This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: UCz/xP9GqftZdU4aViv2XwPUtReCVVkAJ8jhR0pg2EA=
Subject key identifier: A2:41:15:58:1A:1F:B6:12:59:EF:9A:6A:B2:71:E4:37:EA:20:CC:1F
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019AAC1489C275EB53897CEDF04CC5B75948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0FE7
Signing time: Sat 22 Nov 2025 15:00:18 +0000
Manifest this update: Sat 22 Nov 2025 15:00:18 +0000
Manifest next update: Sun 23 Nov 2025 15:00:18 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: BvzNuL5wbopdKy1/WRt0MU5awwB0mK/5nsHzUI9JFxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ac:14:89:c2:75:eb:53:89:7c:ed:f0:4c:c5:b7:59:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Nov 22 15:00:18 2025 GMT
Not After : Nov 23 15:00:18 2025 GMT
Subject: CN=a24115581a1fb61259ef9a6ab271e437ea20cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:7e:cf:0e:bf:b0:7f:7a:46:2e:35:72:60:
8b:fa:0b:8e:a5:e3:15:55:2a:98:49:db:bc:f2:36:
12:4c:73:b0:a4:a0:07:85:82:18:43:1f:dc:de:7b:
bc:e3:d7:f9:b9:1e:13:8f:10:b7:c3:64:6d:4d:10:
8d:16:6c:6b:90:23:72:bb:79:e9:da:47:70:8a:8a:
67:18:85:74:1b:f3:b2:1a:97:a8:ee:e0:ea:79:d5:
bc:57:24:5f:59:e6:5e:03:00:a1:1b:a3:79:b3:8a:
07:5f:15:fd:4a:da:d6:bc:1a:3a:54:62:8b:ff:69:
34:f7:d3:5c:e2:d4:88:ad:2f:86:d6:fd:39:b1:5a:
31:e4:0c:ee:49:9a:4b:cd:68:f4:af:72:39:1c:44:
4d:74:0c:54:ce:58:0a:88:ad:a9:bc:a3:e7:c8:8f:
08:aa:7c:3c:f0:d1:9e:bd:eb:a3:5e:9f:5e:e6:d7:
4d:bf:5a:4a:9f:fc:68:a9:76:d4:b5:00:ea:bb:d7:
35:6f:8f:8a:ba:da:3a:d4:29:59:61:15:e9:7a:39:
ba:09:43:a0:7d:7a:fa:e5:ae:34:8c:bb:12:6a:18:
51:8b:5f:cf:4c:1a:11:bb:8c:ff:a3:06:52:35:ce:
96:1b:fa:80:00:8d:05:75:81:14:f1:5a:57:a1:62:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:15:58:1A:1F:B6:12:59:EF:9A:6A:B2:71:E4:37:EA:20:CC:1F
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:03:e2:00:ac:4b:43:6d:cb:03:18:a1:5e:72:3c:80:40:
9b:58:6d:49:d0:17:b3:39:9f:e6:22:cd:2d:ec:8e:60:18:99:
16:a7:43:86:ff:74:67:04:cd:a2:87:d1:0f:15:48:fe:49:80:
42:b4:9d:08:56:db:db:2f:f1:0d:4f:ca:ed:8c:2b:1e:06:fe:
fe:2f:1f:2d:50:09:67:09:05:8b:e6:99:ab:90:2a:87:2e:56:
94:ec:e1:16:64:68:0d:de:4e:ac:de:b5:21:5a:54:1c:04:e5:
cf:ac:bd:8b:52:ff:01:7c:fd:b3:66:58:20:23:3b:a6:8c:3d:
2b:19:e5:3a:b8:fd:d2:60:e1:3e:49:ba:0e:35:7d:a4:fa:d4:
54:e7:17:74:46:8a:2c:1a:96:40:5e:62:60:89:c4:e0:86:47:
a3:ad:57:2d:0b:cc:ba:7f:24:15:bd:bd:f1:f1:32:f9:46:32:
48:0d:4c:09:9e:7e:b5:34:90:d2:aa:10:db:29:7c:1d:0a:f1:
df:37:e7:6c:77:cf:b3:f3:30:45:b7:70:1a:b7:5a:62:c6:e9:
d2:5c:ea:47:e7:bf:f3:a3:66:80:9a:0b:22:fe:88:41:1e:af:
b1:a6:c3:00:b4:87:ca:ce:a4:22:06:0d:cc:8c:d6:16:7d:00:
64:06:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:40:32 2025 by rpki-client