This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: tAvbNinj9/L7IdWYU5lyMOZst0Q3Inh8t0c6WjJc0h4=
Subject key identifier: 84:E0:CF:FE:6A:46:ED:06:32:17:70:AE:EA:B1:19:58:4A:0F:6B:94
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019AF389B5029875F23C651D5559AAFA6A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0AC6
Signing time: Sat 06 Dec 2025 12:01:19 +0000
Manifest this update: Sat 06 Dec 2025 12:01:19 +0000
Manifest next update: Sun 07 Dec 2025 12:01:19 +0000
Files and hashes: 1: 3Ti0VRFQXYG5OETL6H3xqGURx7g.roa (hash: wOZdgFUImj0qeOyuyvxGEJ5Ru8WQDiyIL/ijF462qBo=)
2: 7XozsJg8cESPgPLOlnZdDHuIIkA.roa (hash: NkHcRJjWveOKr/3lsnLotWjQFQWLhxVwR81b0kSFErE=)
3: 9K541zTwKzkXQVxivY6RtgnMtfc.roa (hash: 2IzU5yJObIbCyE/+ehHr5lv63aMpYtOrcZkh+bZRUaU=)
4: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: k8UqBQe0mzugl3zclnHorL7LsR2ERXD38XIYPFzy+VU=)
5: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (hash: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=)
6: GqF55OK8p88k_RA7XjSbJsgeScE.roa (hash: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=)
7: K00tT5cZnNVXDF_Or6n_nc_0xRo.roa (hash: s/PaO+NasRBZLSycpt6mJjPENaMQFjfT/5hMIEO7t08=)
8: p0H-UvlbJAxkRpZM50LM0HMaTh4.roa (hash: eqbVXmLmRGS+69kMEz9SPkK3Rw5wmLRM/rZ2KSdZI3s=)
9: zOfa10bmz5mA01whN-vRAcpYyD0.roa (hash: ZjeDW/sMSDaC9yWADq68Sh8uF/rcU0PJexnNWW9mYAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:b5:02:98:75:f2:3c:65:1d:55:59:aa:fa:6a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Dec 6 12:01:19 2025 GMT
Not After : Dec 7 12:01:19 2025 GMT
Subject: CN=84e0cffe6a46ed06321770aeeab119584a0f6b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:60:53:ea:7b:f3:92:d3:9f:b4:ae:d4:3b:
17:8a:76:73:70:04:16:8c:53:0c:cf:65:ff:9b:5d:
ed:03:33:a4:b2:7d:86:6e:1c:8a:ea:50:55:8b:88:
20:7f:2e:49:14:68:3c:3f:4f:f6:d4:5c:cb:4e:a4:
f2:cd:da:d5:e9:3b:e4:51:64:51:35:8f:fc:8e:01:
0d:c8:7f:da:00:dc:d3:27:94:d4:af:46:a4:9c:64:
df:6e:ba:dc:8b:d2:fb:e8:b9:69:d4:26:21:46:a4:
89:0d:9d:7b:51:0b:76:e2:67:a7:3e:c0:72:d5:8d:
6d:3b:52:48:c7:56:98:a8:7b:7d:2b:0e:ff:e6:88:
a6:bc:5a:ab:bd:c5:e8:65:4a:69:95:8c:cb:5c:f3:
a5:c3:70:bf:9b:bb:77:72:86:b1:ac:b5:d8:51:7c:
d0:bb:0f:d2:0e:a8:dc:aa:e7:cb:99:a0:66:5e:fd:
74:49:e1:25:0c:7e:b6:81:25:5b:39:22:6f:43:61:
e7:fe:9b:0e:4f:b9:00:7a:3c:84:5e:2c:9f:0a:37:
c9:2f:a3:7b:e4:2f:63:56:8c:7d:73:bf:a5:e9:3f:
9e:23:47:e5:12:34:8f:d2:87:c4:35:6f:f3:ab:05:
54:6a:cd:44:11:47:5f:0a:7d:86:6e:8a:e9:8c:09:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E0:CF:FE:6A:46:ED:06:32:17:70:AE:EA:B1:19:58:4A:0F:6B:94
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:78:8f:cb:98:f7:be:9c:30:b2:17:58:55:26:69:1a:b4:86:
ce:1a:ef:f3:57:a3:a8:94:a7:1e:bf:62:ec:0e:7d:68:79:b7:
03:78:7d:00:77:f3:8e:d6:75:1a:1c:c4:02:5a:4e:d9:c8:5f:
18:46:d3:a4:7f:3b:04:e4:5d:56:79:9d:14:a7:05:8a:b9:f7:
6a:e5:8a:ac:90:8b:b1:34:0a:29:31:ec:5a:0c:1b:40:24:44:
51:fc:b2:54:a1:b0:df:ee:4e:d0:0d:bf:5b:16:80:87:4e:dd:
c7:39:a6:33:11:9d:7c:aa:c3:3f:2e:22:c4:f7:e0:69:c1:10:
54:62:aa:9a:45:f2:ec:30:89:13:8e:3e:fd:ee:4f:f4:6f:a8:
d0:4a:73:9a:b5:8f:de:74:47:da:28:06:9c:46:3a:32:e6:47:
fd:ef:63:fe:ec:02:c2:59:99:22:27:ea:2a:85:4b:ac:ca:0a:
2b:a1:d5:a1:38:52:43:72:4d:8f:d3:70:77:e3:13:33:c5:43:
18:ac:ee:28:22:c1:40:95:26:31:bc:36:c9:d2:51:9e:b7:13:
80:9b:ec:d7:ae:e2:e3:8c:19:6b:68:b4:78:c8:f0:34:e5:93:
19:3d:6f:6f:cd:82:a9:f6:e4:c3:d8:97:2c:3f:6e:71:1d:b3:
73:d4:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:59:10 2025 by rpki-client