This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: B/Qb+yPd8La5qW0ym9uxhEB6k1o89uz+4su8UZEtJPw=
Subject key identifier: EE:0F:CD:55:A5:CE:B6:95:06:6B:57:12:8C:66:C3:6C:70:7E:63:52
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019AF3892FDA986A797A2E30B69A4945B2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 12:00:45 +0000
Manifest this update: Sat 06 Dec 2025 12:00:45 +0000
Manifest next update: Sun 07 Dec 2025 12:00:45 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: znYRQy48uNpgL7NrCnNGjQaLMhBK3gHHm2DOxrTKpg8=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:2f:da:98:6a:79:7a:2e:30:b6:9a:49:45:b2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Dec 6 12:00:45 2025 GMT
Not After : Dec 7 12:00:45 2025 GMT
Subject: CN=ee0fcd55a5ceb695066b57128c66c36c707e6352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f1:db:4d:dc:6f:b3:1d:4b:99:f8:15:40:28:
40:f4:cf:c2:65:6b:f8:7b:e1:95:43:b8:90:35:0d:
7e:a3:9d:3e:4f:d0:1d:00:95:1c:f5:80:dd:aa:b6:
4a:98:89:ed:25:2c:31:43:cd:39:80:3e:8a:bb:3a:
b9:db:14:27:f4:df:32:4f:e8:77:62:e1:99:c3:5b:
ca:23:42:f7:f7:b6:6a:14:87:98:3b:99:dc:e1:f1:
ad:53:5f:17:23:64:31:37:82:b3:9e:af:37:18:3f:
3d:a9:08:62:1e:fb:df:ad:8b:84:00:b5:77:a8:0a:
39:0f:cb:72:d2:b3:5a:42:01:fa:2a:2b:62:78:60:
31:ff:9d:57:35:64:e2:7c:e6:11:1a:0d:e1:eb:cf:
1b:3d:5b:9b:f2:1c:12:97:0c:5c:d1:78:2d:29:d6:
16:08:1b:f1:19:16:c3:29:f1:2a:bc:36:30:45:4c:
c9:3a:f6:2a:b7:d2:da:a4:aa:18:2d:4d:ad:33:91:
b8:68:be:71:63:2c:1f:e2:13:80:07:fd:9f:f4:fb:
9c:a0:da:73:12:56:2a:5e:9c:a0:09:57:7e:e9:8f:
d2:ee:86:9d:4d:22:41:68:54:d3:e6:56:98:84:de:
77:ec:4a:b6:b8:1a:1d:f1:fc:47:b4:6a:f6:8a:0c:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:CD:55:A5:CE:B6:95:06:6B:57:12:8C:66:C3:6C:70:7E:63:52
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d4:5a:d7:73:c0:47:bc:ee:cf:ae:a3:68:8d:65:4c:9d:7c:
fe:69:68:6c:51:3f:c7:8e:a0:2f:3f:e8:4c:5b:a1:52:57:cd:
cf:6c:fb:b6:5f:9f:2f:99:cf:74:ef:11:2c:db:12:e0:96:54:
94:4a:fc:d9:83:c5:00:d8:fc:cb:42:08:b6:aa:4d:35:da:da:
5d:d7:32:d6:d2:99:ca:3d:55:40:42:e1:8b:ed:10:cf:32:c2:
8f:8b:57:a5:69:92:e3:23:47:a3:37:6f:b2:a8:73:b1:f9:68:
ee:1f:5f:74:21:e1:84:41:ee:c7:6f:38:48:63:42:09:d0:ca:
68:12:64:50:12:a2:bf:e3:ee:c9:85:89:55:fa:fa:15:8b:e7:
c9:f5:51:f3:dd:fc:42:a3:5c:7e:d9:49:e3:f1:77:3b:6e:f9:
0d:b6:34:b1:36:7b:cf:4b:7e:13:02:92:e3:4e:16:12:47:a3:
16:00:0b:36:e0:3d:86:6a:c3:8a:84:f8:09:0f:ad:2e:ed:17:
84:a3:ba:b2:59:52:a7:d6:40:4e:25:ce:4f:14:dd:05:20:02:
50:9a:bc:95:4e:ea:a2:23:41:42:ab:00:d5:dd:50:77:2e:86:
bd:56:d3:c2:ae:cb:4e:a1:35:40:2f:d0:9c:23:2b:3b:ea:71:
be:7d:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:55 2025 by rpki-client