This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier: oJiD4uYd6dm/iZ1gM45I95VZ9QOhG7NNpSiUUHRcPtE=
Subject key identifier: 0D:CE:BC:A1:34:75:FE:86:8D:0A:0D:14:49:DE:54:5A:FB:08:05:D9
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 019AF2096802AB6FC26D0D2F62DF32AACB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number: 176B
Signing time: Sat 06 Dec 2025 05:01:33 +0000
Manifest this update: Sat 06 Dec 2025 05:01:33 +0000
Manifest next update: Sun 07 Dec 2025 05:01:33 +0000
Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: 5jyPtJnOhFW6/3Bh95pEntvdbpH0d6Q5ahIz993SyYA=)
2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:68:02:ab:6f:c2:6d:0d:2f:62:df:32:aa:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Dec 6 05:01:33 2025 GMT
Not After : Dec 7 05:01:33 2025 GMT
Subject: CN=0dcebca13475fe868d0a0d1449de545afb0805d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:43:00:78:d6:16:f0:d1:f3:7a:85:be:ee:
5f:e6:e2:4b:0b:df:d6:a0:4e:d9:df:99:a5:e4:ed:
a3:9b:09:f6:d8:f6:83:38:ef:83:1d:f5:e6:b7:ca:
ba:7f:98:b1:ff:42:b4:7e:1a:6e:82:22:dd:cf:2e:
1d:75:94:03:18:e0:4b:c0:04:56:6b:f7:bc:97:f0:
64:4f:be:dc:51:0d:9f:e4:c0:7b:e7:15:20:89:c2:
a4:c7:a2:ca:42:6a:86:fd:0a:b9:d8:d9:0f:f7:c9:
9f:bd:59:fa:5d:c2:3f:61:5d:2a:4c:fb:64:cc:41:
f1:9a:f2:dd:ea:35:af:c8:1e:87:2a:05:0c:27:c5:
52:67:0b:b7:ca:15:43:af:e1:79:44:16:5a:b5:1f:
14:63:b5:89:d8:bb:e7:c1:b5:e8:38:90:f2:6d:cf:
86:6b:32:84:ae:d7:a4:4c:e3:19:f8:1b:ed:f0:f8:
bf:4a:11:fd:92:52:99:07:4d:e1:36:15:c2:2e:da:
b0:4e:38:b1:38:ee:c2:85:30:21:56:30:3a:23:a9:
7b:95:47:55:0d:df:69:78:69:b6:a1:e5:34:21:29:
99:ff:ab:55:05:ad:cf:62:c7:87:5f:89:80:7b:32:
f6:10:06:2c:1f:d7:a9:ef:e7:88:37:84:46:93:6d:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:BC:A1:34:75:FE:86:8D:0A:0D:14:49:DE:54:5A:FB:08:05:D9
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:36:a7:d3:e7:e4:b7:52:e6:6b:3a:9e:91:c8:b7:01:fe:
1d:c2:ec:86:f4:42:e0:e5:ee:a2:2c:5b:1b:b3:97:b4:b3:47:
67:d7:47:7f:d1:e7:ad:12:74:7d:df:0e:fc:48:86:3e:a0:55:
14:38:f6:05:e2:9f:e4:df:04:6c:7e:b0:75:a8:0e:cb:cd:ae:
bf:c5:83:02:9f:a0:d8:bb:65:f0:c8:e2:e2:91:c7:10:f6:4e:
f0:e1:c0:72:d8:e3:fa:52:54:83:73:ac:5f:94:f0:fb:b4:f4:
e2:81:17:62:53:6e:25:a9:0c:fa:0b:8a:be:31:cd:5b:75:21:
f5:72:ad:7e:7d:4c:40:aa:9e:bf:b0:ae:64:b3:86:e0:d6:49:
da:5d:b7:d3:16:c6:8d:06:33:00:ed:b7:ad:3e:b2:d5:2c:37:
75:90:4c:18:a4:28:07:17:60:16:9d:9a:65:f3:69:f2:f8:84:
b3:51:7a:1b:c4:42:9c:58:07:b6:8b:65:7c:3c:62:83:de:5e:
df:b6:d7:fc:8d:54:48:67:2b:26:96:eb:63:65:55:5d:f7:cf:
9b:1b:29:0a:81:ab:02:8f:cf:0f:c1:f0:39:77:17:23:7d:8a:
72:d4:da:23:2b:74:79:3c:b4:82:f9:49:fb:d8:f4:41:97:a1:
6f:34:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:24 2025 by rpki-client