This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: SMJUdjZycxEANEetkSj81MiyTd08QQpAAHG8kPFxPc4=
Subject key identifier: EA:48:69:8A:7C:27:BB:75:40:3E:16:1A:DA:6F:FC:55:41:0A:2A:2C
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019AE7BBAFA8D16FFB33E5BB430110CB4C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1762
Signing time: Thu 04 Dec 2025 05:00:28 +0000
Manifest this update: Thu 04 Dec 2025 05:00:28 +0000
Manifest next update: Fri 05 Dec 2025 05:00:28 +0000
Files and hashes: 1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=)
2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: zl33GOVIHuEao/iFdXR4wnadYzLwnYVnROAoLPAVkBc=)
4: faW_PPYk_4UD9_3RNfk7L7R4hKg.roa (hash: NsYb0FRDPoAtzYBgzGg3wYZizhwYw15oPV3lBi8uVeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e7:bb:af:a8:d1:6f:fb:33:e5:bb:43:01:10:cb:4c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Dec 4 05:00:28 2025 GMT
Not After : Dec 5 05:00:28 2025 GMT
Subject: CN=ea48698a7c27bb75403e161ada6ffc55410a2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:9a:c8:21:dc:c6:a6:b5:f3:c9:c5:bc:99:
55:32:ca:2d:c9:53:09:82:6e:4f:2e:8f:c6:50:92:
dd:77:eb:72:9a:e3:c4:99:a3:e4:87:b5:5f:be:5d:
16:e5:dd:fd:1e:b4:1b:89:7d:f7:4f:e1:7e:a9:b8:
41:11:39:84:9e:b5:57:cd:24:a4:44:7d:64:00:cf:
1a:fd:1c:09:47:4f:d2:72:94:56:78:a7:e8:25:28:
1b:6d:58:4a:80:37:c2:02:9c:85:a0:a7:d9:59:1e:
ef:63:84:b5:ed:1e:f1:14:6a:cc:f4:14:58:e3:fa:
99:13:ee:0b:08:4b:04:95:70:8b:e6:f9:77:dd:19:
56:53:34:ed:35:8e:de:2f:cf:de:00:2b:dc:a6:15:
49:f6:79:b2:e0:08:d3:a4:91:c3:15:34:f3:d1:2d:
c1:6e:e5:c8:36:62:12:9b:10:e6:db:9b:69:d7:bd:
cd:12:27:e1:da:01:f3:69:e2:48:e2:61:f1:66:d9:
b3:56:4a:85:39:ab:48:b9:ea:b9:7c:11:ce:71:8a:
ee:1f:4e:d2:32:c9:a7:09:3e:e5:9a:d0:ca:8d:fc:
81:39:3d:d7:a1:cd:ab:36:3c:04:92:61:1a:ec:07:
10:48:49:e9:d3:b4:65:4d:dc:f5:c2:1e:af:0d:34:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:69:8A:7C:27:BB:75:40:3E:16:1A:DA:6F:FC:55:41:0A:2A:2C
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:27:b9:7d:62:a2:1d:9a:a0:73:06:c0:1d:4b:96:57:a4:9b:
08:3d:d6:49:28:51:80:06:c3:f4:ac:a2:81:b9:2b:8e:4c:ec:
28:f3:1a:ec:3e:84:bc:53:93:b2:fd:f3:95:14:d2:6d:d6:ed:
5d:92:11:8a:69:f0:81:e1:3e:11:9b:1c:67:99:25:15:78:22:
3d:cf:97:ae:3b:24:a6:b3:49:0e:47:c9:7d:ef:bb:7b:48:1c:
5b:56:11:be:82:ac:37:3a:10:4a:72:a6:26:6a:ef:bd:14:55:
c9:fe:c6:e4:60:77:6b:e3:17:f5:5e:35:de:92:e5:94:bb:6b:
45:76:46:75:aa:d4:6b:7d:5f:ee:77:bf:01:49:ca:4b:a3:87:
08:39:10:07:9c:33:b6:b8:e2:22:d8:10:ab:ca:89:79:b7:6d:
f4:1e:f0:e6:d2:b8:72:0b:6d:4d:c7:42:3e:86:f8:eb:62:c8:
02:f9:15:96:0e:0a:a9:53:71:e9:88:dd:1c:63:81:61:74:11:
b8:49:c4:6f:1c:f4:3a:da:57:3f:ed:ae:51:98:e3:8f:5b:a5:
9c:b1:fa:13:c5:ee:6d:c7:c6:45:fa:84:6f:59:e4:cf:50:55:
f9:44:be:40:03:82:82:78:9f:a6:67:98:8b:bb:df:c2:b9:a6:
79:42:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 08:30:12 2025 by rpki-client