This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: PEjB1/S2jLUYbvAyQsP/YU3YHPCqg4XMx0E9lo6j3xg=
Subject key identifier: CC:D2:28:F2:70:A7:31:F3:38:D6:21:02:10:14:80:BD:CE:4D:82:F5
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019B2250394C4C442D5309945C3A1B8C5EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 03CE
Signing time: Mon 15 Dec 2025 14:00:41 +0000
Manifest this update: Mon 15 Dec 2025 14:00:41 +0000
Manifest next update: Tue 16 Dec 2025 14:00:41 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: wC2HyE69DHkvr24tO2ZgjC1tw6jUV9NrD5JPH0YiAdM=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:50:39:4c:4c:44:2d:53:09:94:5c:3a:1b:8c:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Dec 15 14:00:41 2025 GMT
Not After : Dec 16 14:00:41 2025 GMT
Subject: CN=ccd228f270a731f338d62102101480bdce4d82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:f0:92:38:a0:9c:5f:58:fb:94:8d:c0:73:
24:47:b1:6f:c1:25:65:3c:19:2e:8e:b4:a6:f4:1e:
cd:cc:bd:0d:02:4a:ee:7e:0f:8a:c1:d4:bf:0e:cc:
77:b5:54:b0:fd:eb:73:61:be:08:30:c7:81:4d:49:
6e:63:64:8c:5a:9f:83:05:52:e4:75:4b:04:31:4b:
90:e4:c3:bb:07:37:23:21:70:b2:e7:d2:b8:a0:ba:
d8:59:0c:31:78:75:df:bb:3c:e5:9b:4a:81:51:34:
87:a4:ad:c2:8f:56:06:a1:05:00:29:35:22:1d:5b:
24:03:69:59:1a:35:f6:95:40:02:8a:51:ab:29:d9:
5e:9b:59:ea:90:e4:ce:9c:aa:c5:02:25:50:88:00:
b8:7e:51:91:f6:ee:2b:af:dc:21:f4:f9:0a:12:c8:
ac:83:2b:94:f6:ff:0b:c7:87:e7:b5:6a:bd:0d:de:
6c:a7:13:9d:cc:38:32:d9:9b:70:cb:64:2e:99:07:
f2:a8:b9:e2:11:f6:82:9e:f3:e8:92:6a:94:74:9e:
5c:2c:0f:ce:52:ed:37:4b:56:21:5b:bd:2b:5c:dd:
97:84:20:7c:f1:ae:c3:04:84:34:a2:f8:ab:ff:d5:
21:36:c5:b6:b8:72:f0:fa:f2:5d:16:41:66:6a:01:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:28:F2:70:A7:31:F3:38:D6:21:02:10:14:80:BD:CE:4D:82:F5
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:06:51:71:dd:d6:7b:f4:5e:12:3b:8c:c0:16:47:16:4d:
1b:49:45:4c:a1:d3:a3:6d:f4:e3:59:8c:0b:0d:8f:bf:59:d1:
d4:3f:d6:23:9b:2e:8c:0a:50:70:e0:8a:a6:b1:a0:51:37:63:
cb:94:60:dd:6f:0e:59:52:53:8b:9d:b9:6b:16:38:73:b3:aa:
18:c4:df:28:ad:43:2c:7b:bf:39:4b:fa:aa:17:de:c5:da:af:
bb:b3:7e:64:a0:72:9f:83:08:67:6a:35:16:f1:50:62:e3:07:
20:1e:fc:e3:c3:83:f5:c4:b1:23:22:4b:8e:e6:d4:34:10:89:
4f:69:b5:bd:8a:98:67:90:fe:9f:90:21:34:60:ff:43:21:a9:
e0:35:42:60:75:d1:58:e7:af:f4:00:b1:f5:ea:3d:90:ee:1e:
0a:3c:b6:ca:47:8d:f7:e5:83:ce:0e:3f:eb:17:90:06:ea:96:
e7:4d:e7:4c:78:64:d6:2f:ee:4e:3f:bb:77:2d:03:ed:2f:8f:
00:c4:38:f7:93:20:1b:e6:a8:87:de:7e:a9:6a:1e:48:cc:12:
26:cd:38:01:2c:71:4b:91:7f:6a:76:75:2e:59:d0:53:d7:67:
8a:06:f9:44:f4:43:05:68:98:27:cb:4e:f4:fb:0f:aa:54:8f:
de:43:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:30:39 2025 by rpki-client