This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: R94b4hYh2GjRrRbtJ3FHCoX7CJZN5I1l9ivoHBguiJE=
Subject key identifier: 11:39:A1:B2:F1:D6:D9:2C:EE:BF:C6:32:6C:EE:EC:99:5A:3C:01:BF
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019AF1643C812DACF687511460D0AB999FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 1678
Signing time: Sat 06 Dec 2025 02:01:09 +0000
Manifest this update: Sat 06 Dec 2025 02:01:09 +0000
Manifest next update: Sun 07 Dec 2025 02:01:09 +0000
Files and hashes: 1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: SCjwnoHczhYXxDP/JeKsBbPzlDpdrxwhwIzMHZ+QG8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:3c:81:2d:ac:f6:87:51:14:60:d0:ab:99:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Dec 6 02:01:09 2025 GMT
Not After : Dec 7 02:01:09 2025 GMT
Subject: CN=1139a1b2f1d6d92ceebfc6326ceeec995a3c01bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:f2:76:1d:ea:09:9c:12:e2:d0:eb:0a:5c:
40:84:10:fc:30:51:da:5b:bc:5c:14:22:30:29:36:
c1:4e:39:27:95:db:27:83:b1:b6:40:e1:f8:1d:dd:
93:25:f7:1d:8a:64:f2:b3:73:95:fb:c0:cc:6d:11:
36:85:87:36:10:23:d1:57:5a:80:b9:50:ab:cd:38:
a4:28:37:ab:cf:ea:c4:e6:25:9d:f5:c8:a3:d5:fc:
64:7b:89:d9:0f:89:01:bb:71:77:db:72:c5:b1:d5:
11:23:d2:90:0d:c3:d2:d0:42:39:3f:32:7d:18:08:
2a:14:f7:ca:88:a6:98:9b:5b:a1:2f:74:ba:09:b3:
3f:dd:b7:0d:93:a6:0c:ee:38:cd:59:01:9e:0c:77:
2b:41:ae:b4:8d:7a:81:d7:43:71:8d:8c:b5:8c:80:
25:fa:04:2d:55:be:ab:70:61:61:a9:d2:4a:08:0b:
de:3b:94:d8:88:b0:c8:32:39:c7:4d:61:1a:bb:d9:
34:4c:7b:c4:75:36:62:2b:59:29:78:67:7c:e7:3b:
8a:29:5a:f6:0a:4e:f2:b2:6b:6f:fe:92:65:59:60:
a5:a7:ac:49:0b:59:7c:08:f4:4a:b7:14:ec:86:df:
34:f2:fd:fc:e0:a6:04:d1:a5:2d:32:cc:dd:0d:91:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:A1:B2:F1:D6:D9:2C:EE:BF:C6:32:6C:EE:EC:99:5A:3C:01:BF
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ce:b8:47:95:3b:d6:91:36:b6:e6:9a:33:0b:85:b1:bb:61:
7d:0e:c8:24:ad:83:43:6b:f5:bc:9c:7b:52:5e:be:68:51:ec:
97:19:f8:f0:62:0b:09:5c:02:b7:59:27:9f:9c:f1:5b:86:13:
97:72:f0:19:26:3f:cf:f9:97:a1:9d:08:1b:b3:45:b9:d6:a8:
28:31:eb:f1:95:08:52:4a:a6:7e:b4:ff:a8:2a:da:df:f1:68:
6f:55:04:9e:d8:51:e6:eb:8b:50:fe:82:06:37:43:6c:ce:5b:
a3:c3:30:dc:b3:40:d9:ad:97:19:67:77:4e:bc:ce:0d:f7:ed:
fa:17:cc:fc:6d:18:ab:94:eb:14:8c:4b:50:29:1c:3a:9e:92:
d4:7e:55:95:a6:30:67:92:60:4e:5b:60:58:aa:81:65:d7:e1:
8a:fe:86:19:a8:2b:3c:30:2b:b3:ba:66:d9:b9:d7:5d:5b:5e:
96:f9:fc:50:e9:f4:9e:16:29:d2:af:6f:29:fd:4f:cd:c7:0e:
38:bb:0e:1e:2a:95:b8:36:b3:f9:44:91:87:10:4b:83:0f:59:
2f:64:78:84:f2:ec:7a:5a:16:a3:a7:7e:0f:a4:26:99:93:d1:
84:45:66:4b:c5:38:05:6c:71:b1:46:de:19:68:fc:00:5d:12:
55:15:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:10:03 2025 by rpki-client