This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier: r6H+qVufUhCUpL1a1ysaOqoLHojuhcPvDFSEd81Sllg=
Subject key identifier: 0E:4C:23:F3:62:FF:09:BA:82:5E:01:61:95:AD:9B:2A:E7:27:E5:A9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019B35D76206560A4A3B148D5D43AEB77AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number: 17D8
Signing time: Fri 19 Dec 2025 09:01:06 +0000
Manifest this update: Fri 19 Dec 2025 09:01:06 +0000
Manifest next update: Sat 20 Dec 2025 09:01:06 +0000
Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=)
2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=)
3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=)
4: Il-erxMI4M94_jrG5zUQVeoL7sI.roa (hash: k2tfe5PGNF5YTVczprADK+deYh+5lz2pJBVEO5+Hrkc=)
5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=)
6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=)
7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=)
8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=)
9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=)
10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=)
11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=)
12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: SrrYIy8hKMN9795f08gE+KRSxgyi/6C/INQgDWgalXU=)
13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=)
14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=)
15: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (hash: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA=)
16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:d7:62:06:56:0a:4a:3b:14:8d:5d:43:ae:b7:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Dec 19 09:01:06 2025 GMT
Not After : Dec 20 09:01:06 2025 GMT
Subject: CN=0e4c23f362ff09ba825e016195ad9b2ae727e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:f3:d8:9a:af:6a:d9:0f:e2:13:49:e8:6c:
34:a0:a0:2d:92:1f:b6:21:79:0d:bc:39:88:d4:bd:
68:c8:44:c7:0f:90:29:64:6e:11:a8:2c:15:f7:19:
8a:1b:74:16:77:48:3f:ed:19:54:53:88:dc:d9:e7:
d1:43:e8:1b:12:b4:a1:5a:47:74:f0:a7:7a:30:7e:
00:a4:f3:17:4d:bb:5c:3f:18:39:58:8c:db:fe:49:
a3:a8:69:5c:3f:9b:3c:9f:d4:5f:fe:aa:4f:db:31:
c1:a5:7e:ff:d5:84:2c:4c:3c:b4:02:97:e3:15:e3:
a1:9e:77:e3:31:b7:7b:a0:8a:1b:2e:85:78:b2:9f:
24:dc:04:90:43:21:b0:dc:5a:4e:73:bd:cf:c9:21:
eb:aa:7f:35:35:bc:8c:a5:f7:ed:ac:df:40:4d:d2:
b3:52:f4:3b:47:5a:4b:46:7b:4c:4b:a2:bd:9f:b9:
2a:5d:a6:fc:97:53:41:98:57:b6:b7:9d:56:b1:3f:
00:6a:05:05:34:13:f6:8a:92:ec:6a:1a:92:0a:1e:
ab:6d:16:9e:df:16:96:50:56:dc:4e:aa:ce:0c:2b:
1d:df:50:6c:7d:6f:f0:92:3a:73:00:e3:0b:db:2b:
73:c6:3c:8f:78:1c:de:57:82:90:31:03:1d:70:55:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:23:F3:62:FF:09:BA:82:5E:01:61:95:AD:9B:2A:E7:27:E5:A9
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:78:0b:02:96:f8:19:aa:fd:b0:a2:be:71:b4:ae:b1:ba:7d:
1e:fc:f2:60:03:79:53:84:18:c9:17:cb:bc:18:0c:cd:1c:d2:
b1:c4:55:d7:01:90:6a:60:60:57:7e:d2:33:97:ce:27:78:ce:
8c:c2:85:41:40:19:cd:7a:8d:ba:ff:c8:00:78:71:7e:29:63:
d6:9e:bf:cc:b1:83:f7:d6:c2:02:ad:d0:da:37:98:82:40:83:
49:90:a5:f8:06:26:8b:19:a5:43:30:9e:b9:50:65:0a:80:d6:
27:1a:68:89:1d:33:b7:6c:59:4b:95:b3:e3:e4:d0:0f:65:e6:
68:65:ca:4b:91:71:da:20:85:84:b9:f5:00:b7:fc:db:4f:2a:
37:97:52:98:2c:f2:07:42:84:6f:4b:f5:e9:ba:88:68:f1:2b:
eb:07:c6:4b:b8:e0:32:42:ec:6d:d1:20:4c:15:fb:04:44:ee:
7d:81:93:8e:2b:45:d3:6c:1b:f3:9d:13:ec:3b:69:90:39:fe:
78:ea:a8:81:e0:c5:85:e7:0b:6f:b3:1d:e7:d5:a2:2b:98:0f:
af:bb:34:19:21:22:33:8c:bd:c7:a2:37:68:70:76:5c:57:c1:
ad:ac:30:0e:91:c3:eb:8d:67:df:2d:c3:72:95:16:81:2e:35:
8e:31:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:39:51 2025 by rpki-client