This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: WD1i5/BDB72c1WpB7hoy5m8g2lg72QT9CHJzvaQ9gnY=
Subject key identifier: 60:81:52:08:C3:87:88:1D:60:B1:56:68:F8:1F:B3:FF:4F:8D:D8:03
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019AF1643578AFD9910B2BD3B234C8FEB352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 02:01:07 +0000
Manifest this update: Sat 06 Dec 2025 02:01:07 +0000
Manifest next update: Sun 07 Dec 2025 02:01:07 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: zRmqyBKg2TrKKf3dCVJD6EojLwLyj1kOSUXKECWbDqI=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:35:78:af:d9:91:0b:2b:d3:b2:34:c8:fe:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Dec 6 02:01:07 2025 GMT
Not After : Dec 7 02:01:07 2025 GMT
Subject: CN=60815208c387881d60b15668f81fb3ff4f8dd803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:b1:75:a5:0c:93:89:dc:b5:dc:24:07:1d:
1e:f0:ae:22:c9:1e:9a:86:89:03:98:38:c1:34:e8:
a7:bb:f1:2d:74:32:2c:dd:71:68:b1:80:c9:a8:fb:
2c:b6:74:a3:65:39:7f:79:75:ad:94:6f:08:f7:d7:
29:15:e0:69:1b:08:9a:2d:95:ea:b4:94:70:09:f5:
5c:49:f9:28:2f:cc:76:ca:9d:3d:0a:38:9b:90:ba:
db:79:d3:66:32:e3:7d:d4:26:6f:8e:df:41:4c:22:
95:51:2f:b7:ec:b5:04:8b:80:f9:c8:91:93:c0:5d:
a3:ca:f6:88:d9:22:ae:e3:6c:7f:30:87:c4:ab:36:
00:14:82:cd:b1:ae:b5:52:d1:b1:69:8f:8d:27:70:
84:b7:c9:1b:73:dd:69:2a:ef:a7:8c:4e:ca:43:f1:
92:f6:ca:b5:cf:4f:45:71:1d:e1:6a:56:f0:f2:a0:
63:f5:e7:07:8f:73:2f:a9:a9:21:5f:96:c7:f6:61:
47:77:a0:42:f8:5d:96:3f:16:8a:13:52:cb:23:a4:
d9:07:87:2c:2d:2a:06:de:51:59:86:c6:7a:01:ad:
98:ef:b9:68:33:d9:ce:dc:7a:a5:07:12:5d:1d:ee:
0b:16:9b:00:a2:70:80:f4:f2:6e:6f:e1:e2:e5:c7:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:52:08:C3:87:88:1D:60:B1:56:68:F8:1F:B3:FF:4F:8D:D8:03
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:25:f9:ee:ea:48:b6:db:58:af:0a:16:f9:62:b9:f6:3c:e2:
1f:da:00:69:5f:c1:c6:e5:dc:20:c1:b1:5d:d8:46:3f:62:48:
56:74:e0:5d:b8:90:20:8c:2d:b2:1c:53:a3:64:01:f5:d4:2b:
9b:de:ad:88:e9:02:5c:86:a0:d5:ec:0d:d7:1e:3c:ef:e0:df:
cc:1e:72:af:18:c9:17:62:75:06:51:56:0a:0b:a7:18:37:0f:
09:c2:19:df:a7:d9:96:d3:8b:a9:ce:c7:42:b4:55:ac:b9:62:
44:07:7f:0a:2c:c3:27:ed:7e:f2:00:01:bd:b2:5c:b3:c8:80:
9f:cf:54:45:39:af:92:2b:c9:04:71:1a:f6:fa:55:89:0b:87:
7e:b6:5c:50:04:43:7d:26:b2:a3:f3:5b:e8:f6:f8:a0:8e:9d:
a0:2c:5f:ad:01:4b:77:8a:db:d6:6e:11:03:ba:80:82:2c:9f:
20:e7:8e:d3:79:e0:f5:5f:73:d9:88:10:f1:8e:42:aa:b7:46:
ff:4b:5f:5a:4d:f5:0d:f7:59:9c:d8:bd:d7:01:41:e4:7a:a5:
b9:b0:20:a9:17:ab:f1:e1:75:d2:6f:44:26:8a:1f:47:4e:d3:
af:57:fa:7c:dc:1a:0e:25:b5:02:22:df:e9:d2:ef:b4:9a:d3:
79:1a:ff:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZDV4r9mRCyvTsjTI/rNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy
MDg0NTcwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD
Eyg2MDgxNTIwOGMzODc4ODFkNjBiMTU2NjhmODFmYjNmZjRmOGRkODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAyxdaUMk4nctdwkBx0e8K4iyR6a
hokDmDjBNOinu/EtdDIs3XFosYDJqPsstnSjZTl/eXWtlG8I99cpFeBpGwiaLZXq
tJRwCfVcSfkoL8x2yp09CjibkLrbedNmMuN91CZvjt9BTCKVUS+37LUEi4D5yJGT
wF2jyvaI2SKu42x/MIfEqzYAFILNsa61UtGxaY+NJ3CEt8kbc91pKu+njE7KQ/GS
9sq1z09FcR3halbw8qBj9ecHj3MvqakhX5bH9mFHd6BC+F2WPxaKE1LLI6TZB4cs
LSoG3lFZhsZ6Aa2Y77loM9nO3HqlBxJdHe4LFpsAonCA9PJub+Hi5cfI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCBUgjDh4gdYLFWaPgfs/9PjdgDMB8GA1UdIwQY
MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyX57upI
tttYrwoW+WK59jziH9oAaV/BxuXcIMGxXdhGP2JIVnTgXbiQIIwtshxTo2QB9dQr
m96tiOkCXIag1ewN1x487+DfzB5yrxjJF2J1BlFWCgunGDcPCcIZ36fZltOLqc7H
QrRVrLliRAd/CizDJ+1+8gABvbJcs8iAn89URTmvkivJBHEa9vpViQuHfrZcUARD
fSayo/Nb6Pb4oI6doCxfrQFLd4rb1m4RA7qAgiyfIOeO03ng9V9z2YgQ8Y5CqrdG
/0tfWk31DfdZnNi91wFB5HqlubAgqRer8eF10m9EJoofR07Tr1f6fNwaDiW1AiLf
6dLvtJrTeRr/NA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:10 2025 by rpki-client