This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: dhffGnUtMsxx9sjUvAfteSnipxMvhOuaLaoj++3cO6M=
Subject key identifier: 14:93:E9:5E:DE:9B:A4:1E:67:BE:02:32:AC:7D:5F:DB:21:8F:F8:00
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019B239A0DEB5192C333974307BCC685E498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 177B
Signing time: Mon 15 Dec 2025 20:00:57 +0000
Manifest this update: Mon 15 Dec 2025 20:00:57 +0000
Manifest next update: Tue 16 Dec 2025 20:00:57 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: PCWxJMCUW8zSJB2o+U41iA31/fOA0Ont5YISQzPUQxs=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:23:9a:0d:eb:51:92:c3:33:97:43:07:bc:c6:85:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Dec 15 20:00:57 2025 GMT
Not After : Dec 16 20:00:57 2025 GMT
Subject: CN=1493e95ede9ba41e67be0232ac7d5fdb218ff800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:95:9e:ed:a0:63:1d:92:85:c1:64:cb:48:
d6:77:9a:8d:2b:1a:b1:f6:d5:de:5c:9b:18:8a:4f:
ac:46:10:2d:9d:9a:df:71:2a:07:a7:92:fa:5c:80:
48:5e:d7:68:57:cd:89:b2:00:06:43:aa:67:44:ce:
a8:58:e9:6a:f2:15:c9:88:64:2e:a0:4a:ca:3a:fa:
6f:e0:56:14:62:3f:18:94:0e:72:42:b7:74:34:bd:
52:e2:9e:d9:84:02:a5:b7:38:e7:78:08:7e:11:2a:
54:dd:24:52:8f:ac:14:d2:1a:fe:4b:9d:56:c2:04:
92:27:22:c2:ce:0f:6e:e2:10:db:9c:5d:0e:91:51:
86:5e:67:f4:e6:be:24:c2:1e:bd:63:9e:fd:19:e2:
ea:aa:fa:7f:85:77:09:0a:c6:4f:91:11:44:26:c3:
d8:a1:3a:2d:57:90:67:e0:f2:70:78:4e:d2:2a:fb:
1b:03:5d:b3:1a:60:27:6d:64:a0:7f:4e:71:e5:f2:
c2:f9:75:78:d1:66:41:b6:ff:f1:f0:77:14:ef:f7:
65:d8:d5:c7:5f:5c:aa:16:9c:a1:98:a3:14:06:05:
f0:3d:1e:6e:3f:57:40:60:0a:dd:4b:61:1a:7c:eb:
71:d6:67:51:92:19:db:bf:ac:34:04:e9:4e:95:a7:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:E9:5E:DE:9B:A4:1E:67:BE:02:32:AC:7D:5F:DB:21:8F:F8:00
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:4a:4f:59:16:da:af:49:a9:4c:20:34:50:76:7e:e0:96:2d:
a2:53:20:38:21:05:c6:34:73:a1:6b:79:5c:59:ff:19:ad:2b:
85:f4:4d:96:69:c9:ae:a9:60:26:04:16:62:6d:0b:57:99:a3:
11:57:fb:88:9d:8d:b3:2d:fe:b5:46:b3:ef:e8:bb:f9:58:a0:
46:aa:7e:d8:df:b6:8c:7b:66:f0:31:c9:c2:d3:88:21:be:fb:
dc:f8:3e:5c:d4:aa:92:dd:43:61:15:2b:97:9b:ba:a1:5d:7b:
6b:3f:c3:d3:87:af:ae:a7:cd:68:e5:19:88:5d:af:98:d4:72:
90:55:e1:5b:2d:d0:a1:96:6b:fb:78:1e:ca:8a:24:dc:5e:5e:
ef:08:14:bb:e4:d4:0c:9e:29:e6:46:79:23:41:e4:6b:95:04:
d3:52:fa:a2:07:4a:18:47:0a:cf:f7:2a:a0:55:88:02:3b:f9:
7e:74:b4:51:0e:65:7c:f1:eb:24:19:bb:71:02:4b:e8:37:7a:
83:89:8b:26:8d:44:64:d9:58:2a:4f:04:b4:2f:9c:8e:03:51:
ef:4b:34:b8:58:9b:72:ae:dc:8f:b9:22:81:8c:9d:c8:e0:55:
0e:77:4b:f5:76:bd:99:a2:a0:db:00:f8:ea:b3:c0:00:e3:7a:
fa:01:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:25:44 2025 by rpki-client