This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: sBiRqV23X2ugnwslUyLnturljet02ifqIct3aI139XA=
Subject key identifier: EB:45:10:F0:46:B9:FC:6A:9E:AB:43:BC:A8:8B:F2:D7:28:80:E4:2F
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019B3CEBDF010A366C18BFA6BF1814CE2801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0AB7
Signing time: Sat 20 Dec 2025 18:00:49 +0000
Manifest this update: Sat 20 Dec 2025 18:00:49 +0000
Manifest next update: Sun 21 Dec 2025 18:00:49 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: 02ZzM7+HiCx1eucJTwTe+iVzA59T6db4aDsYKhjUlkM=)
2: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (hash: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=)
3: ltJZ2aR5x60TKWiWAmS0-oj2c_k.roa (hash: 34pWAkD5QJ94abRhTwOLQbh2Aksu0yZZqkvvoYsDUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:eb:df:01:0a:36:6c:18:bf:a6:bf:18:14:ce:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Dec 20 18:00:49 2025 GMT
Not After : Dec 21 18:00:49 2025 GMT
Subject: CN=eb4510f046b9fc6a9eab43bca88bf2d72880e42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:36:44:97:29:1f:89:d4:e3:4d:04:74:41:
b4:11:5f:37:93:6f:e1:47:a3:b5:6b:d1:fb:49:c2:
36:58:8f:88:d9:4d:e1:7d:df:1d:65:de:38:dc:ef:
b4:09:89:38:d1:e1:24:c6:63:35:f8:7c:0b:42:90:
22:b7:b6:20:5f:8d:1b:b3:b8:56:6d:da:d5:1c:82:
5e:0b:51:cd:68:d2:e3:39:d4:a9:a2:09:6d:ff:e8:
a8:0d:12:71:b5:2d:b7:b9:f5:1f:79:b3:d9:9d:e5:
78:76:20:b5:c3:2e:fe:1a:5e:c0:35:16:78:1f:57:
5d:25:4e:b8:68:5f:b6:b9:e1:c7:20:b0:5d:a2:a5:
2f:f8:35:63:9c:1a:56:3d:4d:aa:68:73:82:0b:da:
54:7a:d5:ec:54:28:e5:fc:f0:68:96:39:7a:65:f2:
82:85:30:07:fb:b9:48:29:86:07:8d:1e:5b:4c:36:
89:5c:6d:98:a9:d0:25:b6:4d:49:e3:38:e5:bd:66:
c1:a7:13:24:a3:d7:51:b3:ce:91:6b:06:f1:e6:1c:
14:a2:5b:5d:03:f0:54:db:a3:23:11:f1:10:2f:cc:
68:87:58:18:a6:3b:1a:58:2a:71:da:d3:a7:17:c9:
8b:89:42:a4:a3:f7:3e:0f:c3:7b:77:3a:29:e5:d6:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:10:F0:46:B9:FC:6A:9E:AB:43:BC:A8:8B:F2:D7:28:80:E4:2F
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:f2:ba:33:91:36:82:3e:87:0f:4d:40:f5:db:4d:05:61:
cc:be:be:be:3d:02:9a:0a:4a:49:55:4e:4a:43:6d:27:30:6f:
6d:8f:1f:8d:da:1a:1f:17:b9:1b:79:e2:56:15:46:38:e6:ef:
23:f7:b3:ab:33:63:6a:53:20:e5:90:ae:09:19:5d:f0:d0:56:
51:32:46:1d:3b:c6:d2:ff:3a:3a:81:c1:f0:83:84:bc:b4:36:
2a:42:eb:d9:b2:af:0b:3b:fb:1b:95:57:96:36:5c:7c:ce:34:
a7:ea:11:6b:0b:7a:b8:3c:f3:c3:f1:f0:ab:80:2a:7f:e0:74:
28:51:02:cf:ef:24:82:ed:b8:0e:0e:41:5b:d0:f0:d2:5b:83:
11:1d:9e:dc:5e:72:45:11:91:25:5c:81:8e:a4:c5:ff:38:f0:
6a:ca:ee:7f:9f:af:1d:64:97:e9:18:06:d0:9d:3f:4a:65:30:
23:62:0c:ea:a7:16:f0:45:af:0d:75:17:f1:86:0e:95:25:79:
3c:f7:66:a0:88:79:be:41:7b:c1:ab:f8:5b:46:4d:f8:e0:e3:
75:44:e0:b6:4c:f1:9a:44:4f:ed:bf:4d:c8:9e:0c:fd:51:78:
90:42:ec:7c:38:aa:4c:56:25:6e:8d:c0:3f:4a:d9:2a:aa:4b:
a8:61:46:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8698BCjZsGL+mvxgUzigBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWJhMjlhNzVhZTEzMjVjMDM4MmZiNDg0YjMyMWQ2OGQx
NTQzODQwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD
EyhlYjQ1MTBmMDQ2YjlmYzZhOWVhYjQzYmNhODhiZjJkNzI4ODBlNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCw2RJcpH4nU400EdEG0EV83k2/h
R6O1a9H7ScI2WI+I2U3hfd8dZd443O+0CYk40eEkxmM1+HwLQpAit7YgX40bs7hW
bdrVHIJeC1HNaNLjOdSpoglt/+ioDRJxtS23ufUfebPZneV4diC1wy7+Gl7ANRZ4
H1ddJU64aF+2ueHHILBdoqUv+DVjnBpWPU2qaHOCC9pUetXsVCjl/PBoljl6ZfKC
hTAH+7lIKYYHjR5bTDaJXG2YqdAltk1J4zjlvWbBpxMko9dRs86Rawbx5hwUoltd
A/BU26MjEfEQL8xoh1gYpjsaWCpx2tOnF8mLiUKko/c+D8N7dzop5daGewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtFEPBGufxqnqtDvKiL8tcogOQvMB8GA1UdIwQY
MBaAFBWbopp1rhMlwDgvtISzIdaNFUOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQt
Y2FmNGZhMDcyNjgyLzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQtY2FmNGZhMDcyNjgy
LzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv7yujOR
NoI+hw9NQPXbTQVhzL6+vj0CmgpKSVVOSkNtJzBvbY8fjdoaHxe5G3niVhVGOObv
I/ezqzNjalMg5ZCuCRld8NBWUTJGHTvG0v86OoHB8IOEvLQ2KkLr2bKvCzv7G5VX
ljZcfM40p+oRawt6uDzzw/Hwq4Aqf+B0KFECz+8kgu24Dg5BW9Dw0luDER2e3F5y
RRGRJVyBjqTF/zjwasruf5+vHWSX6RgG0J0/SmUwI2IM6qcW8EWvDXUX8YYOlSV5
PPdmoIh5vkF7wav4W0ZN+ODjdUTgtkzxmkRP7b9NyJ4M/VF4kELsfDiqTFYlbo3A
P0rZKqpLqGFG4g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:43:01 2025 by rpki-client