This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier: YUML4eJ3U1sSXlTAzEMr8dfVPP4fyJsxKU5xy/FZZ6k=
Subject key identifier: EC:5B:66:7E:CC:FB:BA:84:8F:BC:75:8A:1F:76:44:EC:A9:08:E4:5F
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 019AE82A03C576DB6BDC31E9B170A53B522B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number: 11A5
Signing time: Thu 04 Dec 2025 07:00:58 +0000
Manifest this update: Thu 04 Dec 2025 07:00:58 +0000
Manifest next update: Fri 05 Dec 2025 07:00:58 +0000
Files and hashes: 1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: QaeoHLXmr66mBozd4dBa5wHbLSR6pqXyTTp7DZHeEhc=)
3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e8:2a:03:c5:76:db:6b:dc:31:e9:b1:70:a5:3b:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Dec 4 07:00:58 2025 GMT
Not After : Dec 5 07:00:58 2025 GMT
Subject: CN=ec5b667eccfbba848fbc758a1f7644eca908e45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:4d:3e:d3:4f:ff:09:2d:34:a1:9e:a2:89:
fe:1b:ff:3f:81:25:27:6d:34:cf:07:50:f8:68:75:
e1:26:6f:02:fd:4d:29:ba:3d:1e:22:be:72:16:a1:
0a:76:2f:80:86:9d:42:90:d7:d2:9e:cc:2e:fa:14:
26:47:ee:3c:ae:39:10:9f:90:66:32:7d:0c:a8:ab:
b1:b2:df:95:a0:7d:26:40:9e:b9:af:cc:c7:48:89:
b7:40:ca:5b:32:80:44:13:61:fb:ee:f3:3f:49:6c:
4b:61:ac:7a:d2:8b:97:28:39:9e:66:f4:1d:a5:45:
ce:01:55:39:a0:62:51:c9:c7:8b:b5:fc:9e:68:7f:
96:de:38:fc:b9:f7:4b:7c:ea:4e:d1:b4:a6:9a:4d:
a3:31:57:53:c4:f7:25:e8:6a:df:0e:df:39:f8:7b:
af:32:ad:28:64:52:70:e8:53:47:61:13:53:97:20:
13:68:4a:1e:63:c0:be:89:b4:55:81:e4:cc:e7:f4:
19:8c:92:5f:d8:af:0e:7d:67:6d:22:00:ad:39:44:
ae:7d:ca:b1:94:8b:4d:53:51:e9:1a:ac:50:3e:3c:
00:f3:b6:0d:88:e1:fd:c2:36:c4:cf:1c:04:7f:48:
01:d7:69:8e:1f:f8:70:2d:cb:28:0c:59:04:a1:96:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:66:7E:CC:FB:BA:84:8F:BC:75:8A:1F:76:44:EC:A9:08:E4:5F
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:71:1e:10:cf:5c:5b:b9:03:98:3f:b5:d0:f0:5a:5e:05:61:
17:78:15:f4:9b:64:11:9b:cb:67:b0:81:ba:64:f4:5d:49:36:
7d:94:71:ca:07:1d:78:68:c2:32:b1:d0:df:fb:f2:18:da:b9:
9f:52:bd:88:7f:89:73:ac:5a:3d:2e:be:ec:ed:6f:1b:ec:b2:
5b:ba:76:92:ca:91:d1:f4:e3:0b:68:fa:8b:02:4e:16:6c:41:
37:8c:0b:f0:ea:62:8c:ce:4b:7d:1d:53:ba:fd:f7:bd:e2:42:
16:36:37:8f:fb:77:2f:7a:6b:3b:9e:b1:12:56:e4:0a:36:39:
4d:fe:af:d7:04:14:cf:a3:60:26:25:f0:3c:65:08:b0:d4:e3:
c3:7f:6f:64:48:a0:28:bc:3e:48:fc:db:cd:2c:3d:ce:58:df:
82:47:09:c0:cb:38:fb:66:4b:52:c8:69:f2:32:48:2e:19:73:
21:df:9c:ba:fe:93:3e:ae:d0:7d:65:c8:68:2e:e2:ef:6e:a7:
ae:36:96:03:e8:9c:12:4b:b0:1d:c8:b8:41:dc:28:b1:fe:ed:
5f:5e:8f:5e:29:6f:8f:85:66:06:66:f4:22:84:65:09:55:0d:
91:3a:90:1e:ba:c0:71:2d:42:ee:67:77:57:a4:8c:ba:e0:57:
bc:a9:2a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZroKgPFdttr3DHpsXClO1IrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjUxMjA0MDcwMDU4WhcNMjUxMjA1MDcwMDU4WjAzMTEwLwYDVQQD
EyhlYzViNjY3ZWNjZmJiYTg0OGZiYzc1OGExZjc2NDRlY2E5MDhlNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW1NPtNP/wktNKGeoon+G/8/gSUn
bTTPB1D4aHXhJm8C/U0puj0eIr5yFqEKdi+Ahp1CkNfSnswu+hQmR+48rjkQn5Bm
Mn0MqKuxst+VoH0mQJ65r8zHSIm3QMpbMoBEE2H77vM/SWxLYax60ouXKDmeZvQd
pUXOAVU5oGJRyceLtfyeaH+W3jj8ufdLfOpO0bSmmk2jMVdTxPcl6GrfDt85+Huv
Mq0oZFJw6FNHYRNTlyATaEoeY8C+ibRVgeTM5/QZjJJf2K8OfWdtIgCtOUSufcqx
lItNU1HpGqxQPjwA87YNiOH9wjbEzxwEf0gB12mOH/hwLcsoDFkEoZYVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxbZn7M+7qEj7x1ih92ROypCORfMB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3EeEM9c
W7kDmD+10PBaXgVhF3gV9JtkEZvLZ7CBumT0XUk2fZRxygcdeGjCMrHQ3/vyGNq5
n1K9iH+Jc6xaPS6+7O1vG+yyW7p2ksqR0fTjC2j6iwJOFmxBN4wL8OpijM5LfR1T
uv33veJCFjY3j/t3L3prO56xElbkCjY5Tf6v1wQUz6NgJiXwPGUIsNTjw39vZEig
KLw+SPzbzSw9zljfgkcJwMs4+2ZLUshp8jJILhlzId+cuv6TPq7QfWXIaC7i726n
rjaWA+icEkuwHci4Qdwosf7tX16PXilvj4VmBmb0IoRlCVUNkTqQHrrAcS1C7md3
V6SMuuBXvKkqyw==
-----END CERTIFICATE-----
Generated at Thu Dec 4 08:30:41 2025 by rpki-client