This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: TIbbDptWlvEUqXiZeX8lENICViaxbwHjW+liWnOIddg=
Subject key identifier: BF:EF:CC:5A:C0:A7:05:83:36:1E:D4:7B:80:4B:5C:FB:68:30:FD:BE
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019AF209632EBA0ED9CB5D1C6E789D469B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 05:01:32 +0000
Manifest this update: Sat 06 Dec 2025 05:01:32 +0000
Manifest next update: Sun 07 Dec 2025 05:01:32 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: 8hsd6a8lc8XFslTEShs5ZqvcgEkPfvewL7LRUQn6+vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:63:2e:ba:0e:d9:cb:5d:1c:6e:78:9d:46:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Dec 6 05:01:32 2025 GMT
Not After : Dec 7 05:01:32 2025 GMT
Subject: CN=bfefcc5ac0a70583361ed47b804b5cfb6830fdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:6d:93:9a:7c:87:e0:66:9c:4e:f4:b3:7a:
16:ae:58:29:1f:7e:e9:ff:f2:38:43:77:5a:10:fd:
12:62:6f:c7:19:b0:ca:4d:b7:e3:ee:38:6f:11:d5:
a3:51:fc:5f:77:1f:c3:c9:3a:77:47:25:5b:1b:bf:
dd:e7:b1:74:a0:55:ef:d2:cf:52:2c:b0:cb:eb:e8:
a1:19:41:f6:9a:91:f0:bb:76:b6:ac:08:06:8a:a7:
d9:12:c5:05:dc:3c:a5:09:63:79:02:be:3f:c0:81:
5a:14:da:50:a4:c4:50:d7:59:49:6e:90:76:5a:a8:
8e:51:c1:2b:b5:b2:e3:7c:2b:f0:f4:5f:00:6b:ea:
c7:73:66:30:00:6a:39:4b:60:7b:fb:cd:6b:3f:97:
81:1e:b6:af:7f:de:e8:a3:18:83:21:b8:3d:33:d3:
49:f6:a7:78:1b:f2:c1:16:88:10:7d:61:02:ee:19:
76:30:b9:e9:0e:27:59:45:90:e1:40:db:e9:fe:0e:
d6:e9:f4:c8:aa:e2:2c:32:a1:ca:33:1f:fa:92:44:
ce:93:9b:36:56:21:36:ce:8d:46:fd:0a:0c:87:62:
10:19:d3:45:3c:7f:20:66:fc:b6:f8:47:53:8b:62:
19:15:51:00:99:ce:b6:02:0b:5f:20:33:60:30:db:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:CC:5A:C0:A7:05:83:36:1E:D4:7B:80:4B:5C:FB:68:30:FD:BE
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bb:c4:2e:59:2a:ce:44:cf:c6:70:69:e5:1a:18:c7:51:4b:
d9:4a:88:8f:d5:64:7b:69:13:05:d3:54:96:91:a5:9b:c9:09:
87:5c:9c:29:b8:f0:20:18:56:d2:2d:d5:09:37:a4:a2:27:8c:
31:a1:db:20:14:54:59:e1:ed:a8:91:33:47:bc:27:6e:9f:64:
89:c5:29:4b:79:df:fc:d1:13:50:60:07:e4:7c:95:1d:bf:d9:
d5:ae:9d:59:3f:dc:61:ef:ec:9e:5a:24:78:b2:1c:a8:ba:ed:
ac:40:3a:ce:cb:b9:c7:8e:3f:53:35:4e:37:9b:8f:55:74:a1:
0d:42:e1:cc:52:29:87:cd:cf:8c:15:e7:bf:3b:5f:14:b9:70:
37:e6:2c:cc:f7:bc:57:e1:ff:a3:46:35:ac:cb:ca:5d:81:c7:
2a:0c:ff:99:e3:cc:32:ca:b5:51:44:dd:83:07:99:af:51:bf:
e9:24:19:9f:6c:66:ab:62:31:55:db:b9:83:b1:44:26:3c:8f:
1d:e9:05:ac:f0:1d:2a:39:ea:0e:f5:55:e7:b7:be:06:4f:26:
2d:47:43:6a:92:52:86:cc:d5:55:05:32:02:20:66:6b:45:3e:
df:90:eb:7b:2b:9b:74:2c:9c:06:d0:69:90:27:54:e4:b7:ad:
52:15:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:06:46 2025 by rpki-client