This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: 4Qvj7X6fM6dnv9hE/HOIB3N/Gl5/JPnPnxsps2PrRy0=
Subject key identifier: 46:6C:34:08:47:C8:E7:8D:4E:03:9C:88:21:95:34:72:F8:86:86:20
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019AF3C016462694CA925F77BA115EE11B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0E58
Signing time: Sat 06 Dec 2025 13:00:43 +0000
Manifest this update: Sat 06 Dec 2025 13:00:43 +0000
Manifest next update: Sun 07 Dec 2025 13:00:43 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 7Ec9e4gW7cEwwlCyxEeLjOGTfMiEvy1Lcygvj+frcAg=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:16:46:26:94:ca:92:5f:77:ba:11:5e:e1:1b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Dec 6 13:00:43 2025 GMT
Not After : Dec 7 13:00:43 2025 GMT
Subject: CN=466c340847c8e78d4e039c8821953472f8868620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:0f:7f:e6:8c:39:6b:91:c0:e4:f2:51:10:
ac:e2:99:e7:05:df:70:b5:32:4b:92:44:29:1c:ed:
fe:eb:60:c3:53:01:68:76:53:38:3d:6f:82:2f:17:
d4:b2:87:85:e0:dd:0f:22:c9:6e:02:51:fc:02:f2:
1c:3a:be:a2:d0:1e:cf:86:2d:11:5e:f1:d9:54:0d:
99:7e:d4:b1:02:ae:45:a0:29:88:98:64:72:f6:ab:
fb:ab:a6:2f:b4:cb:81:9f:b5:76:f7:9c:fd:09:06:
fd:f8:9b:75:b8:03:62:6f:b8:95:e3:bb:87:99:3b:
68:fd:17:2f:75:ed:b7:e9:ec:e5:c8:90:c9:de:37:
13:de:39:6b:ba:92:99:cf:3f:76:13:4a:68:83:b5:
51:35:8a:99:d5:62:22:39:9c:36:a9:a7:79:ac:fb:
9b:ef:f7:e4:b2:95:d6:58:96:24:42:16:94:75:7f:
79:9f:91:38:c8:71:cc:98:80:8f:d4:d6:fa:c5:0f:
61:56:d6:f7:95:4e:13:0f:07:f8:49:ef:c7:0f:58:
b6:93:ba:33:d8:cc:62:24:da:e1:8b:73:d9:92:76:
81:84:60:74:dc:c1:48:9c:7c:10:61:08:6b:80:ff:
bb:7b:f2:18:c1:e3:1f:3f:75:35:fa:34:15:de:68:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:34:08:47:C8:E7:8D:4E:03:9C:88:21:95:34:72:F8:86:86:20
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:d0:ff:b7:31:5c:6f:9f:cb:f2:71:e2:70:08:1c:bf:73:
02:11:0f:04:15:8f:81:6c:14:b3:3f:8f:b7:c6:c5:76:1b:d8:
bc:64:92:e8:27:28:ce:d4:6c:35:2c:45:74:cd:4c:02:af:05:
cd:5b:de:5f:31:87:b7:d7:8b:ea:84:d0:8b:d6:94:5e:5b:b2:
11:04:22:d0:2b:f3:05:8b:78:4a:33:64:90:94:e5:2e:12:1f:
e4:ff:bc:d4:0a:49:47:81:27:03:c7:f8:0d:97:55:9e:07:ff:
f1:b7:31:33:d8:11:56:23:b9:68:b6:2c:35:b6:7b:80:24:67:
49:16:c6:a0:bd:58:92:12:e6:7f:ef:2a:bc:00:c3:d4:1c:62:
c4:b0:c6:f3:09:ac:4d:da:7f:1c:35:68:03:c2:8c:e4:65:f5:
d5:10:78:69:78:05:d3:10:10:af:df:d8:c0:a7:4e:29:2c:32:
32:5b:55:13:37:0b:6d:f8:c7:78:0d:94:ab:1d:14:18:59:07:
9a:0f:88:04:e6:3f:55:cf:e3:9a:9c:82:d5:58:d3:ef:d8:b1:
5f:25:c9:16:19:a2:08:67:eb:4a:10:5c:e0:bc:1a:51:c0:8e:
99:72:2a:a7:3b:5a:2e:47:6c:75:c1:7f:96:0c:ee:e4:41:7c:
4c:be:54:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwBZGJpTKkl93uhFe4Rs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk
N2E3OTAwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD
Eyg0NjZjMzQwODQ3YzhlNzhkNGUwMzljODgyMTk1MzQ3MmY4ODY4NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzYPf+aMOWuRwOTyURCs4pnnBd9w
tTJLkkQpHO3+62DDUwFodlM4PW+CLxfUsoeF4N0PIsluAlH8AvIcOr6i0B7Phi0R
XvHZVA2ZftSxAq5FoCmImGRy9qv7q6YvtMuBn7V295z9CQb9+Jt1uANib7iV47uH
mTto/Rcvde236ezlyJDJ3jcT3jlrupKZzz92E0pog7VRNYqZ1WIiOZw2qad5rPub
7/fkspXWWJYkQhaUdX95n5E4yHHMmICP1Nb6xQ9hVtb3lU4TDwf4Se/HD1i2k7oz
2MxiJNrhi3PZknaBhGB03MFInHwQYQhrgP+7e/IYweMfP3U1+jQV3mgeIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZsNAhHyOeNTgOciCGVNHL4hoYgMB8GA1UdIwQY
MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt
Yjc5NTUyZTcwMGM1LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1
LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjjQ/7cx
XG+fy/Jx4nAIHL9zAhEPBBWPgWwUsz+Pt8bFdhvYvGSS6CcoztRsNSxFdM1MAq8F
zVveXzGHt9eL6oTQi9aUXluyEQQi0CvzBYt4SjNkkJTlLhIf5P+81ApJR4EnA8f4
DZdVngf/8bcxM9gRViO5aLYsNbZ7gCRnSRbGoL1YkhLmf+8qvADD1BxixLDG8wms
Tdp/HDVoA8KM5GX11RB4aXgF0xAQr9/YwKdOKSwyMltVEzcLbfjHeA2Uqx0UGFkH
mg+IBOY/Vc/jmpyC1VjT79ixXyXJFhmiCGfrShBc4LwaUcCOmXIqpztaLkdsdcF/
lgzu5EF8TL5UoQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:51 2025 by rpki-client