This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: meXGrYcUGPy+WKsp+Kd2dIzi6kmhloF8BPL3QwShRoo=
Subject key identifier: 39:2A:47:43:48:81:35:1E:97:45:3F:F6:97:2D:F5:BB:72:6B:97:A3
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019AF20950A55D6F683CA0BA071E34EC6D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 16F4
Signing time: Sat 06 Dec 2025 05:01:27 +0000
Manifest this update: Sat 06 Dec 2025 05:01:27 +0000
Manifest next update: Sun 07 Dec 2025 05:01:27 +0000
Files and hashes: 1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: Pdm4o+IBubfJAsQ5Isg6F9yAiwTkkY5pJgFtYmfCZPk=)
2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:50:a5:5d:6f:68:3c:a0:ba:07:1e:34:ec:6d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Dec 6 05:01:27 2025 GMT
Not After : Dec 7 05:01:27 2025 GMT
Subject: CN=392a47434881351e97453ff6972df5bb726b97a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:61:2e:4f:37:0f:ed:13:9e:df:b4:2c:c4:
f1:55:15:c4:a1:cf:87:a1:e1:61:d9:b4:33:3b:42:
77:9d:64:83:26:ac:c6:5e:08:d5:1d:f9:ef:cd:b9:
d6:57:38:0a:58:6d:a4:e8:7e:5d:41:4b:97:23:b2:
de:c1:4c:c9:53:9d:c2:8c:d1:6f:c7:f3:95:55:f8:
19:cb:ce:07:88:43:b8:0d:61:5e:f2:8c:ab:ca:8e:
cf:86:4d:18:54:14:7a:79:fb:46:3d:9c:8e:1c:fa:
0f:10:95:36:ab:be:7c:b9:f8:0c:cb:90:8d:07:c5:
82:f2:36:3b:c4:0d:fd:cf:0e:2c:58:e0:fb:a7:4e:
e6:3a:e9:da:c8:ed:32:2b:88:43:3e:b1:74:72:2e:
4a:13:28:1d:83:05:c2:4d:3a:e4:58:2a:97:00:f0:
15:6c:cb:e4:56:0a:8e:44:78:71:26:fa:6c:b9:80:
3a:0b:05:b0:28:52:1a:76:a2:20:d6:ef:75:46:70:
9e:72:73:83:e1:dd:9d:53:d7:c4:f1:a7:3e:32:a7:
ed:81:c8:3d:0e:74:48:87:75:7c:42:d3:63:8c:8d:
4d:dc:fa:8a:d7:a2:37:d2:02:93:ce:6f:8e:ed:aa:
b8:d5:d0:3a:bc:46:ad:fc:f8:bb:85:26:ca:06:d7:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:47:43:48:81:35:1E:97:45:3F:F6:97:2D:F5:BB:72:6B:97:A3
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3b:63:3b:6e:57:fe:56:9a:8b:e8:6f:4f:e5:fe:e8:36:6d:
bf:c3:4d:b3:f9:88:88:40:af:96:84:a5:29:1d:70:99:4d:4c:
9a:70:a1:7a:3c:24:bf:79:86:37:1b:47:26:36:67:96:5f:8b:
8c:f7:19:14:68:27:6a:6b:0a:7e:60:cc:c1:31:a5:4a:92:58:
15:f2:5d:cb:7c:86:bc:e3:3b:5d:22:b3:5c:9f:45:a7:7a:ac:
c6:26:bc:a0:2f:7c:61:df:b8:ec:5b:55:63:b6:18:a0:a7:3a:
0a:d0:84:b1:24:20:e2:9e:82:48:9f:98:94:45:66:25:64:01:
ae:34:c1:b4:75:7f:ba:19:aa:ff:ab:c8:a4:ea:73:b0:1f:c9:
3d:37:aa:f9:b2:f2:e6:a8:e5:59:c7:55:d4:d9:a7:12:fe:5e:
fb:dd:ef:b6:b7:35:4e:ba:70:84:50:07:6c:f6:c1:c4:18:b6:
2e:91:32:da:ed:f4:76:fc:19:f7:7c:df:5c:53:8a:58:df:ba:
43:35:73:a4:c0:aa:18:3b:4c:11:06:3f:9c:a6:90:b3:03:6c:
b6:c1:87:ac:73:05:aa:99:c5:1a:c4:41:48:c1:6a:10:df:e0:
14:b5:07:09:b9:06:e5:c1:e8:a6:12:d9:e5:e5:bc:fc:03:6a:
e0:d2:9c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCVClXW9oPKC6Bx407G1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw
MTI4MGUwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD
EygzOTJhNDc0MzQ4ODEzNTFlOTc0NTNmZjY5NzJkZjViYjcyNmI5N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T9hLk83D+0Tnt+0LMTxVRXEoc+H
oeFh2bQzO0J3nWSDJqzGXgjVHfnvzbnWVzgKWG2k6H5dQUuXI7LewUzJU53CjNFv
x/OVVfgZy84HiEO4DWFe8oyryo7Phk0YVBR6eftGPZyOHPoPEJU2q758ufgMy5CN
B8WC8jY7xA39zw4sWOD7p07mOunayO0yK4hDPrF0ci5KEygdgwXCTTrkWCqXAPAV
bMvkVgqORHhxJvpsuYA6CwWwKFIadqIg1u91RnCecnOD4d2dU9fE8ac+Mqftgcg9
DnRIh3V8QtNjjI1N3PqK16I30gKTzm+O7aq41dA6vEat/Pi7hSbKBteICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkqR0NIgTUel0U/9pct9btya5ejMB8GA1UdIwQY
MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt
YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2
LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajtjO25X
/laai+hvT+X+6DZtv8NNs/mIiECvloSlKR1wmU1MmnChejwkv3mGNxtHJjZnll+L
jPcZFGgnamsKfmDMwTGlSpJYFfJdy3yGvOM7XSKzXJ9Fp3qsxia8oC98Yd+47FtV
Y7YYoKc6CtCEsSQg4p6CSJ+YlEVmJWQBrjTBtHV/uhmq/6vIpOpzsB/JPTeq+bLy
5qjlWcdV1NmnEv5e+93vtrc1TrpwhFAHbPbBxBi2LpEy2u30dvwZ93zfXFOKWN+6
QzVzpMCqGDtMEQY/nKaQswNstsGHrHMFqpnFGsRBSMFqEN/gFLUHCbkG5cHophLZ
5eW8/ANq4NKcxA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:00 2025 by rpki-client