This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File: Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier: 3fRCYl/3oG1SclxJ+g/1XnU4Cw5mlY2v9j9FDlKzNRM=
Subject key identifier: 11:DC:C0:B2:30:3C:F5:EC:7E:F8:18:E5:F6:FD:74:80:72:F7:40:22
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 019AF23F730B5870AEB06D66B05DB2E50502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number: 078E
Signing time: Sat 06 Dec 2025 06:00:35 +0000
Manifest this update: Sat 06 Dec 2025 06:00:35 +0000
Manifest next update: Sun 07 Dec 2025 06:00:35 +0000
Files and hashes: 1: 3vz-rOJraHXgtuodvtQFH_a0-9E.roa (hash: IX6pchZZJC1/03c77tkG6zkGv/Mwl6B+D7gi48C82ao=)
2: 8oEJVvsajcBRoUJrjPZ44H-lDvU.roa (hash: s8IZbmglKempNB2FF6VAP5r2WVPZqYqiGBObGrONRsw=)
3: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
4: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
5: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
6: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: oDeRis/3Ow4Um52OXvaAfcMSKS4Mpe5RtF9xRX6qkj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:73:0b:58:70:ae:b0:6d:66:b0:5d:b2:e5:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Dec 6 06:00:35 2025 GMT
Not After : Dec 7 06:00:35 2025 GMT
Subject: CN=11dcc0b2303cf5ec7ef818e5f6fd748072f74022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:d2:37:21:83:8b:60:9c:eb:e5:92:b1:fc:
64:0b:ec:84:11:69:7a:11:9d:be:ad:8f:2b:83:94:
9f:a9:bc:d0:ee:9f:12:ac:14:18:59:a9:41:0c:74:
a1:2c:21:7b:7c:6d:6d:1e:d4:e8:30:fe:4a:e9:d6:
55:e3:87:c6:f4:63:51:b9:bf:e6:b7:06:62:6a:27:
1a:b4:30:14:95:47:fb:f4:6d:54:5b:20:db:8e:3b:
12:55:70:8f:a7:95:0d:93:18:ef:c1:c6:f3:9e:18:
04:a6:3a:ed:73:61:10:48:6b:2a:89:8c:e1:d5:82:
6b:bb:60:93:95:47:d2:ad:35:d2:4c:4a:7e:e5:62:
03:87:de:ce:87:d9:00:fa:d9:b7:58:be:f6:0d:68:
0d:d0:96:cd:b8:c7:88:e9:61:60:41:bb:d5:5b:a5:
f6:24:f3:98:16:5d:cd:44:fb:ce:99:c1:24:8b:06:
44:8e:9a:0f:1b:b2:d0:a5:fe:8a:9b:89:d8:d8:00:
71:b8:53:53:4f:74:d0:78:2d:1c:fa:e8:3f:9b:35:
5a:74:02:8a:ac:67:e6:a8:d0:df:ee:33:e7:55:b1:
53:70:3c:d5:92:fd:40:70:3a:fd:ee:09:d6:ae:7f:
a6:c4:7d:b9:64:9c:51:76:6c:3b:30:db:a0:6d:0e:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:C0:B2:30:3C:F5:EC:7E:F8:18:E5:F6:FD:74:80:72:F7:40:22
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:73:e9:2c:90:2f:73:95:ea:9d:1d:f3:2a:2b:92:9d:c0:2a:
2a:ed:87:57:a9:b3:29:f8:31:0b:7b:b6:09:b6:d9:26:51:79:
d3:91:50:05:d0:fb:c0:f8:e6:d5:24:00:d8:c9:d2:e7:aa:a5:
53:54:12:0b:fe:cc:7c:1a:8d:14:83:69:64:5a:dd:ae:24:7c:
7d:0b:98:82:8f:66:4d:07:12:11:67:eb:99:04:eb:d0:66:36:
68:1d:47:4e:9b:89:15:d1:9e:eb:b6:10:15:e5:86:c1:f7:b8:
f7:44:96:05:68:d6:87:1e:37:fd:00:c0:54:b6:71:77:76:72:
7f:44:49:b8:1c:c9:47:59:5e:2c:5c:b7:97:4f:f4:64:7b:3e:
73:dc:51:e2:87:3c:84:54:af:8a:c3:33:8b:8f:17:65:e7:ef:
99:49:81:d0:e4:1b:78:15:0a:3d:90:21:62:c5:c4:4b:c0:1b:
35:c6:4b:4b:06:f3:93:24:14:cf:18:27:8a:66:e5:9c:68:98:
de:7e:aa:cf:e6:be:b1:3d:2e:a7:84:5b:73:e3:03:13:ff:35:
18:42:5b:9b:9f:11:dd:7e:4d:0b:a3:19:fa:04:b8:f0:cd:3d:
72:6f:fe:40:14:46:44:b9:e1:68:70:05:57:06:f0:cc:aa:8a:
e6:9f:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:08 2025 by rpki-client