This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier: t4C9QfyeVCClECBChLN9EWI0j8xyVmGWAGC3oZEcYrQ=
Subject key identifier: 25:92:7D:D6:C1:CE:4B:D9:2E:82:05:6F:70:32:9C:DD:D5:F8:95:E3
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 019AFA9DB6983AB6B37B2943884FBB3A957C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number: 0186
Signing time: Sun 07 Dec 2025 21:00:31 +0000
Manifest this update: Sun 07 Dec 2025 21:00:31 +0000
Manifest next update: Mon 08 Dec 2025 21:00:31 +0000
Files and hashes: 1: I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa (hash: kQYNPTEIQCpAe0+UIMCFb30JlCdHhzOSGG9E3Bksfn4=)
2: No384ukQ7PMzR7ysdXQqiI23V0U.roa (hash: WQHcVAZUYgrUok+kLmgQEzlX1mU+gj90+MGfNi8ZR3g=)
3: V4pBXU1PZiQxs_5q_J-RR8u4p6I.roa (hash: eo5F6jAlKraDD9oeFZGJ6cw6s1Keo3V6+IqIlcUTCHA=)
4: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: 2tXwPgETJzR7lMrqtS/9shN2IwumBrzHq0n1B+WwXr0=)
5: ce8LRFwM6wCXX-cKMVilSCLACTA.roa (hash: SjdlAeta3OBEM6FH48Ybj415juI53asPm3ETveUv2Eg=)
6: gitklWD7TllTa09uVT2HYtJ2HAc.roa (hash: 4UXSpGqlkDuQDI9lXYLAHQ9HNN6MyyLOEemk6yCC+m8=)
7: iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa (hash: yH7jkiJqUFQwZGfRfwZf6K3F352BuafwDzi8n2IlGMk=)
8: mSfH0G_iARcbQlaJSIXQlk05LS4.roa (hash: 0FkMJZ2bnxCxc3Hk8tjYTkCS9FPgkLmBQCWnnshE9e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fa:9d:b6:98:3a:b6:b3:7b:29:43:88:4f:bb:3a:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: Dec 7 21:00:31 2025 GMT
Not After : Dec 8 21:00:31 2025 GMT
Subject: CN=25927dd6c1ce4bd92e82056f70329cddd5f895e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:10:34:c0:9e:56:5f:ee:3b:fa:9d:b7:6e:
89:f9:31:98:a3:65:92:1a:b0:39:dd:fb:97:ec:b7:
9c:56:c0:39:8d:12:64:05:01:da:8f:ad:ea:93:0f:
20:7a:bd:32:f6:80:88:24:43:3c:86:55:04:74:2a:
e4:44:c2:78:df:d2:c0:99:5a:6c:71:1e:87:c3:9e:
69:96:d1:08:fe:ef:21:2e:e6:e4:c0:5e:c0:65:fc:
9c:9f:00:ba:4e:eb:37:df:85:96:30:fd:67:34:cb:
e1:f2:db:6f:80:1d:0f:74:1c:a4:2a:f7:8a:b4:d0:
46:73:7a:da:2c:60:52:b6:aa:4b:ce:3c:ef:0b:f5:
c2:54:81:ad:99:40:b8:a6:96:5d:ed:90:fb:42:e1:
37:80:a6:bf:75:10:94:81:97:a8:02:68:e4:9d:09:
f4:f7:3f:1a:0d:ba:53:a4:30:85:89:48:ca:0a:a4:
83:30:2e:4c:1c:ac:5d:e9:57:4d:af:11:68:b0:4b:
e1:60:66:c2:25:15:ca:ba:42:4d:a0:23:c1:b7:8c:
71:36:82:19:5b:0a:5a:52:d2:46:63:cd:23:b0:60:
98:8b:c4:13:f6:0a:21:e9:87:58:28:99:67:46:a4:
24:a3:03:99:aa:f6:7a:6b:3c:91:3b:74:29:49:2c:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:7D:D6:C1:CE:4B:D9:2E:82:05:6F:70:32:9C:DD:D5:F8:95:E3
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:16:35:a5:e1:da:78:19:36:8c:37:c2:8d:d9:99:15:11:
0d:fd:5b:da:76:25:8b:51:90:5f:d3:fa:d2:42:05:df:5b:61:
e0:c1:d8:25:84:f6:cb:6b:aa:94:48:c4:b8:1d:d0:7a:77:62:
63:d9:3c:d4:b0:1d:49:26:f5:32:4b:d4:6a:b5:64:98:19:c8:
90:69:f3:04:01:fe:02:09:1f:b2:30:e8:7c:d5:00:ec:f9:12:
17:d5:a3:aa:73:64:fd:f3:15:09:f5:9f:6a:77:67:20:d3:ec:
43:cf:49:cf:91:4a:56:5b:47:71:eb:e9:c7:1a:94:62:ea:e8:
2b:d2:a5:f8:57:c2:b2:5a:bf:7d:c3:79:b0:47:7a:a4:54:f2:
96:9b:14:74:2a:c2:13:aa:3e:90:30:27:ce:f0:a9:de:2c:2c:
8d:b7:3e:fe:1d:c6:30:72:3a:37:b5:55:1f:f0:f5:4e:25:1b:
82:64:ad:36:d3:82:e7:ac:a6:42:b6:6d:90:ff:46:2a:27:8b:
93:90:97:ac:88:94:6f:8d:87:2b:ec:46:cf:d3:22:21:55:01:
67:c4:3d:97:f4:20:86:da:70:7f:95:92:13:4b:e7:8e:b0:d1:
8e:e2:69:15:81:9f:5b:58:c0:2a:0b:2e:0f:7b:d6:5e:8b:9b:
53:80:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:48:20 2025 by rpki-client