This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: G3aJDrQZNcUkPHurPHCHWC6qgGVkUydxi0/VwRHz4Ww=
Subject key identifier: 61:3D:0A:59:0E:23:5F:C5:8E:44:82:98:D8:80:DD:5F:1E:85:A5:09
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019AF12DFB132135DB266D740EF9EE83FDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 01:01:53 +0000
Manifest this update: Sat 06 Dec 2025 01:01:53 +0000
Manifest next update: Sun 07 Dec 2025 01:01:53 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: FBbqUiec5tYEvtkvvw0/AR9sVmmUYaHSunvX45TyPM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:fb:13:21:35:db:26:6d:74:0e:f9:ee:83:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Dec 6 01:01:53 2025 GMT
Not After : Dec 7 01:01:53 2025 GMT
Subject: CN=613d0a590e235fc58e448298d880dd5f1e85a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:fd:37:c2:7a:6a:57:e9:e3:28:bd:e5:51:
8e:09:f9:00:10:c2:bb:ba:00:3e:e4:70:a8:bb:49:
0c:62:55:37:26:a7:8b:fb:b4:01:4c:c0:fc:10:77:
ba:a7:c1:78:75:41:03:42:40:8a:ac:1f:1d:52:72:
11:46:9b:dc:89:33:a9:00:34:d9:f7:5e:fd:fe:9a:
ca:d4:0d:b0:d5:98:72:00:4f:a9:4c:4b:52:b0:0e:
37:8d:2a:ba:2d:38:31:48:a4:48:e8:c0:55:05:97:
6e:92:d3:c1:67:b7:ce:d4:77:7f:dd:66:0d:97:ff:
2a:64:9e:f8:c2:66:47:98:a2:90:ec:39:17:68:36:
8d:06:9f:91:85:0f:df:26:30:96:16:32:bd:87:d0:
d1:40:b2:80:c9:b4:59:c5:1c:0b:2f:8e:a4:6b:a7:
da:9b:e0:b5:99:73:14:e7:7f:a7:63:86:1f:34:44:
d7:0d:03:e3:e6:22:10:c2:12:e1:14:f6:4a:72:f9:
53:43:3f:57:25:a5:0c:dc:a0:f5:c8:56:9e:60:6e:
86:ea:94:ca:ed:d4:25:8a:6c:40:f5:ae:b8:70:b9:
a7:c5:fa:51:a6:1a:3a:a2:82:cc:b0:3a:a1:f1:57:
89:7b:26:5c:de:32:2b:73:db:7c:4e:fe:75:5d:de:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:0A:59:0E:23:5F:C5:8E:44:82:98:D8:80:DD:5F:1E:85:A5:09
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cf:74:37:cc:e0:6f:a2:a5:bc:33:43:08:5e:a8:38:f9:d6:
b9:88:7b:c1:e6:f3:e0:9f:aa:80:51:ab:ad:da:39:f9:a0:f5:
ad:71:25:56:11:b1:72:ca:03:b5:4f:cc:40:16:ba:c1:b8:85:
11:9f:8a:00:5f:ab:96:25:72:da:81:55:d1:84:c6:bb:f8:25:
cd:9a:0c:ac:cc:cd:f5:30:c5:4a:a8:da:a3:9d:19:e2:82:a7:
7a:31:48:c5:01:b8:22:60:65:fc:06:27:c8:2d:2c:a3:1e:90:
7d:aa:b7:b6:7e:0a:82:63:ac:bd:41:f4:8b:58:93:38:1a:11:
e8:fa:19:ef:75:7c:39:f9:c9:28:c0:cb:de:ca:b6:2e:7c:85:
77:b4:52:f6:01:c2:0f:80:1f:87:3a:34:46:e3:14:09:a1:eb:
b7:9d:e9:07:07:fe:f2:5d:aa:46:d9:e0:16:fe:7a:9c:1f:23:
02:c8:79:20:c2:24:fc:2a:23:be:26:39:73:72:76:47:2d:6f:
f4:e2:c0:17:e9:a0:90:b2:05:d4:ac:23:63:e1:b4:b7:51:8b:
2c:61:47:4f:2c:29:b4:28:ca:61:b7:5e:7c:aa:e5:10:2e:1a:
47:5c:5c:33:5d:94:e7:85:d0:b7:ed:2a:29:43:3d:e0:c3:38:
1c:a7:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:25 2025 by rpki-client