This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: oDqGoFFtS98HLheKtrLUI99AL0XAUb9MoyCSbZGdukw=
Subject key identifier: 69:12:81:AA:6E:BB:D0:2D:32:8A:5B:11:6F:2C:C5:3A:B5:F1:48:4A
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019B1FBD00C613DE1E1471294D837569ED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0E61
Signing time: Mon 15 Dec 2025 02:00:38 +0000
Manifest this update: Mon 15 Dec 2025 02:00:38 +0000
Manifest next update: Tue 16 Dec 2025 02:00:38 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: tqALjo3d+v4tFRhsHhu01fy/d/v1jgwi27abBkdsjJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1f:bd:00:c6:13:de:1e:14:71:29:4d:83:75:69:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Dec 15 02:00:38 2025 GMT
Not After : Dec 16 02:00:38 2025 GMT
Subject: CN=691281aa6ebbd02d328a5b116f2cc53ab5f1484a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:d2:d1:b8:a0:d9:ed:0d:24:6a:f5:6b:83:
6d:8c:d1:0b:e6:9d:6f:1e:fd:19:91:05:89:2a:16:
73:e1:8e:52:31:1d:df:18:8a:1c:89:ba:b9:08:a3:
39:f7:ee:9a:8e:70:a7:00:50:88:f3:f5:24:5a:ac:
5f:94:f0:a3:b1:1a:a1:3c:f8:3d:56:18:ab:d2:f8:
22:82:9c:c9:53:c3:75:34:eb:ef:d9:f8:e8:24:76:
71:2b:88:77:6f:ac:de:d9:ad:03:05:a8:ac:a3:c6:
a7:10:b5:96:60:c0:92:22:ad:96:86:c2:f0:f3:cb:
4e:2b:5a:6e:a0:1d:ee:40:69:92:45:0b:b6:7e:ae:
5d:e1:3e:33:37:5e:5c:b9:71:b5:1b:9b:86:10:86:
54:01:81:2f:11:99:a1:4c:87:3b:11:4b:8b:17:08:
c5:1e:8c:10:13:bf:21:33:8f:ea:85:4a:00:bb:85:
bc:b9:22:dd:11:8e:d1:55:2b:86:57:df:3b:46:6b:
97:8f:87:66:84:b8:62:53:a6:05:c2:08:74:c0:dd:
dd:54:27:53:a1:62:30:0e:3d:e6:f0:61:c0:ee:67:
31:58:3c:5c:b7:cc:d6:7b:a9:65:ba:b6:3e:58:7e:
44:10:cd:ab:61:40:0e:1b:b0:b6:16:87:8f:ea:4b:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:81:AA:6E:BB:D0:2D:32:8A:5B:11:6F:2C:C5:3A:B5:F1:48:4A
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:0f:37:8a:a1:73:5b:76:87:e2:53:dc:b1:03:1e:f1:5b:
ae:00:a1:22:97:94:7d:b3:3d:53:cd:ce:35:45:a6:dd:8f:90:
27:52:e1:34:ac:f6:e9:4b:99:cc:be:5e:7f:35:ae:eb:bf:4c:
65:49:c6:5b:d8:5f:7d:48:ae:ad:0b:bd:36:db:c4:79:fb:ee:
3b:2e:13:b0:15:48:42:78:88:8e:13:52:a8:a0:82:9f:11:89:
f8:36:b2:5e:38:ed:55:88:e3:f6:cf:26:c9:0d:73:fe:52:69:
62:e1:63:22:6f:4e:18:2c:a1:69:8a:f9:a1:98:20:53:d2:9b:
a4:8e:03:be:de:a5:0a:39:bc:e8:5a:c3:3c:01:3d:a2:74:78:
65:e8:ac:af:2e:6b:ba:1b:20:69:e1:91:10:f6:07:48:d1:62:
10:b6:d8:e5:9b:de:d3:14:ee:8b:08:11:fb:66:4d:8e:9a:48:
d5:52:ac:b0:da:9b:ff:fe:1d:47:67:a5:4b:8c:fb:67:33:f4:
bf:28:c5:85:4a:f7:2d:4b:f1:a6:5f:2b:49:b4:31:79:4b:37:
43:87:be:67:c8:bd:13:4c:e6:cb:d9:21:69:68:18:d3:6a:34:
e9:61:ba:24:fb:8f:88:12:28:41:95:00:6a:36:02:b1:af:f8:
0b:36:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 09:18:13 2025 by rpki-client