This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier: XKDFbW19XCWswrvWUgQJo5IkQkGkihFwBPxaycHJwDU=
Subject key identifier: D8:C4:F2:AC:F1:A1:9A:96:56:A6:07:19:84:39:BC:5B:21:8F:E2:02
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019B33449590E86BFFC5350DD63A25A70937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number: 174B
Signing time: Thu 18 Dec 2025 21:01:31 +0000
Manifest this update: Thu 18 Dec 2025 21:01:31 +0000
Manifest next update: Fri 19 Dec 2025 21:01:31 +0000
Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=)
2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=)
3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=)
4: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=)
5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=)
6: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=)
7: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=)
8: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: Ht4pYmJ5MArUaL1NH9E9HBWFa5hw4S/KmxR3TOMuXlM=)
9: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=)
10: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=)
11: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=)
12: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:33:44:95:90:e8:6b:ff:c5:35:0d:d6:3a:25:a7:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Dec 18 21:01:31 2025 GMT
Not After : Dec 19 21:01:31 2025 GMT
Subject: CN=d8c4f2acf1a19a9656a607198439bc5b218fe202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:db:7f:aa:f4:e7:62:80:7c:8c:f6:16:96:
d6:5f:59:b2:22:9c:cf:c8:5c:63:bd:67:e8:46:a5:
2f:0e:99:62:ad:84:d2:1e:f2:9b:98:2b:20:a2:03:
bc:2a:1a:68:ce:f9:79:6e:0a:c8:00:27:05:82:f5:
f0:0f:a3:9c:e0:ec:ab:80:86:34:d3:2e:b3:ed:89:
94:f0:63:7f:e3:37:fc:ac:93:b3:ee:c6:c8:f3:4c:
1e:4f:26:2b:05:59:1e:ec:44:cd:24:ab:0c:d9:60:
c7:38:36:0f:dc:62:6a:79:22:dc:2d:b5:da:b2:2a:
5b:ae:de:59:99:78:2d:4c:e2:fc:ac:96:49:4b:4f:
93:1c:92:2c:e2:77:db:ba:1b:17:b5:7b:cc:ff:ab:
f0:ed:4c:dd:87:22:37:33:f0:7b:31:d4:fa:4f:3c:
02:a2:b0:e5:96:11:fd:20:d8:9a:b2:ca:e0:16:00:
90:5f:0e:89:96:01:b5:6a:ca:98:ae:73:d3:fe:6e:
4a:51:f3:eb:0d:f9:84:a2:63:77:27:28:25:53:26:
d5:35:d8:8e:e5:2c:3d:a0:df:f0:11:9c:0d:63:79:
41:e4:6b:75:58:f2:fd:51:fd:69:d7:fa:1b:a9:61:
85:de:7f:84:1d:a5:09:03:10:44:8f:34:9a:94:fb:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:F2:AC:F1:A1:9A:96:56:A6:07:19:84:39:BC:5B:21:8F:E2:02
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:b0:fd:e3:14:fa:27:17:38:10:ff:00:8b:8b:6a:9d:07:
ca:c6:5d:6f:c3:9c:06:6f:f0:38:74:92:de:fb:7b:e2:85:c6:
af:ab:df:51:af:46:4d:b6:c0:aa:eb:f8:c9:8c:e2:5a:75:66:
85:4f:3d:d2:50:7d:0e:d8:f4:9e:a5:92:82:0b:76:7d:0d:b6:
ba:8a:a3:f4:c4:2d:51:90:a5:38:d3:f7:a8:af:5b:a2:f4:d8:
0c:db:ba:6a:3d:1b:f3:72:88:a0:f9:7c:c2:e0:7d:26:95:7e:
01:f8:9c:c9:45:e9:a8:e9:78:7d:b4:f8:8e:72:32:83:c8:09:
17:a6:ca:34:cb:b8:b4:d2:86:84:b5:80:24:20:a3:78:b9:20:
e2:55:10:b2:87:9c:82:47:91:d4:50:55:a5:22:67:3e:23:de:
32:73:72:41:9c:30:79:3c:cd:f7:73:b7:9e:3c:99:10:f1:66:
77:3e:14:81:dc:e2:c9:ba:d8:95:a8:08:96:4b:68:d6:5e:80:
f5:4d:3e:24:d2:ad:26:ee:58:d1:86:33:4b:85:7e:c4:14:ac:
51:1b:fe:07:c7:c7:81:14:1c:90:6a:f8:a5:51:2d:91:24:45:
39:3e:63:9c:2d:60:54:eb:c6:ad:6a:59:2c:8d:50:09:10:80:
4f:30:85:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZszRJWQ6Gv/xTUN1jolpwk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw
YTJiN2UwHhcNMjUxMjE4MjEwMTMxWhcNMjUxMjE5MjEwMTMxWjAzMTEwLwYDVQQD
EyhkOGM0ZjJhY2YxYTE5YTk2NTZhNjA3MTk4NDM5YmM1YjIxOGZlMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPfbf6r052KAfIz2FpbWX1myIpzP
yFxjvWfoRqUvDplirYTSHvKbmCsgogO8Khpozvl5bgrIACcFgvXwD6Oc4OyrgIY0
0y6z7YmU8GN/4zf8rJOz7sbI80weTyYrBVke7ETNJKsM2WDHODYP3GJqeSLcLbXa
sipbrt5ZmXgtTOL8rJZJS0+THJIs4nfbuhsXtXvM/6vw7UzdhyI3M/B7MdT6TzwC
orDllhH9INiassrgFgCQXw6JlgG1asqYrnPT/m5KUfPrDfmEomN3JyglUybVNdiO
5Sw9oN/wEZwNY3lB5Gt1WPL9Uf1p1/obqWGF3n+EHaUJAxBEjzSalPt+2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjE8qzxoZqWVqYHGYQ5vFshj+ICMB8GA1UdIwQY
MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct
NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3
LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb6w/eMU
+icXOBD/AIuLap0HysZdb8OcBm/wOHSS3vt74oXGr6vfUa9GTbbAquv4yYziWnVm
hU890lB9Dtj0nqWSggt2fQ22uoqj9MQtUZClONP3qK9bovTYDNu6aj0b83KIoPl8
wuB9JpV+AficyUXpqOl4fbT4jnIyg8gJF6bKNMu4tNKGhLWAJCCjeLkg4lUQsoec
gkeR1FBVpSJnPiPeMnNyQZwweTzN93O3njyZEPFmdz4UgdziybrYlagIlkto1l6A
9U0+JNKtJu5Y0YYzS4V+xBSsURv+B8fHgRQckGr4pVEtkSRFOT5jnC1gVOvGrWpZ
LI1QCRCATzCFiA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:49:00 2025 by rpki-client