This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier: GB4VXd1njuf6ScPhyyO31QU8JPv4+eLeAii63atNwKM=
Subject key identifier: 78:53:E6:64:0C:AA:F6:08:D6:12:2E:AB:13:13:E9:1E:DA:42:9E:F5
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 019AF19A9FA130E78AEB59D24BDEF47262E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number: 177B
Signing time: Sat 06 Dec 2025 03:00:33 +0000
Manifest this update: Sat 06 Dec 2025 03:00:33 +0000
Manifest next update: Sun 07 Dec 2025 03:00:33 +0000
Files and hashes: 1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=)
2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=)
3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=)
4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=)
5: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=)
6: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=)
7: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=)
8: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=)
9: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=)
10: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=)
11: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: tvmac2CvXrvUvhC4hAIc7AhIqJNVgbC7v4sbNjbOIzA=)
12: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=)
13: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:9f:a1:30:e7:8a:eb:59:d2:4b:de:f4:72:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Dec 6 03:00:33 2025 GMT
Not After : Dec 7 03:00:33 2025 GMT
Subject: CN=7853e6640caaf608d6122eab1313e91eda429ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:d4:2d:8a:03:46:b6:3c:02:8d:9e:57:3e:
81:c5:53:70:15:cb:85:1d:c1:c8:ad:e4:7b:b2:ea:
c8:c3:f8:a4:19:4b:61:86:a6:05:d7:91:7c:de:0e:
0c:b2:27:37:b9:a3:43:96:b7:aa:30:d3:ce:37:93:
7e:ae:7e:cc:ad:38:b7:c9:62:8b:e7:33:df:c3:d0:
64:96:c2:a7:75:02:20:ea:67:4f:a1:31:b2:8c:63:
35:a6:3c:3a:b5:7a:06:45:cf:ac:4c:7e:8a:cb:09:
e5:b3:7e:83:0d:98:ad:a9:cc:c4:d3:f6:0b:38:a8:
a9:ba:98:3b:96:8f:53:1e:2c:7c:99:ff:2f:8e:78:
ff:bb:c3:be:ef:38:38:59:17:a4:6a:55:94:91:40:
bb:a7:6d:0f:e5:af:45:dd:ac:9f:7b:9f:75:bc:e4:
53:d5:63:d7:a6:09:51:5b:fb:3c:52:d6:02:88:3c:
f0:41:e0:9b:49:b3:6d:d0:fd:6d:d9:f5:de:82:65:
06:63:6e:47:e1:2e:07:63:02:0d:ea:5f:ed:4d:bc:
e3:ed:e9:63:a6:0f:05:8a:d3:c8:30:9d:fc:7d:45:
c8:b0:82:0c:53:6a:fb:c2:82:0a:09:b0:cc:80:1b:
60:58:25:c7:ec:f6:f0:bb:16:33:cf:b7:fd:65:c4:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:E6:64:0C:AA:F6:08:D6:12:2E:AB:13:13:E9:1E:DA:42:9E:F5
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:9c:8a:74:68:af:5d:96:ff:2b:25:8a:c5:1a:81:a4:f6:
7c:ac:78:ff:e0:95:da:8c:08:a7:68:77:3c:c2:27:ee:21:09:
0d:b8:99:05:d3:c6:e3:31:e6:9f:1e:0b:64:bc:41:f1:40:49:
09:10:36:26:0e:f9:df:6f:83:2d:c0:44:f1:ac:f9:7f:34:70:
c1:80:89:9d:86:18:36:86:9f:69:da:c5:ed:82:29:c6:c9:5c:
b5:1b:fb:7e:1a:b7:16:1e:9d:84:17:d0:d3:26:75:22:d3:75:
93:64:2d:ca:fb:65:51:1a:da:71:98:3a:b7:f8:1c:da:d6:9c:
84:8d:c9:fb:98:bb:83:c4:e5:f6:89:39:c9:c3:8d:ed:c4:6d:
47:82:ec:79:58:42:3a:cb:8e:69:db:ac:9a:f6:f6:31:77:92:
38:79:d6:30:6b:03:40:bf:fc:18:c6:2f:f9:fe:c5:0f:b1:d9:
ac:a7:d8:af:67:ce:6d:a7:10:7b:f8:32:43:09:03:4f:8f:d6:
0a:6a:09:81:9f:1c:fa:6e:78:8e:99:e1:4a:ae:64:94:0d:be:
f5:a5:08:84:78:29:bc:66:7c:47:12:01:3f:13:1e:d8:b5:d5:
26:c9:dc:0d:be:ef:a7:ac:1e:ba:e0:00:08:3d:d0:5a:0b:8a:
48:18:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:05 2025 by rpki-client