This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json)
Hash identifier: kvwyHFA16eKgDky0halWNtO4JPWrxlmwOvxwES2HLCk=
Subject key identifier: 93:1D:5E:AB:14:14:84:9D:FD:C0:73:3C:E0:BA:00:C3:2D:DD:BB:AD
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019B48B96AC592D57A05C65FA3356DF00DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
Manifest number: 07F1
Signing time: Tue 23 Dec 2025 01:01:09 +0000
Manifest this update: Tue 23 Dec 2025 01:01:09 +0000
Manifest next update: Wed 24 Dec 2025 01:01:09 +0000
Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=)
2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=)
3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=)
4: 92bun2tsOlqTzcyAib4vRWOWAJI.roa (hash: qog6NgchB+Qp5J4zX/jN9xXAIWVyWEQCgqHENX4xl4I=)
5: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=)
6: _ITSv8iuWxYF6Xi3_Ud63eugcVA.roa (hash: e1oaUiU/1FwcsXzZfTfjISFOH22WsphA6YVaiUR+Z3Y=)
7: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=)
8: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=)
9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: +Xq68gGzqngoL9ROaoOIn7gepByroT/SJX0IKKo11aE=)
10: qGFUGJuxspgWAhMTwEHWda1tK4I.roa (hash: kE0iH6eXvZqbSdSc8x4s8TfLFvAMHZpfdERWbyCEcBY=)
11: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 23:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:b9:6a:c5:92:d5:7a:05:c6:5f:a3:35:6d:f0:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Dec 23 01:01:09 2025 GMT
Not After : Dec 24 01:01:09 2025 GMT
Subject: CN=931d5eab1414849dfdc0733ce0ba00c32dddbbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:bf:a3:63:f0:d8:2e:50:c2:d7:89:69:3f:
41:d4:c3:18:df:7b:62:f5:1a:61:79:26:c4:03:be:
fe:e3:8c:e9:6a:01:a9:eb:5e:a5:c6:7e:b8:41:98:
31:29:d8:77:3d:3e:ab:f8:8f:e5:7b:c5:54:a4:25:
c1:72:18:b7:4c:ed:83:a5:d9:4d:37:2e:ee:ba:d1:
9b:1e:bb:77:10:f8:ad:dc:dc:3a:a7:30:00:c8:86:
29:e6:32:ac:09:e1:e0:b2:37:b8:c7:33:c9:1f:1d:
ae:0b:dc:ac:55:78:05:64:aa:1a:86:de:06:11:c0:
22:85:05:c7:da:78:4c:8c:6d:69:0d:e4:27:aa:bf:
e9:b5:14:ac:79:22:6d:15:75:b2:d0:f2:97:5b:90:
0d:cc:63:1a:7b:d8:53:b6:fa:18:71:cf:09:f1:3b:
36:90:6f:c0:82:95:c6:75:45:30:98:76:8e:d7:bf:
eb:b9:fe:ea:25:e0:03:f3:07:93:67:6f:d4:14:c7:
a4:4e:b2:58:db:19:20:75:4a:d4:cd:7b:f3:53:87:
16:24:60:8a:78:ff:c1:f9:e2:42:7d:05:76:91:e7:
db:80:2c:8b:4e:77:c5:21:8a:b1:f3:ea:70:c2:98:
2b:15:9c:f0:75:13:13:51:de:ed:d2:ae:72:44:b2:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:5E:AB:14:14:84:9D:FD:C0:73:3C:E0:BA:00:C3:2D:DD:BB:AD
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4c:34:5b:56:c3:ba:e9:9d:26:25:02:c8:be:11:10:18:3c:
fb:3c:f8:44:b9:4a:b3:59:b2:e7:41:ce:3b:57:0b:4e:c3:82:
ae:5c:f2:1b:58:0a:b2:22:d3:3e:f7:b0:b5:8b:cb:c4:b2:1c:
0c:f4:3f:a9:a9:81:af:c7:fe:50:5f:8b:61:00:00:f5:92:ae:
55:c7:22:5c:54:05:4c:11:63:61:20:47:e9:b8:e0:0f:51:c4:
9b:fa:04:51:5d:b3:d5:46:10:79:3e:76:a4:d3:7d:fb:92:38:
b7:7e:1f:42:50:44:78:e5:65:85:85:39:81:43:55:d1:b7:9b:
b3:e3:bb:1f:53:c8:9b:5d:9e:1e:27:fe:dc:5a:24:6f:ad:09:
c9:e4:84:31:46:9f:17:bb:b9:e5:cb:ac:cb:e6:64:e4:32:aa:
14:66:a9:62:7c:e1:fa:32:08:bc:2b:04:b9:18:f2:4e:29:6f:
5f:2c:23:93:51:80:fe:2f:0e:97:e4:be:0e:86:11:7b:31:ce:
b0:77:d0:5a:33:50:49:40:3e:e3:d6:7c:79:31:cc:e4:61:02:
b2:38:af:0a:48:68:1a:a5:4c:96:fe:7b:29:52:04:96:a6:15:
53:f0:2e:54:cb:00:d0:d5:f5:e2:ce:f5:db:b5:8a:78:3d:00:
50:38:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:35 2025 by rpki-client