This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: YROol41Y5UKhtyKG674WNsl/r4tO8rT2cr+pyLd1cV8=
Subject key identifier: B3:BC:D7:75:6A:72:52:1B:BE:2D:69:7B:43:83:76:79:8D:57:52:F5
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019AF19B7BB3BA259FE0DFDF45699CFF0A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 12
Signing time: Sat 06 Dec 2025 03:01:29 +0000
Manifest this update: Sat 06 Dec 2025 03:01:29 +0000
Manifest next update: Sun 07 Dec 2025 03:01:29 +0000
Files and hashes: 1: 7U5QACnIOaStbs622wsLddtqk54.roa (hash: MDxD55R7Tx2xc7RKGAiVm7EdWOaqbi6TPzSWLg28j/E=)
2: uUmO4eQgA06FWzBgXavgD4gUjsg.roa (hash: LjcuMLZh0tEDYE3iK8zXiD1BcoZPHkSMre/5r/BtqL8=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: BO/FGs3LeSvG9IGkUczv6+gZeMImdz/5zECSd9J1D1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:7b:b3:ba:25:9f:e0:df:df:45:69:9c:ff:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Dec 6 03:01:29 2025 GMT
Not After : Dec 7 03:01:29 2025 GMT
Subject: CN=b3bcd7756a72521bbe2d697b438376798d5752f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:4f:e6:4d:e9:0e:b2:13:85:8a:58:8a:e5:
ad:29:00:9a:2e:27:b1:8e:6a:d9:b9:e1:c1:87:e3:
00:e3:00:82:24:80:3b:aa:44:6d:d2:d0:18:90:4a:
65:e7:99:94:e6:57:20:ed:fc:03:ef:44:f2:9b:ff:
49:20:cc:36:71:1d:96:1b:61:84:05:d4:a0:90:a9:
8e:09:24:7f:70:9d:30:3e:03:ce:0e:92:d4:3b:33:
f3:0e:19:e7:2a:06:34:24:33:4a:06:e3:0b:b9:fa:
a0:bf:29:74:4c:4f:20:f6:f1:72:45:37:11:f8:4e:
dc:d0:d8:73:7b:c9:6c:65:65:4f:f0:69:72:07:f9:
ff:3c:39:31:4f:78:fb:75:5c:f4:a4:88:7c:1d:9e:
b4:92:49:63:53:b2:b2:26:e7:0c:86:5d:af:7d:e9:
68:35:20:36:4e:12:3f:c9:47:9d:6b:9f:f8:91:2f:
d5:1d:b6:93:81:b2:d3:1c:4b:0d:02:9b:db:e9:6a:
87:53:36:8f:4f:6e:a8:fd:84:50:99:e9:0f:62:49:
c9:78:17:89:b1:b4:bd:bd:01:fe:4d:20:9c:09:aa:
b0:66:04:43:10:c6:7a:0f:d8:1c:99:17:85:d8:f2:
07:df:d3:c4:24:67:69:66:c2:fc:5b:ee:92:f7:b7:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:D7:75:6A:72:52:1B:BE:2D:69:7B:43:83:76:79:8D:57:52:F5
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:35:97:c1:c5:01:80:8a:12:99:d2:cd:d5:e8:79:aa:86:
2e:3e:86:60:e6:72:60:8c:69:e7:a8:d8:ad:ac:0d:a4:30:d3:
ad:f0:11:b8:01:a3:63:e2:22:1f:c1:78:48:d9:2f:ec:4e:84:
48:b4:fb:03:43:95:8b:40:ef:6c:96:f9:88:c2:12:d2:b9:84:
54:eb:1a:1f:c7:45:d9:86:0a:c8:d2:6c:db:a9:be:58:87:1c:
fa:52:d2:be:6f:f1:0c:6f:33:04:01:81:a8:af:32:b8:b3:df:
fa:91:97:3d:2d:21:26:31:f0:f4:76:a6:cd:22:8d:80:d3:ff:
21:1f:c6:c8:b3:e6:a1:3f:05:d8:fe:f0:46:ba:18:e1:78:39:
5e:1b:6b:8a:d0:6d:92:c1:e5:27:7b:4b:bb:52:da:27:65:86:
64:17:3e:5f:d6:51:23:e4:3f:1b:dc:17:2e:7d:66:ae:a8:26:
a0:2c:80:97:dd:7e:8f:b6:20:3e:6c:95:6b:85:52:97:20:9e:
70:1d:43:b7:fc:dd:3c:36:46:fc:d7:cf:60:5d:b6:2b:6d:df:
95:4c:01:11:70:a9:64:f2:62:68:51:7f:02:bf:f4:0d:d5:56:
4e:fc:0c:c1:ee:9e:9c:1a:50:c8:f1:c9:70:8d:cd:ba:43:09:
9b:c1:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:16 2025 by rpki-client