This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: rEXI1JxwdgQ9B37+w3TEdlt7bhIDoqUoHaLf07IVke8=
Subject key identifier: FB:2E:3E:B2:FE:4C:C3:4F:82:C5:3C:49:29:FA:DE:2B:34:49:80:99
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 019AF31D30B9EDC2E816EB44CB466B6D44B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 173B
Signing time: Sat 06 Dec 2025 10:02:47 +0000
Manifest this update: Sat 06 Dec 2025 10:02:47 +0000
Manifest next update: Sun 07 Dec 2025 10:02:47 +0000
Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: cy9uLAF+CtSj6h9aLwVEkYTiWMpoX+YUA9fEYz2FdQ4=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1d:30:b9:ed:c2:e8:16:eb:44:cb:46:6b:6d:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Dec 6 10:02:47 2025 GMT
Not After : Dec 7 10:02:47 2025 GMT
Subject: CN=fb2e3eb2fe4cc34f82c53c4929fade2b34498099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:67:d3:5a:ab:c8:80:a6:ff:77:2e:67:cf:
98:1e:64:5e:63:c2:c3:62:14:53:18:05:d4:64:2a:
76:db:1c:40:3a:13:68:23:86:fb:e0:03:e1:af:e1:
cf:38:1d:a5:9e:7a:5a:f7:f9:ee:3a:9c:72:33:16:
91:7b:92:7d:29:a4:b8:0c:f0:14:ef:b3:a3:03:76:
ae:df:5e:c1:9a:c1:b5:7e:7e:6e:e0:d1:6f:10:ff:
86:8d:db:a2:7e:d4:85:3a:23:4b:fd:d6:86:2e:a2:
e5:79:5f:d4:58:4f:d8:e8:6f:6f:71:b2:81:f4:2e:
16:4c:0b:6b:0f:4c:c4:ad:9f:52:19:e3:8e:dd:9b:
27:cf:af:d1:dc:d5:ee:92:a4:f7:2e:d3:a1:77:f7:
0c:11:20:4d:cd:06:46:6f:6e:40:dd:3e:a5:86:f0:
3f:a9:04:7e:f4:0f:df:67:8e:51:5c:0b:02:ee:75:
78:f9:db:c3:83:33:5b:ca:ad:fb:fb:39:93:a9:ab:
a3:ea:5e:e7:57:fd:49:5d:52:5b:8f:72:e3:c9:a3:
a4:8d:02:80:fa:35:99:3d:25:68:8b:fa:30:2b:da:
e5:0b:ca:92:a7:78:73:ab:9b:ae:b4:99:eb:42:50:
f7:c3:72:4d:cb:3b:b6:7c:06:e1:56:2a:49:9d:ab:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:3E:B2:FE:4C:C3:4F:82:C5:3C:49:29:FA:DE:2B:34:49:80:99
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:1b:e6:f5:0e:f0:03:65:8e:e2:5b:d0:d7:02:dc:56:cc:
7a:57:f5:40:02:ad:91:f6:28:10:2f:72:b8:c1:3e:24:0b:79:
ef:6b:60:78:ec:39:29:b6:58:ec:0e:b8:5f:c8:ee:f9:e0:37:
dc:9f:5e:f9:4a:8b:98:6c:e1:05:1a:08:5d:0f:37:2a:82:32:
c0:25:90:c7:90:a0:ec:9b:67:ba:34:cf:2e:9a:06:5b:b9:10:
0f:37:22:3b:d7:72:86:35:8b:1a:1c:f0:bb:ff:fe:ba:a2:b9:
a4:07:98:0c:78:13:19:b2:a2:8b:8b:86:bf:de:97:bc:aa:14:
3c:5d:b1:c3:d2:78:6f:08:51:df:a7:e3:28:ae:83:04:69:93:
61:9b:66:47:f9:59:1e:b2:bd:6d:29:02:e7:1c:b8:61:bc:10:
c4:e7:f4:df:37:8e:d5:61:7d:6b:9d:d0:b5:cb:ab:06:7f:84:
bf:2b:47:72:99:86:94:ee:37:1b:f9:59:cf:63:37:36:ad:54:
a3:93:52:2a:1b:b1:0f:25:2a:cb:b5:56:04:7d:c7:2e:7c:2b:
4a:2d:dc:25:f3:46:c8:73:50:93:18:d8:89:9e:2c:46:8c:67:
e6:2c:91:7c:1c:f3:5a:32:ad:2d:72:ba:cd:eb:58:40:8c:71:
9a:21:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:13:47 2025 by rpki-client