This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: V7/3KxUy8S19IkQMwKUVSnZRGhXXsd5OypK3/ioGXUw=
Subject key identifier: B4:23:27:E1:D1:0F:E6:C7:22:73:FB:2F:F7:D5:AE:1B:96:CF:7B:43
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019B34C4C22D6AC640B361F37B7E60564291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1787
Signing time: Fri 19 Dec 2025 04:01:08 +0000
Manifest this update: Fri 19 Dec 2025 04:01:08 +0000
Manifest next update: Sat 20 Dec 2025 04:01:08 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: veLxlDYYdUEHGqjgtlA1AImM85N2l5hlegWhH+mBWBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:c4:c2:2d:6a:c6:40:b3:61:f3:7b:7e:60:56:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Dec 19 04:01:08 2025 GMT
Not After : Dec 20 04:01:08 2025 GMT
Subject: CN=b42327e1d10fe6c72273fb2ff7d5ae1b96cf7b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:75:1a:80:2b:b3:5d:93:e6:c5:a3:a4:f7:
11:be:38:d9:cf:57:63:72:9d:aa:9b:8c:b3:ce:55:
57:19:c2:c0:04:c1:9f:e7:b7:23:73:57:42:5b:66:
84:48:21:9b:2b:5d:16:cd:f8:cf:b2:a1:ab:0e:36:
22:27:f5:c1:e5:2c:bd:ca:a2:65:79:e8:5f:2a:23:
a0:13:e6:e6:ed:7d:78:46:93:00:d1:0f:55:16:f9:
3e:7c:0e:bb:25:e8:f1:d1:45:57:86:d4:ad:92:03:
42:b2:5c:2f:da:7b:d2:8f:3d:00:8b:63:06:f3:86:
fb:43:27:06:81:20:08:33:a7:33:71:d0:56:9f:1e:
29:db:3f:4c:2c:84:39:0a:dc:0f:15:31:c4:ff:f0:
71:e7:ee:f5:23:e1:27:79:17:31:82:70:14:95:8a:
d5:90:d4:b6:6c:b7:4c:e5:c7:c6:d9:e1:73:1d:c0:
19:ec:11:6c:c3:f2:cf:0d:16:8a:6f:e2:5f:9a:3f:
fa:a5:50:64:87:ae:23:a2:a5:1a:5c:28:3b:da:00:
5a:dd:73:15:6f:b5:48:9e:fc:00:10:6b:83:9d:75:
4d:e6:5f:dd:f3:b3:36:b0:4c:6a:0f:08:ca:f3:b0:
84:3a:f0:9b:2b:05:26:6a:7a:e6:9e:c1:17:2b:f8:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:27:E1:D1:0F:E6:C7:22:73:FB:2F:F7:D5:AE:1B:96:CF:7B:43
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fe:28:80:94:2b:82:d8:ac:5b:4b:63:22:8a:a4:05:18:44:
99:11:4c:09:6a:40:53:a7:6e:53:dc:00:b2:7f:49:05:48:61:
8f:39:9f:68:10:26:7a:3f:d9:b3:ce:5f:aa:f1:d3:f8:e4:ac:
60:0e:a3:66:e5:5e:16:d9:69:8b:49:56:cf:5f:a7:f1:d7:08:
11:be:e0:2e:8b:f5:48:98:92:68:f3:02:82:a0:d2:12:e6:21:
f6:46:bc:a6:23:46:a6:56:a7:02:a9:2b:bf:82:0f:46:76:9e:
7c:a8:47:7c:42:2f:ca:9e:1e:e0:70:f9:ca:95:e4:2f:10:91:
b2:fe:85:c2:63:f6:6d:2b:9c:58:59:f7:dd:0f:48:40:bb:e0:
b6:d3:5c:06:cd:5e:13:58:00:67:46:98:5e:7a:b4:4d:7f:c1:
b7:fd:6e:f9:47:82:77:14:d6:d2:f6:cd:e6:2b:7d:42:68:05:
8c:d5:49:57:0e:3a:4f:d2:81:c9:87:e1:a2:24:59:2e:ba:08:
e6:36:5f:a0:1e:92:8a:e4:ac:8a:10:59:1c:d8:a0:fb:1b:ef:
10:87:f1:80:08:a6:41:08:87:d5:a0:d9:2f:cf:b3:5d:f6:a0:
7c:7e:71:15:e0:70:41:a9:46:37:35:bf:e2:28:20:9e:d5:3b:
cf:a1:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:48:35 2025 by rpki-client