This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: EDmg0kUieOqJNMpy0LS2t4GUoerPy/VwIFQlDyg+kDU=
Subject key identifier: 1C:82:AF:63:BB:69:6D:E6:74:7C:49:73:7A:C3:5F:91:13:61:1F:D6
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019B22BE673F4F5BD49254D2134DE7F321FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 14A5
Signing time: Mon 15 Dec 2025 16:01:02 +0000
Manifest this update: Mon 15 Dec 2025 16:01:02 +0000
Manifest next update: Tue 16 Dec 2025 16:01:02 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: qBV7olWZp+3yWYgBWVz9UVw7rmrUrfIBds5MJkCyIeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:be:67:3f:4f:5b:d4:92:54:d2:13:4d:e7:f3:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Dec 15 16:01:02 2025 GMT
Not After : Dec 16 16:01:02 2025 GMT
Subject: CN=1c82af63bb696de6747c49737ac35f9113611fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:4d:bc:1b:4b:08:06:e1:7d:4d:cb:f2:0c:
4b:e5:6e:41:03:58:3d:cf:0e:35:0e:2f:0d:5f:ea:
4d:06:c2:37:d1:fe:1d:37:8c:0e:1a:1b:bd:42:83:
b1:a0:43:df:13:42:19:e6:14:cc:86:c9:6a:15:a5:
b9:6b:fd:db:d1:1f:f9:81:76:30:11:50:9f:57:fd:
b7:db:09:ba:49:8d:89:52:3c:ce:6d:dc:c7:1a:c5:
ea:24:b5:e2:88:dd:82:e9:c3:75:a5:fc:25:dc:f6:
fc:cb:a5:c6:a4:c9:ab:67:2d:0b:0c:b7:c4:b6:5b:
d3:fc:b7:ad:87:6b:73:6d:c4:71:0b:18:8c:7c:27:
36:7b:d2:ea:4f:f7:38:7d:7f:59:e5:1c:83:df:2f:
d4:10:1b:83:fd:73:c8:49:da:03:24:35:2e:db:cd:
77:89:61:0c:2f:51:4d:0e:e1:11:8c:8b:6b:37:34:
90:02:9f:fb:bb:13:98:56:cc:f4:86:1a:93:27:75:
8c:2f:a0:58:71:6c:8e:29:92:d8:4a:08:18:9b:d1:
d7:97:56:d1:e9:65:9a:69:53:16:f8:db:28:9e:20:
c8:7e:e9:f8:f4:f1:31:89:7a:c4:04:8d:e6:1a:f9:
10:c2:53:74:8b:f9:a1:11:af:da:28:0d:9d:dc:cd:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:AF:63:BB:69:6D:E6:74:7C:49:73:7A:C3:5F:91:13:61:1F:D6
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d2:dc:73:ea:3c:5a:d2:49:73:1d:80:36:14:1a:0a:eb:59:
1f:55:5e:c6:37:76:bb:68:40:15:1d:bf:f4:c4:06:30:3d:0d:
78:53:ef:5a:f1:e4:d3:6f:91:a6:e3:7a:e3:50:0d:da:f3:f6:
31:1f:be:80:01:ca:b4:e8:15:af:13:10:82:61:4e:68:44:96:
ce:97:62:99:11:d2:32:a2:d4:e4:7f:1d:d0:83:9b:42:c9:ed:
35:e3:0e:9e:f8:77:41:e3:01:23:6f:2c:11:3f:ef:ad:b6:8a:
65:3c:cf:ce:7f:c5:a1:2e:3d:25:b7:a6:84:c6:f7:8f:94:92:
80:d7:8e:75:a5:c6:63:ca:35:3b:7c:51:b2:9e:38:ea:25:f8:
e8:12:e7:97:58:9c:17:f2:8f:f6:dc:da:4d:5a:50:33:eb:41:
dd:fc:07:2e:ab:9f:3e:d7:07:e0:d0:0e:43:03:3b:e6:3b:63:
46:e5:1e:f7:28:74:77:51:c2:8c:3c:17:69:0b:ff:a1:c9:35:
a7:eb:15:c0:5e:89:82:d9:f3:cf:e7:0a:d4:d1:1e:91:ba:31:
8c:4d:99:08:70:34:f8:ee:35:ba:72:10:d0:31:0f:fa:c2:ac:
6a:4b:ab:77:42:6c:c7:b3:3c:9c:f4:04:3c:86:bf:2d:5a:9a:
5c:87:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:20:47 2025 by rpki-client