This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: ZLxRKAD50QXde8RU0JEFsDWDPr9kwEsq/OUA/93uZFk=
Subject key identifier: 54:1D:AC:33:30:96:60:BC:C7:12:2F:8B:08:9E:C4:E7:05:08:A3:8C
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019AF2ADACE7CAAE7DF089DA318C1B7F572D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 05ED
Signing time: Sat 06 Dec 2025 08:00:59 +0000
Manifest this update: Sat 06 Dec 2025 08:00:59 +0000
Manifest next update: Sun 07 Dec 2025 08:00:59 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: VazwFjIQvUIA5nuqY8ZfRdxhDqYMqmmS4N8J0o50zbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:ac:e7:ca:ae:7d:f0:89:da:31:8c:1b:7f:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Dec 6 08:00:59 2025 GMT
Not After : Dec 7 08:00:59 2025 GMT
Subject: CN=541dac33309660bcc7122f8b089ec4e70508a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:84:6f:43:ce:8a:44:ae:94:34:2c:d9:63:
37:6a:0e:c8:0c:fe:0d:81:61:ec:c4:e3:9e:49:15:
cb:f4:f5:69:d5:84:5a:d8:76:89:68:50:1d:49:55:
8d:38:68:62:b7:6c:b0:de:a8:22:9e:97:e4:c9:56:
96:29:71:d1:39:48:9c:5c:3c:92:09:01:8a:38:d4:
e3:db:ab:e7:6a:90:6f:83:62:e6:bf:19:8d:01:e3:
12:77:3c:b4:6e:36:c8:1d:dd:88:62:f4:15:88:bf:
99:7a:f5:c3:a8:4c:80:93:f7:ac:a6:bd:0b:7c:17:
11:8b:b3:31:d1:b5:93:13:b1:22:16:6b:1e:fa:e3:
2a:95:1c:5f:4c:3e:a4:9f:57:d9:12:46:76:f1:01:
24:ce:cc:0f:41:8c:fb:ab:f1:fc:be:29:33:a7:b9:
24:f6:ab:cf:63:24:ce:3c:bb:9e:ec:d6:31:47:d1:
a0:8d:d2:da:22:2a:f3:d8:10:2e:30:4c:51:03:5d:
55:3c:51:7a:e1:c2:3a:83:41:fa:e7:ac:6d:33:11:
e9:ee:c8:11:7d:f2:5d:7b:b2:c7:c2:94:68:7c:a7:
da:7c:a2:51:10:00:6c:e7:77:d5:9d:37:85:20:e3:
78:3c:7e:cd:52:c0:cf:aa:8e:61:f5:fc:0e:9f:1a:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:AC:33:30:96:60:BC:C7:12:2F:8B:08:9E:C4:E7:05:08:A3:8C
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bc:13:e6:d0:5b:ec:88:5d:95:f5:70:b6:04:86:aa:2d:6d:
2e:b1:be:09:b9:73:3b:d0:b9:d1:51:2c:8f:ef:f9:7e:18:46:
b5:29:3c:00:51:0a:09:4b:36:55:2d:34:7b:d6:8f:29:bf:46:
76:52:e7:55:0c:63:b7:07:ac:62:a5:1f:df:7a:be:b5:35:b3:
f5:96:ac:b7:f9:f4:a7:8f:95:a8:8a:9c:2c:24:5f:77:12:37:
64:51:73:dd:e1:66:7c:f9:b2:e8:31:3c:6b:41:f3:5e:35:33:
56:bb:2b:1b:12:00:32:1d:73:fc:87:13:6d:9f:e3:5c:96:d5:
07:43:e7:d7:52:f9:a6:d9:78:0c:6f:db:1a:7c:82:7d:a9:c7:
ae:a4:20:f7:e0:9d:33:a2:31:86:b9:86:dc:ab:34:0b:f5:06:
ee:38:22:88:14:30:3f:8c:04:f7:e4:d1:60:af:5d:c9:cb:6d:
d9:d2:76:35:e4:90:54:e4:6a:b1:59:25:74:ff:1d:b4:ae:bb:
10:5d:be:7e:ff:7f:c5:e3:08:50:ed:4a:5f:6a:07:34:10:84:
6e:3d:5e:c9:f2:d0:50:1b:04:10:eb:51:2f:5c:0c:87:19:32:
14:43:d2:3f:96:3c:20:b6:0b:ac:36:85:ff:78:46:f2:e5:a2:
7a:b9:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:57 2025 by rpki-client