This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: lzVb7ymgT+mB1Fe7fp2+GTsxR8913H6hijyaDQt7WSo=
Subject key identifier: 83:34:89:AE:D0:FC:78:C9:59:13:C8:03:D8:A6:F3:7F:92:9E:4C:8F
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019B405B7F0209D50073C33A974E924E43E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 10:01:36 +0000
Manifest this update: Sun 21 Dec 2025 10:01:36 +0000
Manifest next update: Mon 22 Dec 2025 10:01:36 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: jQqy+si00XF1oEbDEaeJ/UTNmjRHeUG9L3G2J62gdnY=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:5b:7f:02:09:d5:00:73:c3:3a:97:4e:92:4e:43:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Dec 21 10:01:36 2025 GMT
Not After : Dec 22 10:01:36 2025 GMT
Subject: CN=833489aed0fc78c95913c803d8a6f37f929e4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:9f:36:2d:f1:6a:a4:90:81:53:96:ba:7e:
34:a6:c7:eb:7a:dc:32:2d:ee:6f:fe:b8:a8:5d:a0:
ba:a2:fb:cf:7a:4c:58:99:8b:c9:c9:a1:ee:66:f4:
8c:dd:43:35:50:6f:df:cb:bf:ab:4a:a0:4c:fc:b9:
01:23:aa:ff:7b:aa:9d:52:aa:3f:85:00:9b:68:25:
52:1e:5a:a4:e4:27:d0:a0:5e:dc:66:9e:7f:24:87:
d4:e2:62:06:98:5f:28:49:68:96:72:27:f2:24:de:
6d:ee:0b:f6:3e:a2:6e:fb:2f:33:4d:13:63:c4:d7:
4b:86:dd:e4:03:0c:ce:50:8e:8d:e3:26:5a:e8:f6:
0c:0b:c0:56:83:da:31:e6:67:d1:f8:fa:c1:fd:c0:
47:b1:1f:ed:83:7b:df:1f:ef:8d:5d:d8:ec:2e:2f:
ef:e7:d1:2f:04:d1:5a:bb:d9:42:69:07:f2:75:70:
bb:42:bd:36:bf:fd:51:c5:85:dd:ea:6f:f4:06:12:
cf:ee:d5:8f:d5:de:8a:61:7b:37:ac:72:a4:97:a7:
02:2c:54:25:e7:3d:87:aa:d0:79:a6:85:98:ac:23:
3b:0c:cd:6c:47:5b:55:2a:9c:3e:dc:4d:11:2c:9c:
5e:bc:78:e9:7a:d8:d7:a2:4b:61:69:26:80:03:86:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:89:AE:D0:FC:78:C9:59:13:C8:03:D8:A6:F3:7F:92:9E:4C:8F
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:a0:b3:8d:74:88:98:bb:28:83:6d:27:68:b3:be:ac:a1:
78:24:77:08:ed:b1:4f:45:a3:8e:4b:ac:ac:24:cb:54:94:a2:
cd:ec:37:d8:03:96:df:01:81:b4:19:44:30:d1:fe:69:06:a4:
f4:3f:dd:9f:cb:28:5e:2d:89:17:20:95:1c:3e:fc:2c:91:4c:
1b:f7:14:36:1c:0f:1a:65:9b:be:1d:9b:e9:e6:18:8f:53:35:
ba:0f:14:fb:c5:0b:06:22:8b:f6:55:22:98:19:48:52:41:72:
35:87:0a:c8:14:43:70:a2:68:64:43:76:15:2d:28:a1:48:a6:
c6:1d:b6:8d:bc:c2:1c:0c:42:9a:fa:24:11:39:8f:ef:0b:28:
53:75:2f:cf:c6:e3:cb:9b:ff:36:50:84:35:7d:f9:55:db:e5:
84:c0:41:cb:c1:f6:41:00:6d:6c:69:36:c0:90:84:f9:85:af:
53:24:09:d2:5c:59:2c:0f:53:8f:7d:23:2d:1d:d8:69:b0:df:
89:1b:7b:97:b8:b1:d7:1e:72:2e:b1:cc:88:0b:34:48:5c:73:
2e:8d:e0:c1:4f:2b:a1:18:85:f0:f5:99:ac:7e:be:c1:f7:a6:
06:ea:76:96:7f:e5:72:51:25:fa:d0:5e:4d:a4:5e:c1:67:77:
4e:3d:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:08:25 2025 by rpki-client