJgn5Xi0Uy/Pq/DjzVk4CJZX4F16CkZQtaLvH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:73:da:64:4a:27:bb:fa:57:35:fb:08:33:60:ee:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Dec 31 10:00:50 2025 GMT
Not After : Jan 1 10:00:50 2026 GMT
Subject: CN=9684f1ae3f523642c6fa5650aaed7313ad0878f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:b6:08:6e:22:b4:fc:ec:2c:99:9e:f1:a9:
1b:38:d6:bf:55:29:71:61:fb:fb:65:e3:11:ac:c6:
87:fd:94:eb:9b:82:ea:ae:1f:0f:51:fd:b9:ee:60:
0e:86:94:a8:18:88:88:13:8e:d8:80:ff:6c:5d:e5:
c5:5c:f0:38:a0:95:6d:5d:36:4f:da:de:83:06:e3:
35:35:f7:55:d7:c3:e3:f7:77:26:06:2e:e8:76:bd:
e6:e6:6a:39:3a:c1:e5:57:cc:b9:5b:2a:25:67:c1:
9b:45:61:7d:00:02:89:6d:bb:69:8d:a0:ec:56:c6:
07:b3:b4:e6:5e:92:6e:f9:86:2e:06:68:6d:46:8c:
a5:e4:a3:49:96:d6:61:9c:9f:22:61:fe:5d:3e:30:
35:ce:d9:2a:09:83:c7:a5:32:07:5e:94:91:07:ed:
d4:93:64:dd:9c:4e:d4:04:af:0c:cd:70:bb:2a:bb:
52:0d:94:4c:2a:c0:0d:45:da:fe:4a:a0:eb:f6:bb:
2f:84:e9:ee:6f:3d:23:9a:a9:50:55:a6:c4:07:6d:
01:8c:11:3b:71:01:c2:3e:94:c4:a8:b7:05:73:90:
fd:be:e5:fe:cf:98:27:fc:83:2e:14:f1:73:31:35:
ca:4b:2c:78:01:d4:b5:e9:e9:b9:47:5b:8a:31:eb:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:F1:AE:3F:52:36:42:C6:FA:56:50:AA:ED:73:13:AD:08:78:F9
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:a5:09:bd:80:bf:4a:b3:7e:fa:cc:04:11:59:1f:fb:47:
7b:4c:34:ea:db:4a:08:8b:11:71:db:8e:1b:ed:fa:6a:35:a8:
70:47:6d:f3:a6:2a:98:9f:5a:52:64:fd:f1:10:9e:ae:f0:50:
e3:18:4e:80:06:0d:aa:53:bb:75:f5:54:ad:17:13:cf:0f:c5:
e4:a0:e4:c3:3b:e4:d2:0b:6b:05:fb:cd:37:19:30:51:45:b6:
9c:f6:59:14:ae:c4:d2:9a:2b:20:4b:f0:6d:87:44:9c:f7:a9:
d2:56:a1:70:39:c6:39:2d:0c:6b:3c:8b:e4:c5:d2:a2:c2:47:
a1:61:bb:3b:27:3f:e8:ec:87:62:52:b7:63:67:00:ed:57:4c:
5c:de:7b:65:bd:e2:53:65:5b:64:dc:98:f1:bb:7f:95:4c:8c:
56:81:67:28:39:e9:1c:50:03:3e:64:fe:14:d4:46:de:b6:fc:
51:dc:41:e5:a7:f0:60:83:9e:ee:23:f9:17:26:cd:50:3a:04:
e7:ff:dd:8e:77:95:ab:40:d3:9e:41:20:f3:62:80:74:ec:e8:
0c:09:43:92:c0:86:49:8b:17:5b:36:9b:99:6b:c1:74:63:07:
91:95:0b:05:8d:1f:8b:77:68:7d:4d:32:6e:cf:85:18:d1:b8:
0e:69:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 13:06:57 2025 by rpki-client