This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier: kt66oxew20FURgtXZdOxrqNRSm1b2M0ovfKKcZYSRf8=
Subject key identifier: 05:29:C4:5F:63:40:28:FD:2F:1F:17:28:B1:B2:7E:4C:24:36:D9:BF
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial: 019AF19B5D7EDA61704982E0168EAB6A5C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number: 0C92
Signing time: Sat 06 Dec 2025 03:01:22 +0000
Manifest this update: Sat 06 Dec 2025 03:01:22 +0000
Manifest next update: Sun 07 Dec 2025 03:01:22 +0000
Files and hashes: 1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: M7o7PkeM2Ep6DGKdQNsF70tFm8PPLp3JTYWCCHgE4lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:5d:7e:da:61:70:49:82:e0:16:8e:ab:6a:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
Validity
Not Before: Dec 6 03:01:22 2025 GMT
Not After : Dec 7 03:01:22 2025 GMT
Subject: CN=0529c45f634028fd2f1f1728b1b27e4c2436d9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:bc:c9:0e:2c:24:80:9b:8b:63:cd:da:35:
c6:c0:9a:31:79:f8:bc:74:fa:55:4b:89:5d:8a:d0:
74:dd:02:48:ab:04:ff:14:73:5e:08:55:6b:1e:a3:
dd:07:bf:0f:9c:8c:87:4e:bb:56:64:0c:21:b4:11:
12:47:e4:b6:fd:8d:b2:9d:cc:6d:0f:5f:e7:2a:c5:
59:9e:f7:66:19:8c:08:b0:46:07:d6:96:f8:67:65:
5c:7a:95:b2:24:80:da:64:4c:35:22:52:e4:e9:0c:
c8:0f:a6:98:8e:53:75:4b:4f:68:ab:a1:92:69:8f:
25:60:84:67:93:74:62:a2:3d:ba:0d:78:bc:94:86:
7a:fb:d7:c3:a6:33:e3:e6:4b:b7:e5:6c:dc:87:90:
7b:0c:1b:ed:6a:ba:09:48:7d:42:2e:22:cb:1d:80:
64:28:34:d0:7a:68:e6:da:c3:11:5d:1e:89:ca:6e:
e1:3f:44:9f:08:a9:98:23:58:bc:3e:00:5e:eb:df:
f1:a7:f6:5e:44:59:45:95:b6:6f:f5:c7:9f:fc:ae:
89:d9:62:ba:16:f4:6f:e1:da:32:23:31:26:28:79:
5a:05:86:f0:e5:58:de:1f:35:5f:bc:2f:25:97:32:
49:a0:33:94:80:0d:f1:ba:31:48:bd:d6:bf:c9:ef:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:C4:5F:63:40:28:FD:2F:1F:17:28:B1:B2:7E:4C:24:36:D9:BF
X509v3 Authority Key Identifier:
keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:95:8c:a0:66:5c:d8:81:bf:9b:23:e0:3a:db:29:41:24:8f:
6c:ad:29:fe:64:28:b7:3d:89:da:87:04:bb:b3:0c:5b:d1:3d:
fa:4c:72:20:fd:b5:6e:d1:3a:dd:cb:e6:ef:5f:99:00:e5:3f:
5e:a4:8b:3a:2c:5f:79:bf:84:d6:36:ce:ea:fb:3c:ca:93:2f:
df:08:50:1d:64:11:8a:37:31:0f:98:60:a7:70:c6:a1:8f:e8:
ba:97:57:9d:42:b8:1e:ea:8e:a2:b9:33:08:06:66:5e:3a:e7:
0b:8c:8a:40:47:83:26:22:22:a4:17:da:29:44:1e:ca:16:5e:
33:99:cd:53:18:3a:7e:c6:4d:66:d7:f8:8b:14:ca:18:0b:12:
76:0d:90:36:11:0e:8c:70:7a:41:7b:ac:6b:10:09:2b:95:63:
8e:8f:8e:97:81:6f:cd:89:a0:68:33:52:4b:3d:b3:2a:35:44:
e6:18:f7:ac:4d:6d:c6:6d:7f:24:72:2d:b8:d3:1a:0a:a7:67:
ae:da:d3:74:2f:35:f5:a1:31:7f:68:fc:d8:90:13:99:b6:4e:
df:f6:d0:6b:8a:a3:94:bc:aa:de:19:99:8d:8c:4c:c5:0c:33:
fb:57:93:99:f8:3b:1b:3b:b6:b3:ae:df:17:0c:d3:bd:42:e7:
c6:27:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:25:17 2025 by rpki-client