This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: w869NEh6b51YVBfEAn2/hBwB5ztelw21F0A8/avPABo=
Subject key identifier: 6F:7C:30:CA:93:7E:60:C7:FD:F5:FF:44:28:9E:B3:C5:E4:73:6B:59
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019AF164771177598DCB0046E44A3BD5E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 054F
Signing time: Sat 06 Dec 2025 02:01:24 +0000
Manifest this update: Sat 06 Dec 2025 02:01:24 +0000
Manifest next update: Sun 07 Dec 2025 02:01:24 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: CjJqcptcwbZmqbXphl6+hodEcTImGaNkZv1UcEuIz+E=)
2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
3: dX64oYdO84sYoaZssnfnNSnjjZ8.roa (hash: gsXE0J7PM3QNxgRheiXzLzqDJ2lY8wkV0/36i7HSBdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:77:11:77:59:8d:cb:00:46:e4:4a:3b:d5:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Dec 6 02:01:24 2025 GMT
Not After : Dec 7 02:01:24 2025 GMT
Subject: CN=6f7c30ca937e60c7fdf5ff44289eb3c5e4736b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:7c:52:33:f5:26:9d:f4:d6:44:d5:e5:97:
b6:f2:35:13:c2:23:28:9d:38:96:1d:a3:ed:c9:1d:
73:42:42:58:ad:ff:cf:ca:d9:b9:99:08:b3:a9:4d:
54:cf:8b:e8:45:6b:c3:d3:b2:56:dd:10:ae:2b:c2:
8e:5e:75:71:4d:42:2b:22:11:ce:2f:06:0e:6a:15:
d8:d9:8d:2c:03:2c:8d:d7:4e:90:2a:75:0a:5c:35:
f4:f5:08:0f:0b:9d:d3:7f:30:36:9c:19:05:aa:66:
ff:79:e0:7b:eb:20:6a:17:b9:dc:8f:9a:7f:50:20:
35:53:83:5a:1d:5f:08:0e:f1:13:d8:72:99:a1:76:
13:e7:ec:fd:28:aa:d8:20:64:de:20:12:b6:aa:83:
85:e3:ac:aa:9d:d7:11:79:30:31:c1:99:e3:9c:00:
81:8d:88:77:65:b5:99:84:c3:5d:66:ba:c8:40:88:
8f:31:85:e7:b5:34:1e:61:2b:01:08:5e:88:98:3a:
93:32:f4:03:c5:a0:e3:62:ab:bd:20:16:dd:8f:3e:
ad:bb:21:63:b3:49:1d:39:eb:07:cc:e0:75:ea:e1:
41:fd:87:1d:83:4d:cf:69:04:98:87:d9:11:ba:83:
97:ed:64:de:67:51:54:a5:41:08:f7:5f:e6:0d:8b:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:30:CA:93:7E:60:C7:FD:F5:FF:44:28:9E:B3:C5:E4:73:6B:59
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:04:b6:d9:35:9b:d7:84:60:6a:91:38:19:61:6d:81:00:
e2:de:ce:9e:46:e5:a8:00:4c:e9:f8:d9:68:6e:6f:09:52:39:
68:69:d5:1d:3b:7c:2d:7b:95:cf:ec:b2:4e:ce:53:f3:c8:9f:
3a:72:d7:86:e9:c2:c0:a8:2d:aa:96:7e:60:97:16:71:43:fa:
bb:4c:d9:d7:a9:c2:6f:37:38:be:79:a3:4d:26:ca:2e:fe:9f:
af:f8:95:7f:ac:3b:38:de:d4:c1:74:be:4e:5b:9e:ae:37:41:
fa:9d:73:95:fd:c1:fd:86:1d:61:e0:2b:a2:f1:a7:5c:a9:82:
b5:ac:af:b1:d1:cd:58:0c:b0:ee:f7:3d:e3:c7:cd:8d:c4:6c:
f1:87:e9:ec:fd:da:80:b8:52:42:54:29:b3:bf:56:7a:53:fb:
45:74:23:e9:7f:ea:36:a5:05:32:7c:5a:cf:7a:61:ed:3e:c2:
e5:2f:99:5b:b7:13:ae:8e:56:3a:70:a4:9b:70:59:7c:22:36:
04:3e:76:23:79:95:3a:fb:d7:c5:d8:b8:cb:4b:71:65:20:e5:
1c:b2:16:6c:8e:d5:af:d6:b2:18:8e:a7:e6:b1:b0:78:54:b4:
89:08:97:df:d6:53:f0:b2:f8:57:74:11:7e:a3:5b:ce:2b:9e:
cd:e1:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:55 2025 by rpki-client