This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: CHSS9DNq/1x0TwFFBM7OkFcaVunRf0LcE45wBuC/YUs=
Subject key identifier: 50:E2:44:02:D3:07:BF:4D:F5:FD:2A:E3:51:F3:06:A3:11:06:E8:EA
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019B104A5A06B6E6E851A1712E5E8697E6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1771
Signing time: Fri 12 Dec 2025 02:01:06 +0000
Manifest this update: Fri 12 Dec 2025 02:01:06 +0000
Manifest next update: Sat 13 Dec 2025 02:01:06 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: kXYHtraz5p+NXXKroDfVUNbwo2kpx1mmyy5Wda/SvhQ=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:4a:5a:06:b6:e6:e8:51:a1:71:2e:5e:86:97:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Dec 12 02:01:06 2025 GMT
Not After : Dec 13 02:01:06 2025 GMT
Subject: CN=50e24402d307bf4df5fd2ae351f306a31106e8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:c6:cc:7b:94:ad:47:17:41:72:73:2f:5e:
c6:7c:83:28:b4:b1:70:84:77:ba:6c:cd:68:ce:20:
5c:ff:fd:49:24:11:58:ab:2a:40:48:42:ed:1b:d5:
56:6b:44:a0:33:a5:38:19:4c:3f:a3:c3:80:82:60:
7f:d1:b3:53:72:5b:84:c3:28:c6:b2:38:bb:d5:48:
9c:e0:92:a0:f5:0c:1f:ba:f4:44:5b:75:3a:4a:71:
13:43:c3:f3:35:b4:05:ba:ea:22:de:d0:ee:9e:c6:
92:3a:9a:f8:d1:dc:a0:1a:75:83:73:be:13:e2:e1:
67:f0:35:13:c1:7b:93:03:63:28:06:11:ff:6a:f9:
10:2e:1e:68:39:c2:17:d0:42:db:e2:3e:2d:69:46:
2c:8a:ba:2b:f2:6b:4d:7f:f2:d9:1c:dc:f9:65:f3:
8b:ac:18:5e:a6:d6:fd:c3:bd:5c:fb:06:fc:09:0b:
16:d3:70:c1:06:c5:77:7c:60:63:67:af:dc:c9:27:
8e:e9:8a:5d:bb:d5:34:29:ce:82:7f:b4:a8:77:31:
06:b6:58:04:b5:f6:49:2a:58:f7:6b:94:28:8b:0d:
25:c5:3e:73:68:f6:2c:52:f8:a2:f9:5b:80:bf:8c:
5b:c9:81:2f:8a:79:a1:8c:32:14:0b:2c:36:e0:98:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:44:02:D3:07:BF:4D:F5:FD:2A:E3:51:F3:06:A3:11:06:E8:EA
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:29:4c:a4:50:ec:8b:ab:bf:b3:06:19:5f:60:91:ca:98:b7:
85:f5:5b:06:d4:8f:86:90:e7:63:2b:8e:27:aa:75:1d:bc:ac:
7a:33:ba:8d:b2:8a:ec:10:5e:0b:ba:9b:51:72:35:e8:83:2e:
05:00:35:2e:24:28:33:8a:f2:d7:d3:93:91:b7:c1:5c:83:5a:
34:11:c8:77:59:f5:93:6d:e4:1a:56:bf:3f:86:77:5c:a9:de:
87:8c:5e:66:b4:70:11:80:40:29:6e:15:7b:a5:81:0d:70:35:
de:11:b0:eb:65:8c:8c:45:c4:a3:5d:0b:d4:74:46:88:7b:3b:
cf:2a:01:42:ec:bc:46:7c:2b:4b:6b:c3:90:ee:0c:15:49:be:
46:7a:a4:be:8b:89:55:6d:65:43:a4:b4:71:5d:ef:50:6c:dc:
58:ce:15:f2:b0:a1:da:a0:ae:bf:95:5a:2d:9c:b4:de:44:2f:
67:f3:78:13:53:8f:94:f3:52:68:5e:5b:1f:21:0b:c3:c5:f8:
ed:4f:47:17:8e:f6:c3:1a:85:d7:02:c3:b9:c3:85:8a:ee:18:
01:d8:2f:60:a4:18:83:8c:0a:b7:97:66:3a:df:89:04:3b:9e:
17:a7:0d:5f:3f:6e:84:3f:34:f1:95:7a:e4:ef:4a:23:fe:9e:
cf:0a:52:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQSloGtuboUaFxLl6Gl+btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjUxMjEyMDIwMTA2WhcNMjUxMjEzMDIwMTA2WjAzMTEwLwYDVQQD
Eyg1MGUyNDQwMmQzMDdiZjRkZjVmZDJhZTM1MWYzMDZhMzExMDZlOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe/GzHuUrUcXQXJzL17GfIMotLFw
hHe6bM1oziBc//1JJBFYqypASELtG9VWa0SgM6U4GUw/o8OAgmB/0bNTcluEwyjG
sji71Uic4JKg9QwfuvREW3U6SnETQ8PzNbQFuuoi3tDunsaSOpr40dygGnWDc74T
4uFn8DUTwXuTA2MoBhH/avkQLh5oOcIX0ELb4j4taUYsiror8mtNf/LZHNz5ZfOL
rBheptb9w71c+wb8CQsW03DBBsV3fGBjZ6/cySeO6Ypdu9U0Kc6Cf7SodzEGtlgE
tfZJKlj3a5Qoiw0lxT5zaPYsUvii+VuAv4xbyYEvinmhjDIUCyw24JjM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDiRALTB79N9f0q41HzBqMRBujqMB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKilMpFDs
i6u/swYZX2CRypi3hfVbBtSPhpDnYyuOJ6p1HbysejO6jbKK7BBeC7qbUXI16IMu
BQA1LiQoM4ry19OTkbfBXINaNBHId1n1k23kGla/P4Z3XKneh4xeZrRwEYBAKW4V
e6WBDXA13hGw62WMjEXEo10L1HRGiHs7zyoBQuy8RnwrS2vDkO4MFUm+RnqkvouJ
VW1lQ6S0cV3vUGzcWM4V8rCh2qCuv5VaLZy03kQvZ/N4E1OPlPNSaF5bHyELw8X4
7U9HF472wxqF1wLDucOFiu4YAdgvYKQYg4wKt5dmOt+JBDueF6cNXz9uhD808ZV6
5O9KI/6ezwpS/Q==
-----END CERTIFICATE-----
Generated at Fri Dec 12 04:01:38 2025 by rpki-client