This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: eUU5+31cxLY/BwlVZJ/mV+KCkEwgRi+jk5eeoDYMols=
Subject key identifier: 4D:5F:AF:FC:7D:90:9C:43:25:37:C6:86:8D:A7:A6:4C:ED:07:55:B8
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019B329F0A3C79AA115ADEDDD58F6D3EDB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 07CC
Signing time: Thu 18 Dec 2025 18:00:42 +0000
Manifest this update: Thu 18 Dec 2025 18:00:42 +0000
Manifest next update: Fri 19 Dec 2025 18:00:42 +0000
Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
2: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: HP/kXem36p8TiG60bWT31CW41uLWCIDvmJgzpBE3ypg=)
3: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
4: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
5: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
6: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
7: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
8: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
9: VF42FFFSDFUPQMsneswm2EH8Ez0.roa (hash: C9X9/mSo4i8MENtT8NUV24GkE0YJ8XgMU5LZdXbGwEM=)
10: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
11: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
12: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
13: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
14: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
15: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
16: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
17: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
18: rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa (hash: DfQCYLVTLDHaPYwEZnod4am8uTWdLzt8ct4fU6v77+k=)
19: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:9f:0a:3c:79:aa:11:5a:de:dd:d5:8f:6d:3e:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 18 18:00:42 2025 GMT
Not After : Dec 19 18:00:42 2025 GMT
Subject: CN=4d5faffc7d909c432537c6868da7a64ced0755b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:50:78:40:7a:51:7e:39:f5:5b:98:84:a0:
2f:a7:2e:b3:2e:ff:80:e2:04:cf:ee:d0:d1:7e:c2:
5e:fe:a6:bc:3b:4a:16:44:ff:62:8d:d1:f5:f8:b2:
c8:08:26:82:7e:94:ad:c8:3d:af:b3:92:06:11:b2:
4e:73:46:c5:c8:0b:d1:b8:97:9a:b8:46:b0:35:d5:
74:85:96:56:87:6c:81:92:01:ca:01:e2:5f:aa:da:
29:e5:58:4d:0d:fc:11:65:ce:f1:f1:15:4b:6d:35:
38:76:a0:9c:4b:04:70:fe:19:fa:ca:c7:37:3f:62:
c9:6e:1b:c2:e5:a2:56:bb:87:7a:14:3a:df:ec:06:
09:a6:cd:b5:e5:2b:29:da:de:c8:ff:8c:cd:f8:9f:
90:f6:c2:41:5f:94:2c:47:c5:7c:33:5f:ff:b1:36:
21:02:0a:7a:f1:4f:4d:96:f2:96:41:93:72:84:f2:
f0:b1:63:70:35:6b:3a:ea:c4:35:96:dd:e4:c9:4d:
a1:bc:b7:90:4c:2c:73:1f:90:20:fe:c8:19:ff:e7:
bb:3c:85:8f:55:be:29:7a:b7:a3:f9:4c:68:7f:b0:
8d:a9:c1:08:bf:d2:e9:ff:45:8d:26:a4:4a:5d:fa:
f3:3a:9d:bf:41:9a:ef:d2:62:e3:6b:a1:bd:fc:a3:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:AF:FC:7D:90:9C:43:25:37:C6:86:8D:A7:A6:4C:ED:07:55:B8
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c1:af:12:9e:64:c9:37:51:be:36:98:c3:d3:1b:46:e2:25:
94:79:bd:9d:f0:2e:66:1c:e0:8b:bc:cd:38:7b:e7:9d:d8:e6:
09:61:cd:8f:d2:dc:71:12:c8:e4:3d:47:e4:7f:98:f5:1f:71:
18:82:03:23:72:7d:43:36:e9:3b:28:b1:0f:63:34:1c:d3:bd:
2a:38:71:5b:05:53:8e:00:eb:31:d6:a4:f5:3b:1e:b6:35:6e:
32:0c:34:8c:9a:c0:f1:a3:38:d3:f0:5c:bc:2d:23:ae:bf:bc:
70:b2:32:ca:a6:a0:0f:a8:b8:a0:d9:fa:4f:5b:88:0e:9f:18:
5c:c7:b1:cc:0e:b2:bc:88:f8:7f:ca:df:25:42:37:7d:de:8e:
2f:d0:6c:0b:d8:22:8c:0c:e1:7f:4a:f3:a6:75:2f:75:93:58:
82:d8:83:4b:51:34:59:22:a0:af:69:17:2c:b4:6e:64:c5:c6:
8b:8e:fc:bf:fb:47:51:d1:05:28:7c:c4:2e:bf:6f:c7:72:e8:
f8:5c:ef:eb:7c:11:9b:f3:41:26:97:83:9f:14:47:7f:6a:10:
89:c4:d2:e7:6e:f1:6c:1e:09:13:b5:85:fd:ed:ea:d7:00:0f:
85:e6:98:83:8e:79:19:e9:06:58:7a:73:5c:cd:46:2e:e0:d6:
e5:6a:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:44:07 2025 by rpki-client