This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: OCNRL92JMIPAyrYvmNpVZfmfscc/gOLTCPN+HjcYyCA=
Subject key identifier: A2:6E:1E:D5:84:90:DA:0F:6C:A2:08:73:53:3B:69:FC:77:E4:7C:0B
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019AF12DE6D3CCE2E05D8D6F73E25855BF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 12AF
Signing time: Sat 06 Dec 2025 01:01:48 +0000
Manifest this update: Sat 06 Dec 2025 01:01:48 +0000
Manifest next update: Sun 07 Dec 2025 01:01:48 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa (hash: KDb4m2ieiCCUnfzXPEKnNf6EnbdlGwtT0gW5l38r8FU=)
4: y-irRafrFET7ueEFRfDBe0Y0btc.roa (hash: vwA7uPcYphRiy+M8uy7NrhUZ1Q14uz25pMwIRfApgPI=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: m6coIvuV81ilePB0ABwp1yPc/3VzBwUP9pPwpTMq0rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:e6:d3:cc:e2:e0:5d:8d:6f:73:e2:58:55:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Dec 6 01:01:48 2025 GMT
Not After : Dec 7 01:01:48 2025 GMT
Subject: CN=a26e1ed58490da0f6ca20873533b69fc77e47c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:d6:5a:52:0f:26:13:46:6a:82:07:ea:5e:
f4:ba:cc:aa:84:60:6c:fb:1e:9c:6f:f4:33:ba:32:
02:c0:ea:1d:bf:5b:fc:d3:a1:e6:c5:c2:71:7a:ad:
ea:57:1c:2d:66:73:c1:45:12:2a:df:f8:49:0d:58:
53:6b:20:e7:87:0e:2a:4f:58:e1:ba:dd:03:07:d4:
ce:c4:da:b4:86:ef:78:3b:45:b3:92:4e:f2:61:e3:
67:c8:ed:0f:d7:f0:d1:ec:5c:6d:3a:43:fd:b9:9f:
aa:94:55:d0:e4:0d:8f:9a:de:ac:b5:5f:ca:c0:36:
5d:86:f4:9e:ed:0e:4a:84:ee:d3:87:dd:60:ed:a4:
16:6f:aa:f1:64:89:b5:e4:ae:41:33:c3:44:bc:fd:
8f:43:a1:f9:66:16:59:63:dc:8e:8e:a7:21:94:15:
78:a9:97:06:fc:c4:c0:47:1b:ea:1f:cb:50:e5:af:
2f:69:81:4f:ab:ad:e3:ae:00:e9:ed:32:bd:08:28:
e0:52:d6:c3:7e:c3:44:23:b5:33:f4:3b:f6:7f:72:
55:dc:86:6e:f3:71:3e:b0:4f:34:ff:47:50:09:8e:
df:94:89:aa:cf:c8:e4:5b:07:a5:b2:35:3e:67:cd:
f0:21:84:31:ae:64:e6:af:68:1f:b0:35:6e:94:24:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:1E:D5:84:90:DA:0F:6C:A2:08:73:53:3B:69:FC:77:E4:7C:0B
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:29:41:b0:af:37:d4:26:a5:81:28:2c:d5:7b:a1:4e:98:
f5:fd:02:57:84:45:3e:80:57:b8:1d:46:7b:b4:f7:31:63:12:
61:aa:92:98:a8:5c:43:e9:e9:6a:05:79:d9:77:ea:f1:6a:a7:
dd:9b:cd:4d:6b:ce:9d:29:85:d7:17:3b:fc:17:1c:25:55:46:
46:d5:ce:46:fe:c8:0f:8e:b3:2e:a2:f0:46:e5:ad:f1:2e:52:
89:24:41:bf:b1:f8:3a:d4:8f:e9:dc:c7:49:f2:3a:18:8b:88:
4a:1f:af:a8:57:2a:51:4a:c7:7e:3a:32:e2:77:a5:7b:d4:fe:
db:eb:26:06:d4:42:c6:61:7f:e6:8b:68:19:5d:6d:6c:4d:a2:
32:2c:76:6d:86:1b:17:80:e5:88:51:c9:54:72:58:26:b2:e9:
85:f2:a2:38:69:8c:b9:10:c2:9c:d2:90:9c:5e:1b:59:57:ab:
11:7d:17:32:f5:ab:8a:82:49:c2:3a:cd:10:fc:f8:b7:0e:b7:
6c:c9:a6:8c:1f:48:20:d7:71:a4:da:7f:21:7f:4e:48:1a:9e:
09:99:3e:2e:18:99:7b:92:9a:b8:a5:58:1c:76:96:15:8f:15:
45:ea:1e:bf:a2:01:81:12:e9:6f:02:f2:c5:ea:e2:92:7b:31:
6e:fe:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:32:10 2025 by rpki-client