This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier: eiK6uaZlFrwp1vQ4/vzBWJfMj3LiIgxRSlYJQPXfox8=
Subject key identifier: 69:53:8A:4C:FF:00:C1:C7:E4:70:07:2E:0E:21:CF:20:FD:8D:68:9C
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019AF3F713B7352A53BFDB4EEF8CF7C59AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number: 0F58
Signing time: Sat 06 Dec 2025 14:00:47 +0000
Manifest this update: Sat 06 Dec 2025 14:00:47 +0000
Manifest next update: Sun 07 Dec 2025 14:00:47 +0000
Files and hashes: 1: 5ea7Hkm0SW34L_8iukOhDVRtzJ4.roa (hash: Bh3wXEj5kxu51D9giUL6vfcOwVLV+BQ8j2j4rv4c3bE=)
2: 61CGxBWFgu_6xuYgR1277EhVuzs.roa (hash: t6Nd1VjYIV20csBMiqnpmXOcSB9kKbylaX7adVu2vls=)
3: 7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa (hash: R8gbeupipBj48kbjD7lgb4EsVwsAH7m0IhgzRcQdmw8=)
4: 9BUOtYErHOT5nI5nnBmuo2Xdhug.roa (hash: Rs1YqGK7wrwo+RArMme5ww//40nOwuUee+FJ/tQiW00=)
5: CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa (hash: X7vY45oxc1G+Q/eP9qyuj1KWi47wOFpcyf1QqrA/I6Y=)
6: D5NQpu5-XP7jwNLgcsTcP0-T1A4.roa (hash: F7K7cw4FjgwEqGR+eV393zGp3EyvWxLXuzKz/aV3UiU=)
7: DIU4HLo0odnNllaYW94Ugml67ao.roa (hash: elEgGwxKy2v1vcrJC1eNzcVW73q4S32+WPctUa6Z0K8=)
8: HaalQUyXvekLLFnkPZZhVXqikr4.roa (hash: XVCqv4pgA5TkYnMXtfYT+wYqQ9BP8Hx4XqIqmyrpnqM=)
9: I3Uc8V053uFj5fj5J5RtiNnfgAo.roa (hash: b0A6+wRSSjRxTpI7kD0JYl/s4YiHTAyHBtwpK4TyBS4=)
10: IDcUsurlIwrk2WfAK13tr-PGuOQ.roa (hash: AS568Huqr9TIELMxZnCn0Pucs1mbdYattJ1q0ZLCI8Q=)
11: MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa (hash: Scu6X5cdyahgZ+2xGCs9z4LVBnY/p6cK2ML/Vi6GaqU=)
12: MiTA2g-pLC5ZITOxl98HfdnHekI.roa (hash: ajv9+oi0sq8cFKqa2qx0dulW0VzD6Ty3LJc1Y6gB5hY=)
13: MxNe7yMIRX8ebs7AVsbBiRpllSA.roa (hash: pDnjp0EQggea9pBhHKuRbHKwdSKEn82KNKgB36PKwns=)
14: NE0WcAfrm3AM0n_95V8TnkNIjoo.roa (hash: oyngUFK0MUVw4Hw/iJMJwYVrpWdijuhgrFx7ZId5pc8=)
15: Vba_vy_gwygAN2fTwJxaF4ivvBw.roa (hash: Z+9Xq0ov0lS/kdfLrxE4yAQ08sBSc/4CSrd0q0gSQrw=)
16: WxskEzg_eTHvSuEBzAA22sakZZs.roa (hash: K1rJfDbGKj9KRp/YpH3B7J7gJ4JwFgTcq0fjTVjZ8TI=)
17: Xg9_0g6AruUdP8btK8A9lf_QDLw.roa (hash: cxSEZ+jVJKv+PAN+nsq2/IV6m//3vIXQqyGSkhq450c=)
18: _H31n0VX0qjA9cl9U_c9mZ2xI1E.roa (hash: 9x5PNhcIWt5ORofTPwWxEuoMULwiuxPd2nsCtzIW4tE=)
19: _Zs7m0Z1Y90BrPP3tkPHvTJwqVk.roa (hash: mEAwbBpKFR8+vrzzxNINj1VfPPY5QI9i1nTpJQXBCrA=)
20: bEmneW6IzbBtlPPMQx-0yJ93b-w.roa (hash: 3HfO6P2h6i8rds9y/v29pBIa5L9isoyl8PZHwa6DXZk=)
21: iwfWWtgox8qcV4q-oY9df9ePkJk.roa (hash: wvZUb4xHBU3yTd72sjISxWXalHKpPByN4rolNUsyfnU=)
22: mEEWlcL66O1D2m6UzXsYcjPwHpM.roa (hash: OlSkOPCbGhpW88wg888nDOtrJj0r6KHmiNy+klmxw10=)
23: mkE0rfBz9XK1VAIoApt7LXJKNDE.roa (hash: Xre+OBBlG8debUYJtnMWBCRl/O0gB4VgCPVdhkg/XqA=)
24: mm2sLdm3Ci3nySsnIMNPJSmUyA0.roa (hash: 43TegAHBHBerogm1ABmnvKv6AvzkKlq7nZVNU15KNys=)
