This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: h8vPyxGMuDsZe5kewuvHcNhGfkFkEPhz7WAMEKSc0t0=
Subject key identifier: 84:31:FE:CC:7D:F6:3B:E2:AD:78:FE:9B:9D:13:98:DB:F0:FD:BB:7F
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019AF61C5676531C7998D2ADAD4E1919A364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: 0277
Signing time: Sun 07 Dec 2025 00:00:43 +0000
Manifest this update: Sun 07 Dec 2025 00:00:43 +0000
Manifest next update: Mon 08 Dec 2025 00:00:43 +0000
Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: Xrlr9gLbT2m/eyqABMySw/cDdbSYEHHUT2aRziGrt7I=)
2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:56:76:53:1c:79:98:d2:ad:ad:4e:19:19:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Dec 7 00:00:43 2025 GMT
Not After : Dec 8 00:00:43 2025 GMT
Subject: CN=8431fecc7df63be2ad78fe9b9d1398dbf0fdbb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:df:c1:61:11:d4:40:6d:56:a0:cc:2f:97:
2c:09:a8:df:bd:3a:3e:d3:55:9a:7b:f8:47:af:ea:
ea:ba:15:f7:66:cd:ad:33:fc:ef:ad:c4:db:ba:2f:
9f:a9:1b:06:8f:65:05:f8:97:bb:6c:b6:c0:78:55:
d5:76:6a:b9:69:d8:0c:57:c4:9f:63:3d:d8:c7:10:
9a:60:d2:a7:ef:4e:39:10:17:f3:3a:37:03:08:df:
81:2e:be:80:47:64:21:45:34:3d:ab:8a:f9:3d:8a:
d2:b4:61:31:39:f5:ad:19:ce:3f:0e:e6:49:d8:4b:
26:28:e0:35:51:38:5f:83:52:4a:c3:d0:36:04:12:
89:5e:ba:df:3c:24:98:e4:8b:dc:dd:09:70:1a:6d:
3c:0b:3e:43:6d:be:7d:90:c2:99:09:c6:05:de:96:
f8:d6:d6:b0:f4:48:ba:95:53:96:d9:7c:ad:9c:f5:
b2:58:ae:02:e1:5d:0f:4d:51:9e:41:d7:4f:8e:c3:
2c:84:b6:0f:5c:e0:0a:fd:22:06:93:dc:80:83:31:
bb:28:9d:80:01:05:3a:10:4e:1e:14:cc:fc:ca:64:
08:50:bc:f2:41:15:0b:a1:96:96:c1:3c:1a:5d:32:
ca:19:91:6d:70:fe:b2:01:a5:7f:2d:3f:b0:2a:32:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:FE:CC:7D:F6:3B:E2:AD:78:FE:9B:9D:13:98:DB:F0:FD:BB:7F
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:22:85:ff:91:11:05:d9:2d:f8:b1:26:a7:f8:72:ad:50:
f1:ec:7b:77:1c:00:1d:c3:db:da:64:31:81:d8:b3:e1:fb:71:
95:6d:8f:97:ca:b9:8f:aa:e7:52:d9:14:00:2c:ff:9a:24:f9:
c3:2b:15:b8:14:13:b8:a3:23:87:21:12:da:4a:8e:b4:78:81:
a2:82:0b:ab:a8:cd:8f:fa:47:bd:e0:3f:09:5c:c9:9b:d0:0b:
7a:d4:d6:a1:52:fa:39:26:0c:fe:41:ee:d8:3c:d8:e1:f6:68:
3b:36:48:7b:4e:6c:5c:cf:e4:5f:3f:b8:95:7b:9f:d1:06:ec:
1c:86:b5:80:20:88:66:49:4a:6b:44:19:3d:e4:1c:e2:80:ba:
02:b3:85:bb:10:f3:8e:c8:cc:34:b1:fe:01:2f:e6:48:53:24:
74:60:52:75:3f:f8:99:98:97:9b:2e:f7:99:b9:bc:43:69:70:
29:9a:43:2a:f8:cc:fc:25:72:c9:38:13:4a:c1:55:32:e0:74:
20:d8:78:7e:20:c6:38:93:19:38:03:a1:e7:f8:75:ed:29:1e:
c9:9f:b4:fe:77:f8:b1:29:05:ba:7b:f7:60:15:54:e1:10:21:
ac:5a:23:66:5e:2a:22:0d:28:ba:19:a3:56:26:bd:5d:b2:d3:
bb:4e:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:30:34 2025 by rpki-client