This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: 8OE2+fYHPRqsCWFkiyArV5gAkDBX3SeMSQDpyBQVUaY=
Subject key identifier: 71:9D:41:55:67:A1:70:8A:3D:CE:03:99:E4:8B:97:44:19:BD:15:3F
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 019B41A4EFB8B200A633805C9E8021E970F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 1522
Signing time: Sun 21 Dec 2025 16:01:26 +0000
Manifest this update: Sun 21 Dec 2025 16:01:26 +0000
Manifest next update: Mon 22 Dec 2025 16:01:26 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: dvH6AxznLpyTLCE0M/9DYpm9+li0IskuOGqBbBdp22s=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:a4:ef:b8:b2:00:a6:33:80:5c:9e:80:21:e9:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Dec 21 16:01:26 2025 GMT
Not After : Dec 22 16:01:26 2025 GMT
Subject: CN=719d415567a1708a3dce0399e48b974419bd153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:da:49:0a:b8:5f:c5:71:9c:3b:23:08:7a:
1d:11:b3:1e:82:f4:b7:29:ca:35:1e:36:9f:04:c2:
2b:50:bc:cb:c2:c1:53:9d:de:5b:e1:70:2c:de:76:
00:bf:c6:53:97:92:bd:c1:7a:de:05:0c:da:b8:7a:
fc:4f:36:be:82:a8:1b:49:1b:be:63:4c:84:6e:2b:
00:c6:55:55:eb:c2:5c:18:aa:90:67:77:ca:13:f4:
c2:42:3a:8a:09:47:f4:1b:a9:4e:0e:8c:e2:ee:42:
f0:7d:e0:76:f7:77:73:b6:31:2b:18:2f:9a:34:ab:
2d:77:d0:26:c9:e1:e6:03:8e:6c:96:b3:3f:96:16:
d7:c6:43:8c:b1:3f:69:85:0b:88:74:1c:97:66:21:
8b:cb:23:a2:a2:e8:96:e6:b3:5f:88:e8:3d:0a:e2:
72:1c:2a:27:04:96:fd:98:a1:e1:e4:d8:21:43:9a:
26:1a:07:8e:29:03:51:28:2d:7b:75:3a:b2:09:c5:
6c:2e:d5:2c:77:57:dd:c9:1b:25:5f:48:3a:8d:1d:
40:0b:0e:5d:fa:6f:9a:be:1d:3c:cd:e6:82:97:42:
ba:ae:fd:e2:09:1b:20:11:c6:a7:0c:f9:5c:c6:4e:
b6:25:62:45:3a:16:bd:0c:f6:55:11:60:ff:7b:9a:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:41:55:67:A1:70:8A:3D:CE:03:99:E4:8B:97:44:19:BD:15:3F
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:e3:63:58:9b:96:22:8d:31:d7:65:c3:cb:d3:bd:17:2f:
60:52:1b:b5:4c:0f:37:bf:0b:5d:47:da:e5:8c:f8:5b:0d:fe:
0f:52:19:4f:ad:62:8e:5c:a8:2f:35:be:35:09:8b:c3:e1:9c:
43:9f:84:df:45:7c:11:e5:a4:d8:0c:21:6e:30:c5:00:ad:9d:
95:27:f9:65:1a:41:1f:3a:0b:c0:a1:2d:4c:b6:89:8f:a4:a5:
ee:86:ab:36:8a:b3:ca:f5:86:4e:68:9b:63:25:54:4f:84:65:
d4:f7:fb:84:50:dc:f6:bb:07:73:7d:1b:f4:d6:b8:ae:cd:1e:
c9:2f:7f:6e:f2:5f:ef:6e:b4:f1:67:a0:08:87:90:a4:d9:56:
91:47:79:49:d7:fa:fa:cd:1a:e1:36:a5:26:ec:fc:f5:9e:54:
b3:06:43:0e:2c:ba:c8:b6:d5:61:ed:98:37:10:8d:bb:93:c1:
af:fb:75:6a:d2:61:6b:8b:6b:64:5d:33:17:90:5e:5e:b4:44:
b1:cd:89:1a:f8:6b:43:ad:39:16:24:64:63:7f:e4:51:ee:c8:
69:c2:c0:05:cc:83:a8:b2:27:92:5e:52:04:3b:7f:8e:26:7b:
13:a8:38:5c:ab:82:c9:77:9a:13:8d:53:da:e8:54:d0:26:a1:
cd:3f:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:23:43 2025 by rpki-client