This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: 8Mgmj8zau6lrcXY5GnrHkaH64hGjeT6Or/+nfGr0rFU=
Subject key identifier: FB:C3:DD:FF:E9:30:4C:D1:21:10:6A:DB:EE:D4:DF:41:C1:92:B4:70
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019B11CA656ECD162D35E2B52B091C2B3D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1773
Signing time: Fri 12 Dec 2025 09:00:35 +0000
Manifest this update: Fri 12 Dec 2025 09:00:35 +0000
Manifest next update: Sat 13 Dec 2025 09:00:35 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: S4CP4/d2KJdw1ELQNL+0VyT4/giD38G/yUvgdVeG3rU=)
3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=)
4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:ca:65:6e:cd:16:2d:35:e2:b5:2b:09:1c:2b:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Dec 12 09:00:35 2025 GMT
Not After : Dec 13 09:00:35 2025 GMT
Subject: CN=fbc3ddffe9304cd121106adbeed4df41c192b470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:fe:17:7b:96:43:03:55:74:1c:f7:28:c8:
e5:1b:28:3e:10:77:d7:2e:98:fd:3f:81:00:89:84:
88:9f:b7:bb:38:af:bf:b7:93:af:40:06:67:f2:e4:
76:5e:77:ec:f7:ff:dd:a4:e1:90:ef:96:71:fa:3a:
fd:cc:73:67:6e:8e:47:6c:6b:f1:8e:71:40:e9:35:
87:75:32:6d:65:f1:19:56:a3:e5:1b:0f:ee:66:70:
1d:91:1c:3f:24:2d:2d:95:3a:91:95:da:98:d3:51:
3c:7d:24:84:e9:ad:0e:41:f4:c2:0b:6d:44:da:8b:
3e:09:64:7d:fe:72:3f:36:8f:d9:12:de:ec:1d:4f:
ba:dd:e6:df:8e:25:1f:ca:a3:d7:ed:33:b0:ce:65:
53:25:79:c9:a8:5f:34:ca:a8:23:cc:63:c1:3a:03:
86:cd:bc:2d:23:f3:a9:c6:e0:ae:d4:c5:77:6d:3f:
4f:94:31:d3:e0:4a:3d:60:86:62:cf:fd:59:ea:e0:
04:35:c7:d7:bc:67:00:24:bd:8e:bd:88:03:34:4e:
65:45:06:c4:8c:ce:ea:3b:38:66:b7:ff:d7:7c:9d:
11:bc:74:8f:b6:9a:71:50:e8:cd:7a:61:d8:15:fd:
59:19:4a:84:1e:b0:3a:2d:f8:83:f3:ec:fa:14:e3:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:DD:FF:E9:30:4C:D1:21:10:6A:DB:EE:D4:DF:41:C1:92:B4:70
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:59:33:8f:d3:40:5a:67:ba:52:d4:28:a2:27:e9:59:6b:
ad:57:25:58:b4:68:56:28:5d:7c:33:6c:5d:cf:3c:59:75:af:
af:78:7f:fe:f3:7b:28:75:d9:5f:57:09:26:a6:97:00:cd:21:
9f:f7:bc:b9:bf:41:f2:90:65:4d:e2:79:7f:a2:53:f1:1a:16:
a0:61:ce:e1:98:98:17:7d:f4:80:fe:5b:29:54:ad:23:1c:35:
01:5b:05:74:aa:7f:b9:42:88:09:05:17:0e:c1:e5:fc:7c:15:
8f:09:09:65:14:aa:b1:28:aa:03:cc:d5:59:e3:47:23:f5:c1:
9b:76:07:40:f4:ab:ba:78:84:45:45:80:dd:73:f4:c5:30:da:
69:ee:6c:5b:fb:1a:62:5f:8d:1f:09:cd:8d:d2:db:c2:d6:a4:
5a:14:71:1e:23:ab:5d:a7:85:87:8f:67:7b:5c:a3:fc:5f:7b:
8d:ae:74:cd:7f:bd:3f:69:13:3e:5b:50:f2:92:b6:5b:ab:34:
f1:ec:f2:37:49:79:57:71:5c:33:f8:6d:b2:9c:1e:f9:4f:d8:
22:d8:e0:7f:2c:e4:b4:0b:9e:bc:eb:7a:dd:09:29:11:f3:dd:
aa:e5:c2:5e:df:22:c8:da:b3:f6:fa:46:87:84:ba:6e:a3:e5:
08:e6:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 18:29:52 2025 by rpki-client