This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: bF8H8d6ITnJ6JkKZb5IXY7mMBJ6iEGDtQQVl00sT8q8=
Subject key identifier: 21:44:68:55:F4:04:F1:D0:12:82:82:71:1C:F2:42:57:A4:08:F6:7A
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 019AF19B75A522BF4EC1280E1883E3119EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 1782
Signing time: Sat 06 Dec 2025 03:01:28 +0000
Manifest this update: Sat 06 Dec 2025 03:01:28 +0000
Manifest next update: Sun 07 Dec 2025 03:01:28 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: mtE+JYf5mCUXi4mrmZCPgQv5E8IjX3mtXkQTakCKuGE=)
5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:75:a5:22:bf:4e:c1:28:0e:18:83:e3:11:9e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Dec 6 03:01:28 2025 GMT
Not After : Dec 7 03:01:28 2025 GMT
Subject: CN=21446855f404f1d0128282711cf24257a408f67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:53:6e:aa:b3:42:37:5f:3b:9c:72:37:6d:
4c:fb:a0:92:a6:b6:3c:74:b9:5c:f7:16:97:b2:fa:
f3:2b:86:98:da:ad:c4:da:a7:2f:ab:39:ad:90:48:
98:68:f8:04:a8:2a:ca:a1:8d:38:af:0a:83:3e:f0:
f7:cd:79:4d:4c:ff:7a:59:fb:52:8b:32:2b:9c:c1:
06:cb:11:b8:44:fe:05:de:f0:9a:97:80:ef:17:8e:
7a:83:4c:e8:c1:24:87:00:4e:aa:11:87:83:b4:ec:
1e:e4:7e:ed:41:b7:5d:20:89:97:d8:8b:b1:c5:57:
5a:7e:53:a2:7c:6d:58:e2:29:5e:ae:1c:8f:0a:f5:
97:3d:eb:3b:43:26:9c:4b:b1:d1:52:b9:15:de:50:
55:c6:a7:7f:18:f2:f9:fe:93:da:e7:a2:1f:b7:94:
7b:8e:45:6f:a6:f5:0b:d7:fb:69:34:f0:13:95:47:
05:8a:ff:26:a1:1b:5f:01:e8:2c:76:d9:e6:3f:ce:
65:10:e0:8b:93:6f:dd:ab:69:cf:ce:16:b0:27:ac:
4e:4e:96:23:26:0b:dd:36:b0:cc:86:d4:61:c1:50:
14:6a:18:a3:ad:ea:74:8b:95:14:59:04:d0:d0:a2:
14:fc:d1:44:e0:98:41:21:32:df:21:71:35:ca:15:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:68:55:F4:04:F1:D0:12:82:82:71:1C:F2:42:57:A4:08:F6:7A
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:1f:3b:7a:66:65:5e:7c:dc:4a:80:c4:bd:e8:37:a4:0d:
ee:c6:ba:5d:b2:c1:f1:2a:55:48:16:24:de:49:ae:25:3e:8f:
8f:b8:3d:8d:a1:9d:4b:8d:65:ea:9d:1a:df:f0:b8:a5:98:33:
99:fd:98:d2:17:3f:7c:15:5d:d0:f1:2a:83:4c:73:d8:a8:09:
a4:55:bf:f6:ff:e8:69:53:ed:91:bb:cf:ec:a0:74:bc:ca:01:
68:09:57:b9:39:ed:f0:46:1a:cc:0a:c7:58:66:30:f1:67:23:
50:a9:45:30:1b:c4:0a:dd:f6:96:4c:de:c0:e9:64:12:05:4a:
3c:2b:ef:14:2a:1e:c2:c9:61:d5:3c:13:50:2c:55:c9:f2:dd:
0c:ee:87:93:bb:ec:43:5b:5f:29:13:9b:c4:d1:85:50:c4:b2:
4c:76:72:1f:60:5e:03:5d:3f:15:de:35:98:c4:89:8d:a5:8d:
b5:94:88:5f:62:78:94:ef:93:15:ac:0c:bd:dc:3b:cf:d9:31:
87:76:36:6f:5c:34:7f:05:63:b6:e4:f9:f0:c1:c2:ad:1b:cb:
8c:a8:58:49:f5:cd:a5:7d:03:d3:2f:6e:8b:46:de:6f:85:1f:
92:0c:a0:82:69:c1:a6:0f:54:d1:2d:31:72:fe:ed:6c:eb:c3:
84:21:bf:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm3WlIr9OwSgOGIPjEZ7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm
ZjhmMzkwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD
EygyMTQ0Njg1NWY0MDRmMWQwMTI4MjgyNzExY2YyNDI1N2E0MDhmNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqlTbqqzQjdfO5xyN21M+6CSprY8
dLlc9xaXsvrzK4aY2q3E2qcvqzmtkEiYaPgEqCrKoY04rwqDPvD3zXlNTP96WftS
izIrnMEGyxG4RP4F3vCal4DvF456g0zowSSHAE6qEYeDtOwe5H7tQbddIImX2Iux
xVdaflOifG1Y4ilerhyPCvWXPes7QyacS7HRUrkV3lBVxqd/GPL5/pPa56Ift5R7
jkVvpvUL1/tpNPATlUcFiv8moRtfAegsdtnmP85lEOCLk2/dq2nPzhawJ6xOTpYj
JgvdNrDMhtRhwVAUahijrep0i5UUWQTQ0KIU/NFE4JhBITLfIXE1yhVxlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFEaFX0BPHQEoKCcRzyQlekCPZ6MB8GA1UdIwQY
MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt
NzJjODMxMjg3NjFiLzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi
LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgIfO3pm
ZV583EqAxL3oN6QN7sa6XbLB8SpVSBYk3kmuJT6Pj7g9jaGdS41l6p0a3/C4pZgz
mf2Y0hc/fBVd0PEqg0xz2KgJpFW/9v/oaVPtkbvP7KB0vMoBaAlXuTnt8EYazArH
WGYw8WcjUKlFMBvECt32lkzewOlkEgVKPCvvFCoewslh1TwTUCxVyfLdDO6Hk7vs
Q1tfKRObxNGFUMSyTHZyH2BeA10/Fd41mMSJjaWNtZSIX2J4lO+TFawMvdw7z9kx
h3Y2b1w0fwVjtuT58MHCrRvLjKhYSfXNpX0D0y9ui0beb4UfkgyggmnBpg9U0S0x
cv7tbOvDhCG/jw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:46 2025 by rpki-client