This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier: BWijsMHMLUDXnMxfFVkSco552KhRD3mfJ5l6FKDeJC4=
Subject key identifier: 4C:6B:8B:EC:47:23:23:AD:E9:C5:CD:0D:BD:87:0E:0A:29:93:F8:80
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019AF42E85EA7665176B7C72BB62E3293964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number: 0774
Signing time: Sat 06 Dec 2025 15:01:20 +0000
Manifest this update: Sat 06 Dec 2025 15:01:20 +0000
Manifest next update: Sun 07 Dec 2025 15:01:20 +0000
Files and hashes: 1: 3h99B3B928ItdGjcKoHk10e2CY4.roa (hash: QICYNqcrZ0Xnzlwywop1Rva0m6JoHs3pi7Cn/R4enXk=)
2: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=)
3: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=)
4: MSnKv-V5f4ZhMSBkUowC4eAKwnc.roa (hash: GNpg734fprSqUaaC2JbrcVA6y9oknxkgNnhf9ZX5sJE=)
5: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=)
6: Npq1TNKuwMiLXj4xggfpdtKHUTs.roa (hash: pux+9ScdO8KAjs6UbE4YP82eUBIvaNdfwIFp9r1xoyQ=)
7: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: iNdIAm4XN8QnKuYDEYgUP9C650Cwq06+5kyr97NJi2A=)
8: e6BOh4A7Z0EqXS_Z7v985a00_NI.roa (hash: EqH9IVqgjmT9i4a41FluNoDodNsuWZemaPP3A4ZtRNU=)
9: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=)
10: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=)
11: t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (hash: UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=)
12: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:85:ea:76:65:17:6b:7c:72:bb:62:e3:29:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Dec 6 15:01:20 2025 GMT
Not After : Dec 7 15:01:20 2025 GMT
Subject: CN=4c6b8bec472323ade9c5cd0dbd870e0a2993f880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:7b:08:f5:c5:14:f5:70:ae:31:5a:1c:69:
b9:33:e2:b9:f2:d3:9f:12:42:c4:0e:7f:58:3c:89:
4b:52:fe:f2:ef:28:ea:b8:ed:53:d8:fe:07:17:5e:
28:59:94:35:6f:ff:29:52:e2:12:d5:e8:28:d2:4c:
fc:24:15:5e:9a:f2:55:a0:3f:16:cb:7d:57:d4:a9:
46:a5:9f:50:96:27:b7:f9:cf:9d:c8:da:b6:0b:cb:
13:b1:a5:0c:9c:2b:9f:0e:29:04:6b:7d:07:32:63:
ef:0e:50:8a:12:9a:60:2c:df:4b:c2:ab:4a:24:f2:
93:73:34:6b:65:ea:dc:04:84:c2:07:b5:e5:b8:b3:
72:d1:20:e8:d4:54:68:f7:57:de:b9:66:62:83:75:
28:de:b0:49:cb:a6:83:a4:d1:9a:3c:9b:43:87:03:
3c:64:0e:65:64:41:c0:8d:e8:d1:25:4f:57:fc:9a:
e7:5b:86:eb:a1:f5:ba:a2:82:22:ed:c5:51:89:9f:
fc:98:18:2f:6c:1d:47:81:26:51:85:5e:8a:26:63:
6d:36:82:45:8f:23:f3:81:b0:a0:97:29:be:77:48:
69:c4:93:03:b2:55:4f:14:7f:84:69:1e:7a:55:66:
3e:5a:5b:92:4c:76:68:7e:27:8c:86:10:cb:65:09:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:8B:EC:47:23:23:AD:E9:C5:CD:0D:BD:87:0E:0A:29:93:F8:80
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:30:b2:3a:24:dd:a5:42:d2:92:ef:a7:31:52:c8:06:d9:7e:
a0:ab:b7:2d:c8:47:3f:82:9b:cb:5e:19:fe:2e:ea:ef:0a:fa:
91:74:ce:1d:78:5e:21:da:f3:bb:23:38:27:39:10:6e:e4:dc:
f8:ca:dd:dc:e9:50:8d:2c:72:94:27:ba:ff:be:0a:c9:68:ca:
d6:1e:ef:8d:d9:c3:d6:2d:bf:7b:ac:a3:83:9a:3a:dc:51:af:
95:1a:26:02:0f:ee:9c:5f:15:c0:f0:51:36:f6:de:54:6a:a6:
27:8b:84:03:7e:32:c9:b2:e7:0d:0e:be:1f:a8:0d:9b:b2:ca:
6e:3b:63:3c:b9:f5:37:da:a4:90:1e:87:14:62:a5:b2:e7:21:
b8:fa:bd:72:a8:ea:07:b7:fb:40:82:76:99:0a:04:8e:a6:48:
7a:ed:9e:e6:da:85:93:c9:aa:28:55:b6:a7:87:7b:44:74:75:
c1:29:5f:24:95:0d:7f:43:2a:06:66:db:ae:e0:94:6e:df:01:
b0:63:91:5b:f3:a3:5e:05:b6:e7:9e:f8:2c:4f:2e:90:6d:ff:
7e:82:bb:da:8d:63:38:f6:40:47:1d:b0:d5:03:ad:85:5b:66:
ed:ed:a4:a3:d2:8a:8d:44:cd:1e:4e:5d:6b:6d:2a:82:ac:20:
57:2c:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:50:34 2025 by rpki-client