This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: ql1QQVCMVyoo+NxZN3oKqJC8HFl5l712tlRLKu77Iww=
Subject key identifier: A1:44:25:F3:C3:EF:AD:C6:FA:75:1D:60:17:14:FE:63:28:61:95:DB
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019AF2AD7D95F0DFC6B9486EF61E7A38B723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 08:00:47 +0000
Manifest this update: Sat 06 Dec 2025 08:00:47 +0000
Manifest next update: Sun 07 Dec 2025 08:00:47 +0000
Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 7liPr7TMLa2oUzWvG3F5F05fzMqhLNdgdsGYoFkSoh0=)
2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:7d:95:f0:df:c6:b9:48:6e:f6:1e:7a:38:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Dec 6 08:00:47 2025 GMT
Not After : Dec 7 08:00:47 2025 GMT
Subject: CN=a14425f3c3efadc6fa751d601714fe63286195db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:b9:c5:2a:7d:6f:b2:af:41:f5:ba:4e:78:
5c:e4:1b:7e:1d:03:ac:30:71:d8:5b:d5:39:75:7b:
4a:86:02:7a:1e:09:8e:09:b8:b0:5a:9c:3e:36:0f:
b8:22:bf:1a:4d:9d:42:0d:22:94:e3:95:8e:06:24:
2b:d1:b1:53:d3:0f:b3:91:dc:2b:ab:37:44:ce:62:
34:43:ed:eb:69:95:d3:dc:48:e2:86:47:21:b1:1e:
ec:04:07:5b:6f:1e:86:f2:6a:be:9c:0e:3e:af:84:
e5:76:bf:69:2c:b9:38:11:6b:c7:1e:01:2a:17:94:
78:c3:ad:d9:d4:1c:1c:32:51:fd:94:46:25:01:1e:
56:a2:f4:d7:d2:79:11:a4:41:0d:b1:be:e1:a1:f3:
19:57:e1:c1:5d:4c:a2:53:db:93:91:af:9a:d3:af:
31:13:00:73:2b:ae:53:54:0f:7d:1c:6e:e2:61:2e:
f4:f0:dc:01:2b:d6:52:61:a6:2c:ed:b2:4e:eb:17:
d0:6b:29:64:f7:c8:fd:9a:1c:27:c9:58:3c:c1:04:
59:fe:cf:cb:d9:9a:6d:40:da:43:75:ee:c6:4a:a4:
7b:18:15:9f:1d:86:1b:69:87:c9:18:5f:02:b2:5f:
ee:df:c0:62:ab:5e:56:85:42:fa:05:0b:f9:aa:6f:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:25:F3:C3:EF:AD:C6:FA:75:1D:60:17:14:FE:63:28:61:95:DB
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ef:c8:15:26:80:0f:8a:4a:88:40:3a:0e:e9:50:e9:89:84:
2e:9e:35:1b:44:45:a1:67:5c:ed:77:eb:6f:56:8d:5f:e0:d1:
36:06:af:e0:7a:94:30:29:82:26:7b:0d:f0:59:2d:76:a0:d3:
87:d8:a3:ef:dd:6e:60:c7:44:65:80:40:42:e4:5b:f8:f4:8b:
72:9c:b8:b1:5a:b8:fc:8a:de:bd:67:a1:f4:9b:cb:4a:fc:0d:
d4:f9:a3:19:30:3a:1b:44:f9:83:15:fa:88:f5:17:26:08:dd:
7f:6b:42:33:db:d4:2d:ca:3e:2a:84:0a:3a:e9:86:de:58:24:
6b:c0:d2:be:c0:23:e5:8e:da:6f:2b:9b:56:e0:e8:d1:af:57:
b8:78:a0:0a:8f:fc:cf:de:d0:87:30:42:93:e8:c0:f7:3b:f3:
05:b8:f5:24:32:4c:6c:37:89:4d:99:70:3a:57:f1:a6:82:45:
ce:6e:d5:74:05:d5:de:90:10:d3:e0:43:69:9d:c2:e1:55:5c:
4f:6a:01:7e:f9:8b:84:8e:dc:4b:74:0c:26:82:b1:f5:47:1c:
b0:97:4d:33:90:09:b8:59:4e:f1:14:89:85:a5:06:76:78:0e:
13:73:05:47:ef:56:d8:ae:0a:97:d0:1c:d7:d2:4e:69:65:ee:
d0:0b:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:08 2025 by rpki-client