This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: g5CtAVdyMumzk5Owvt12YGpvTM2mPmSlja7Yp2PlPFE=
Subject key identifier: BF:15:DF:8F:42:46:36:9C:F0:18:EC:AE:59:C8:C1:46:4A:1E:91:E4
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019AF23F6211941E3687F71FCE2A55219C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 06:00:31 +0000
Manifest this update: Sat 06 Dec 2025 06:00:31 +0000
Manifest next update: Sun 07 Dec 2025 06:00:31 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: 7E9r85gNWxKzp4yEZ5c4aOGoO1dxQjZ6mNKyIGd5hT4=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:62:11:94:1e:36:87:f7:1f:ce:2a:55:21:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Dec 6 06:00:31 2025 GMT
Not After : Dec 7 06:00:31 2025 GMT
Subject: CN=bf15df8f4246369cf018ecae59c8c1464a1e91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:70:b2:76:bf:d4:c6:60:93:6a:a6:18:32:
a5:af:a3:0a:3f:0b:76:84:e4:2e:32:71:58:b3:9a:
70:69:d0:7a:61:dd:cf:d0:79:fe:6f:39:18:37:0b:
ab:96:a2:44:c1:23:4e:3e:cd:2e:83:ac:bc:5f:64:
f5:1b:09:16:ef:9e:72:23:2b:f1:eb:c2:ae:2f:cc:
30:02:e2:c8:cd:f4:cf:f2:11:d3:7e:a4:20:d1:0e:
70:88:53:e4:4a:d6:ad:99:4e:17:b9:63:16:6a:81:
a7:9f:54:9f:7e:39:ef:4f:5c:87:b9:0e:ce:a6:a3:
ea:d6:89:f6:68:fc:96:10:56:ee:af:4e:48:f7:7d:
a7:81:c7:52:49:58:ba:61:ee:58:9b:37:40:db:8b:
b0:08:aa:3b:16:46:e9:0a:9f:79:07:9f:5e:15:ab:
2e:06:46:3e:2e:d6:4a:f4:a7:86:ec:92:1f:45:55:
9e:d4:f2:ff:9e:e0:f5:84:0e:63:ae:ff:d7:a6:7e:
35:03:76:dd:01:44:57:87:3d:d0:3a:ef:7c:c9:73:
07:48:24:13:f0:c2:98:7d:59:74:3a:1c:6b:60:55:
33:a6:5a:72:68:0a:b4:4e:02:00:32:f7:33:0f:ab:
fc:a4:3c:a6:c5:43:cc:0d:55:96:5a:36:1a:d2:36:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:15:DF:8F:42:46:36:9C:F0:18:EC:AE:59:C8:C1:46:4A:1E:91:E4
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:f0:fe:ca:a7:3a:ba:ce:fc:21:84:4b:15:2d:17:78:98:
98:5f:bc:35:42:2e:c5:22:2e:d8:44:2f:e6:27:d5:23:84:0b:
70:21:58:47:a2:38:e0:88:bc:cf:3f:21:bd:03:f2:c3:03:fd:
b7:53:c7:d9:b0:47:97:05:f5:95:8b:b6:c2:dd:f0:95:7b:b9:
57:88:cd:39:21:e1:2e:4d:8a:0d:43:9a:68:bb:34:bc:15:52:
b9:4d:a1:b4:2f:96:6e:4f:d0:61:74:a4:80:bc:cd:3a:7b:f3:
f1:95:73:3b:02:4d:40:0f:60:18:cf:4a:a3:b1:12:d9:b9:00:
c4:97:ec:d6:54:f6:ba:13:80:46:07:16:8b:e2:df:c0:57:c7:
1f:dd:5a:e7:8e:83:c7:cc:20:e9:85:7f:c9:1b:f9:f3:a5:e7:
ab:7a:7d:6b:49:a6:82:a2:d8:dc:53:e6:a7:5e:e9:d7:19:4c:
55:36:3b:25:92:09:37:38:81:83:d0:6f:4d:f4:d0:a3:72:8a:
e5:47:f5:9e:79:93:bb:d0:2f:e0:2b:71:3d:37:83:61:8e:74:
29:b9:2f:a3:a6:fe:d3:72:31:33:7a:05:40:4c:7d:48:01:c0:
87:09:bf:00:85:9c:08:36:a1:9e:30:05:f4:25:b4:c7:f1:35:
60:4a:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:30 2025 by rpki-client