This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File: zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier: 8nQrYo9OcyINXvCzVH04va9uHs/eL9bmaIGS/FDi0/o=
Subject key identifier: F5:C8:BB:7D:87:AB:64:6E:0E:E8:82:F4:92:33:73:64:2D:61:8A:EB
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 019B378E8C6F9396A1FDF0BD7FC4C3727418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number: 1788
Signing time: Fri 19 Dec 2025 17:00:47 +0000
Manifest this update: Fri 19 Dec 2025 17:00:47 +0000
Manifest next update: Sat 20 Dec 2025 17:00:47 +0000
Files and hashes: 1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: aTsfolTsFR3Ay70Vzs6Ubztl7zOFWP4R8ebMlPHYsg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8e:8c:6f:93:96:a1:fd:f0:bd:7f:c4:c3:72:74:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Dec 19 17:00:47 2025 GMT
Not After : Dec 20 17:00:47 2025 GMT
Subject: CN=f5c8bb7d87ab646e0ee882f4923373642d618aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:d8:55:7e:0b:34:5e:03:5b:ca:28:d3:6c:
f3:f9:da:5b:d4:10:19:cf:02:a4:e7:4f:2f:72:0c:
ce:2c:7b:a1:85:db:b4:2e:05:fd:ef:c8:30:5d:8f:
2d:4a:f1:1c:a0:cd:f0:40:14:94:41:b9:3a:d5:bb:
d5:21:f4:1e:c6:05:b7:fb:11:3c:96:17:38:bc:c5:
bf:9f:ec:e1:13:12:a4:ef:85:98:7f:41:31:e9:a7:
75:68:f5:30:79:c9:58:da:a1:38:c6:f3:46:d9:d6:
e5:30:1a:96:7d:ed:64:b5:9d:07:b8:9b:9c:18:d8:
54:b2:a5:41:9a:5d:48:a4:8a:0a:44:a7:1c:8d:36:
b0:39:de:0d:6c:0b:c7:68:6e:a0:70:10:29:1c:e3:
b0:67:d5:4d:3e:e2:c1:01:d9:24:66:7f:b9:93:df:
2c:8b:97:0d:8b:53:17:0c:6c:bf:6c:bc:80:17:0f:
f9:e8:e9:0f:17:16:24:e4:89:fc:cc:7b:73:77:a3:
0f:29:ac:97:91:44:bf:c4:cf:66:7b:0e:16:c4:5e:
91:2b:3f:09:a0:7e:fd:c9:19:27:95:15:91:7a:44:
25:5c:c6:27:99:3a:6f:91:70:fa:d7:a2:82:7b:e8:
fc:dd:b4:b7:aa:38:30:81:c5:0b:68:58:f3:44:ea:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:BB:7D:87:AB:64:6E:0E:E8:82:F4:92:33:73:64:2D:61:8A:EB
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:35:76:bb:d2:82:b0:19:28:2f:e7:5a:84:09:d7:22:8b:
3f:08:2b:a7:8a:dd:5f:cc:79:b8:4e:78:80:49:be:69:6f:70:
0e:cd:96:48:22:3d:36:61:90:52:3b:46:1f:b6:9d:ce:64:65:
b5:bc:9a:ac:f4:44:af:83:df:59:88:a2:7c:49:cf:51:62:0f:
44:f6:a8:63:17:4d:de:79:7f:17:32:17:8a:ea:9b:9a:1b:e2:
0d:cb:57:f3:0b:00:91:a8:8f:ec:65:92:29:dd:50:c2:4c:75:
b7:f1:73:07:39:5b:74:ac:34:bc:aa:f9:de:84:65:7e:cd:34:
53:b4:bd:44:f4:23:09:ab:4d:f7:e5:d4:8f:94:6e:ca:28:af:
64:0d:e7:b0:9a:58:65:eb:7f:a6:39:80:31:4f:85:ed:a7:b7:
7b:b1:88:aa:a7:12:c4:c4:22:3a:5b:31:3f:a3:e0:07:26:94:
fe:7c:8e:45:fa:d5:04:81:ae:21:93:ae:43:7f:b6:a8:df:8b:
59:bc:52:51:51:dc:62:e5:a9:13:2e:39:6f:28:ac:67:32:c7:
2f:e3:a5:ec:cc:fd:b6:1d:42:77:fc:c9:30:4b:4f:03:6b:64:
dd:f6:1b:d4:90:fa:c7:b7:74:82:b6:56:ad:35:b8:d9:10:bb:
83:ca:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:42 2025 by rpki-client