This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: bxguN5IYJkdwqO80D6YFbMYJDg6/Dsbf4I7ECGEx7FM=
Subject key identifier: 7E:FE:FD:7C:26:1B:09:06:C5:D1:F5:55:E7:80:2B:FE:DF:FB:88:FB
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019AF50BDBD517A2173033A0E5A5263BF768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 1018
Signing time: Sat 06 Dec 2025 19:03:06 +0000
Manifest this update: Sat 06 Dec 2025 19:03:06 +0000
Manifest next update: Sun 07 Dec 2025 19:03:06 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: BFQBPqac++MKNJ4dK3ohctuJM7SE9YybCNgxOf0DB1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:db:d5:17:a2:17:30:33:a0:e5:a5:26:3b:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Dec 6 19:03:06 2025 GMT
Not After : Dec 7 19:03:06 2025 GMT
Subject: CN=7efefd7c261b0906c5d1f555e7802bfedffb88fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:f7:52:86:62:63:22:80:b7:02:6f:e6:0a:
72:34:ee:7d:3a:4e:b9:67:ef:a1:be:fa:ae:81:0d:
e7:6f:6f:af:90:97:2e:37:67:62:1e:57:06:f8:b3:
db:15:4f:ed:af:10:39:31:56:c1:fd:2a:5b:9c:4a:
38:02:a8:54:65:33:b7:60:08:14:cf:87:6a:4b:83:
79:3b:d5:40:6c:82:c9:8b:a3:f1:05:f4:49:1d:c2:
c6:ff:37:04:e7:2e:f8:bc:f6:5e:15:d3:14:0a:3e:
20:02:8b:b0:8d:e7:7b:f9:37:56:e4:05:96:ab:1b:
38:45:5e:6b:52:b0:29:7b:54:89:12:68:ca:ef:28:
d9:f2:57:33:ee:ab:15:62:55:bb:f2:b8:02:30:56:
90:89:13:de:79:b6:37:c7:65:2b:39:a4:5b:b2:2f:
b7:b5:09:7f:09:79:6d:f2:3d:f3:f7:63:09:64:05:
c0:f8:93:82:32:4d:5e:43:23:9a:38:c2:a9:4f:b6:
c3:a8:bb:09:d1:1c:3c:cc:6b:60:76:06:9a:1b:b3:
41:e2:a9:ea:db:a9:52:85:56:22:ab:9b:ed:6f:5a:
b8:9c:5e:34:53:b4:ee:64:de:59:e6:80:ba:d4:ce:
6b:1a:6b:9d:1f:ac:9f:9f:c4:f2:74:ac:68:71:ef:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:FD:7C:26:1B:09:06:C5:D1:F5:55:E7:80:2B:FE:DF:FB:88:FB
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bc:6c:31:4a:e3:11:88:80:f5:47:93:74:3d:98:b0:4a:2c:
bd:9e:bc:f9:f0:b8:3b:5d:e3:5d:9b:9f:47:93:64:1c:57:53:
7f:a4:14:51:9f:ef:bd:d7:c2:88:ce:81:83:06:bc:a3:08:5f:
cc:c4:08:25:3f:93:67:b7:6b:91:da:aa:a8:c2:75:63:d4:a6:
49:83:1d:f7:70:4f:70:48:64:e9:80:06:96:89:b0:0a:1c:56:
fb:83:19:38:47:51:7e:7d:9e:dc:a1:f4:6e:4e:30:27:11:74:
a9:42:8a:f7:f5:4a:df:b5:05:dd:ad:b7:da:6f:2d:99:b8:f9:
b3:7b:4f:96:8f:96:73:56:32:ca:3e:96:4c:85:9f:0d:fc:d3:
9c:b5:42:b3:09:a3:31:4a:61:0f:4f:12:93:da:f8:0c:31:ed:
64:c3:bd:b1:04:ce:8e:a8:41:aa:97:af:48:1d:85:62:0e:b2:
13:78:4b:c9:a6:4f:ca:d2:0a:d4:62:06:51:2b:60:6a:a1:7b:
78:55:28:6b:84:2a:16:ec:2d:6e:cb:41:ae:5d:28:d9:5e:d1:
90:35:5e:83:56:4a:ce:a9:ae:da:79:b8:51:6a:2b:d7:56:61:
ce:14:b7:07:ff:00:50:17:91:6c:82:f7:06:9e:b9:1a:59:36:
be:0f:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:35:47 2025 by rpki-client