This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: nbfx6nidbYhGg8P8hmMahcdOzbYYK1elpK7pw7ZClkE=
Subject key identifier: F3:FA:1F:77:BF:AF:BA:FA:38:16:A3:33:8A:51:0C:76:58:39:17:02
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019AF57836C4C3396879D0FD85BD9CD2E6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 21:01:27 +0000
Manifest this update: Sat 06 Dec 2025 21:01:27 +0000
Manifest next update: Sun 07 Dec 2025 21:01:27 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: u4GXG4x5b5quGLLX8nRepY5D6YY+5oTl/0A2s3DOLTo=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:78:36:c4:c3:39:68:79:d0:fd:85:bd:9c:d2:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Dec 6 21:01:27 2025 GMT
Not After : Dec 7 21:01:27 2025 GMT
Subject: CN=f3fa1f77bfafbafa3816a3338a510c7658391702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:ae:74:3f:79:04:34:35:c6:9d:c9:5c:31:
9c:21:30:be:d5:b9:04:c9:01:3b:8c:66:c9:b3:8d:
ca:bb:03:7b:b0:fe:00:5b:05:2e:ef:83:2a:40:f6:
78:0c:71:4a:7e:bb:01:73:57:f0:e9:12:eb:00:72:
85:7e:b3:aa:2c:54:bf:ae:f8:10:e9:93:40:71:91:
dd:31:2b:ef:b0:fa:f8:52:f7:1b:e7:fb:f4:77:f0:
3d:50:1b:41:61:48:0d:ab:87:5c:9a:9d:2f:8d:fd:
ac:84:c5:8b:44:f0:eb:f1:34:23:cc:f1:39:8d:12:
3e:ed:e3:c5:06:44:74:bb:8e:34:1f:67:d8:44:23:
fd:3e:47:8d:cc:85:df:23:b1:e7:6e:e1:d2:3f:ca:
09:09:46:e1:32:50:94:86:a8:14:50:1a:e0:f9:5f:
e0:e2:4c:06:da:73:12:58:b2:b0:27:62:36:f8:42:
35:1a:79:00:0b:bc:33:0b:29:38:ab:eb:8b:6c:a4:
64:90:29:90:67:70:ef:10:ed:b0:21:e0:57:46:55:
1f:06:ac:d0:a9:61:4b:85:d1:5a:b5:e6:f4:06:9a:
96:55:7a:b8:a4:6f:89:18:29:42:8e:52:93:2b:22:
bd:91:c3:d4:d9:5f:9e:95:d5:93:bb:76:d7:84:8f:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:1F:77:BF:AF:BA:FA:38:16:A3:33:8A:51:0C:76:58:39:17:02
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:2b:bd:d4:3a:db:c7:a7:6f:96:c8:01:38:da:89:69:98:
61:cd:af:b7:48:24:0f:85:17:00:f5:2f:be:67:dc:c9:8a:2a:
59:03:f4:28:1d:79:b2:ac:5e:bd:69:3e:97:f3:94:c4:bf:f2:
45:1d:85:0a:fc:41:2c:b8:9c:9d:a4:2c:5d:fe:82:d9:f3:ba:
db:77:bb:a9:5e:1f:a8:6c:d2:bb:b5:ac:fc:52:67:24:38:14:
48:76:83:f8:f3:17:22:f4:9a:02:eb:43:fb:09:3c:e9:50:55:
63:6e:29:23:ff:9f:a6:8b:9f:1a:4a:75:ad:a1:47:91:c4:26:
f8:20:32:ec:b0:ee:f2:be:9b:e0:73:70:08:1e:4a:4b:ee:a0:
6a:fd:55:89:c9:65:96:67:ce:02:43:87:d8:d2:eb:1d:c6:6e:
29:25:e9:5a:db:1d:dc:1e:61:9a:6f:8e:aa:ee:0a:2c:67:77:
01:4c:04:dc:8f:51:d0:36:dc:48:c9:c1:5e:2f:ab:13:dc:52:
32:53:66:0a:64:27:77:62:b2:88:72:1c:ce:8c:e7:1b:55:92:
c0:54:6a:3e:bc:77:fc:05:b8:38:6b:e0:de:ed:18:b6:e8:f7:
5d:f7:8e:92:0b:eb:f1:46:5c:e1:0e:ff:85:78:e0:b2:65:66:
5f:11:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:59:47 2025 by rpki-client