25: nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa (hash: XcrtvYg+nckzsoLJ7c2APLoMZ/zvgXA8RQMD/XcqPuE=)
26: o_gD51WjTdSOmKxnpsPgpEBLg78.roa (hash: H7WMFNZl3PvojqlRR1S79qBLlRCJXsbv7bPNvj5FCYc=)
27: pLK7-mZXJstNxcxjt9sS_pyvO7E.roa (hash: l2czXwxJ/GmxKDcG6MEQVwlIdyFg6kzSfJH9MRzPVAY=)
28: qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa (hash: nlkxnu+zDhTWvt5yhhFwQ8By8uFeDVCXgbF+abS8Yvg=)
29: wgAwgA9CWZfJlg6IK-_1FTAJDm0.roa (hash: JlkKB8e21bvqYK7kidn0kF/N+/RVOlD5ZFe2Okfz8J8=)
30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: Q9zBIb+eZVQwJrmaEmsvIR/A0UCJReeSyujUvQoTE8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:13:b7:35:2a:53:bf:db:4e:ef:8c:f7:c5:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Dec 6 14:00:47 2025 GMT
Not After : Dec 7 14:00:47 2025 GMT
Subject: CN=69538a4cff00c1c7e470072e0e21cf20fd8d689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:6b:d8:ca:69:be:30:37:bb:81:1c:94:b0:
fc:e1:b1:7b:97:b5:53:e1:56:73:51:ab:75:72:ad:
92:43:7f:bc:b5:b8:41:22:75:55:53:53:ad:b3:88:
1b:cc:21:02:f2:ee:bd:44:23:35:b5:17:98:5d:f0:
8f:e1:c3:17:74:02:10:a7:5c:00:54:88:d6:d8:10:
93:9a:04:8b:b4:2a:ae:7d:49:d4:f2:18:e1:a8:ce:
56:75:b3:7c:b3:76:78:1a:e4:1a:87:fa:d8:e5:c3:
7e:75:52:a8:9e:d8:64:57:65:8e:2f:c2:59:9b:b1:
01:90:7d:fe:69:51:b3:15:07:30:97:08:3f:7e:80:
fd:b5:87:71:ed:80:91:0b:6a:3b:4a:fa:37:12:60:
73:52:ad:0f:12:ca:c5:a2:10:32:8d:60:99:b3:97:
b6:23:c0:af:9c:99:00:68:8b:58:c0:d2:a2:2b:ef:
61:af:c2:6a:fa:aa:06:b8:b5:10:3e:f0:f4:f7:5a:
28:67:83:a0:28:36:eb:d6:a2:fb:3e:08:15:c9:d5:
c5:3f:08:bc:d3:ba:70:73:61:88:c6:56:59:56:da:
d7:74:8e:59:5b:27:fc:2c:47:0e:26:e2:82:03:2f:
8b:3a:fa:f9:d0:cc:8d:e4:27:b7:6d:30:4a:de:4c:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:8A:4C:FF:00:C1:C7:E4:70:07:2E:0E:21:CF:20:FD:8D:68:9C
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:d8:8f:4f:b2:74:de:41:1e:cc:ba:21:87:94:35:3a:10:
2c:ac:37:ae:05:ad:41:eb:0b:ea:ec:5c:40:b3:27:08:10:ad:
5e:97:46:62:30:db:49:c5:12:89:8f:61:a8:a7:87:4f:58:d8:
59:00:36:12:d2:2d:17:27:f5:1a:2c:cf:e8:1f:7d:ad:6a:a6:
63:43:75:46:e8:61:fe:43:f9:f2:db:d3:dd:64:e3:d5:73:72:
19:5c:ba:b2:29:94:95:52:98:a4:1a:71:99:36:95:bb:a3:e9:
d0:84:af:f7:12:b4:fe:75:69:80:e3:d7:e4:c0:e1:23:b3:2f:
ef:a4:cd:c5:f7:cd:47:83:7c:e7:00:e3:f9:0a:ed:15:a9:cf:
58:45:56:ad:38:3d:60:d0:01:3e:db:3f:96:08:55:82:dd:be:
a5:13:86:1b:d0:63:9e:1e:2b:20:19:1a:c1:32:5d:6e:49:73:
1b:e7:ef:d8:7b:4a:28:87:e3:c3:8e:b8:ad:f7:20:88:e2:07:
b9:6b:ba:07:0e:e7:ca:a2:43:7e:59:93:11:0e:82:52:ce:5d:
bd:a9:84:99:e2:71:38:9e:21:a4:83:96:37:ee:08:eb:10:f5:
6b:29:eb:a5:7e:b9:e0:d0:f0:18:38:08:47:54:a2:7c:a5:a7:
57:af:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:38 2025 by rpki-client