This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: 6bZ9zo+C0zm4XbcCXlv95kIW52XFzhVyZ+NVXSdBOVU=
Subject key identifier: 34:54:22:CE:8B:92:CB:E7:75:0B:0A:5D:4C:71:95:22:D1:7F:41:36
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019AF276DAE2B2A4F41756B98462BED97916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 07:01:06 +0000
Manifest this update: Sat 06 Dec 2025 07:01:06 +0000
Manifest next update: Sun 07 Dec 2025 07:01:06 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: DZcJ5SmlG5aTVTCf1jAnrimnXh6mCp7Mk5vZ1m9IhV8=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:da:e2:b2:a4:f4:17:56:b9:84:62:be:d9:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Dec 6 07:01:06 2025 GMT
Not After : Dec 7 07:01:06 2025 GMT
Subject: CN=345422ce8b92cbe7750b0a5d4c719522d17f4136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:78:3f:da:3c:d1:e6:6a:9a:9c:c1:76:cf:
d8:33:59:84:5c:99:15:27:6f:78:3e:b4:0e:d2:02:
a5:1d:31:9b:1b:c6:81:94:30:94:70:b6:2e:d7:63:
3c:96:3b:49:dd:b0:95:85:0c:a3:bc:c5:7a:ea:73:
75:4f:b6:6f:1b:81:3c:79:30:5f:ea:24:bb:7e:69:
7b:a1:86:56:1f:7c:49:2f:15:94:64:9a:6c:d0:b7:
a7:5e:3e:fa:27:2a:1c:58:8e:f2:f2:54:b2:03:5b:
33:45:de:38:bf:66:3c:85:85:09:3e:83:af:b5:db:
2a:2e:a2:db:84:c1:de:43:d2:9e:a2:81:fe:63:e3:
3f:72:17:9a:37:72:bb:ae:ec:c1:4c:da:07:29:0a:
65:41:1c:48:d9:86:fe:e1:d1:ec:41:78:97:1c:2b:
ec:c0:15:32:e8:e9:24:a3:8e:a8:68:33:06:fa:38:
3f:12:35:75:0a:ca:f4:a3:9c:cb:0b:03:ac:ff:d4:
dd:c5:92:8a:5c:ee:29:5e:be:fd:a3:e3:53:d2:d7:
9a:32:6e:77:73:e6:9f:e3:5c:b2:7b:bb:c6:f3:28:
94:09:d9:5a:fa:4b:3d:83:c8:65:21:d7:c6:cb:ea:
3e:76:26:10:a4:d9:7f:e8:d9:a7:d0:58:a6:f0:af:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:22:CE:8B:92:CB:E7:75:0B:0A:5D:4C:71:95:22:D1:7F:41:36
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:e5:f4:d6:7c:d7:e3:38:eb:64:cf:ec:5e:c4:79:a8:f1:
78:6d:35:85:5e:13:85:2f:4c:ff:6a:65:54:58:ff:7d:36:97:
59:8d:3b:09:25:8a:29:ec:67:d6:26:a8:3c:83:71:17:18:93:
db:35:3b:bd:e8:c6:5d:48:5c:fb:8c:d2:f8:a6:ee:61:85:41:
26:09:de:be:53:72:6a:98:c0:9c:32:a3:2e:85:66:02:6f:62:
f8:63:6f:f1:46:5f:f7:d5:ff:6d:c8:6c:38:59:c0:ea:0e:51:
eb:35:0e:ef:9b:cc:9e:dc:15:d8:86:c1:1a:09:ea:95:87:bc:
b9:73:8c:7d:0d:a6:c9:d3:a0:ca:d3:dc:de:1f:45:f0:6e:1c:
5a:33:cc:b3:8c:d0:22:38:25:9f:ca:10:2c:ad:33:41:dc:13:
17:76:aa:5f:c9:dd:fe:cc:1a:72:a2:81:18:29:02:28:8d:97:
4c:a0:c8:eb:93:8f:fc:f0:bb:85:50:b8:2e:c6:3e:79:34:de:
48:3d:5f:79:3e:a7:cf:b3:79:9c:92:08:9c:4a:ac:40:af:62:
47:5c:94:b6:2f:00:be:92:55:e7:77:50:f7:81:f6:ec:6c:38:
12:7e:7c:71:83:94:25:7d:6b:aa:c4:88:b8:e5:e7:62:36:62:
0b:5c:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:09 2025 by rpki-client