This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: DlM07VsWL0uH7myeyl6XRr2WNch/5DshMGtfUvRWDBc=
Subject key identifier: 6E:3A:DA:39:7A:F8:66:99:5B:41:88:E9:F0:60:69:B3:7E:4A:4F:9B
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019B0F0095E987AE13FBDEB117A051B9DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 1703
Signing time: Thu 11 Dec 2025 20:00:55 +0000
Manifest this update: Thu 11 Dec 2025 20:00:55 +0000
Manifest next update: Fri 12 Dec 2025 20:00:55 +0000
Files and hashes: 1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: OkloHadR0nRhZCtLd6ZRIxzmyXcH6t8hoVh1z9vIL3c=)
2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:00:95:e9:87:ae:13:fb:de:b1:17:a0:51:b9:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Dec 11 20:00:55 2025 GMT
Not After : Dec 12 20:00:55 2025 GMT
Subject: CN=6e3ada397af866995b4188e9f06069b37e4a4f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:19:f4:10:27:4e:2a:dd:6a:66:32:88:2a:
31:a8:50:2d:8f:78:33:25:de:7a:de:e3:82:55:64:
a5:d3:b5:f8:77:4a:b7:19:b3:4c:49:6f:57:28:11:
88:7f:a1:1b:90:5c:25:64:df:88:73:aa:eb:a2:27:
29:3c:d8:cc:d3:6d:24:da:fc:41:b2:43:6e:c2:13:
ad:ac:c6:90:83:85:60:e2:06:58:ab:aa:d2:75:9a:
da:01:60:87:31:c4:1a:10:db:dd:0c:e4:fb:df:2f:
39:0a:33:40:9f:d5:a4:57:ac:4b:d6:46:fd:c9:b8:
58:f5:8e:2f:c9:85:4a:69:83:f9:23:17:12:73:74:
4a:d1:9e:7c:f9:4e:67:02:34:cd:5b:3d:0b:85:6a:
15:06:a7:a0:40:a1:81:0b:e5:0e:36:2c:92:13:fa:
24:4f:ab:0b:85:51:eb:76:82:12:38:6e:aa:70:2b:
f1:75:e5:02:06:1a:81:2c:5e:9a:2a:03:d4:7f:a9:
fb:a1:93:f2:d6:03:da:54:62:01:bf:3f:14:2b:10:
3d:1b:e8:6a:99:5d:e6:e5:6c:97:eb:77:b1:42:0e:
96:36:80:97:f4:f6:b3:7c:3a:9e:f0:49:db:8a:96:
bb:94:9d:1e:20:05:f5:73:a2:f5:26:c6:a1:06:db:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:DA:39:7A:F8:66:99:5B:41:88:E9:F0:60:69:B3:7E:4A:4F:9B
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:9a:b1:4a:79:e4:ed:b4:51:46:ab:54:61:4f:e8:a3:44:
04:19:2e:99:fa:67:84:45:08:cb:b8:a1:86:d1:5e:7c:a5:e3:
69:04:60:fb:55:b5:70:76:9d:cc:d5:c7:a7:ca:e3:74:5f:00:
d1:ca:e4:68:c5:5a:90:45:a5:76:74:7f:aa:20:9a:9e:f8:2c:
dc:b4:b5:7c:8b:d3:8c:dd:5b:64:4a:90:23:cc:e6:ba:4e:80:
e7:d4:fc:55:fb:30:b5:2a:e6:40:ee:8c:1c:1c:97:d3:0b:fa:
9d:86:0f:f9:a8:a1:6e:4e:88:f6:ce:ae:bf:f5:a1:89:4f:6e:
e7:a1:af:40:dd:72:ed:05:2b:5b:a0:e6:76:e0:8c:51:3f:5c:
03:98:d4:28:f3:2d:eb:18:7c:9a:fc:41:b1:89:a0:73:d2:20:
42:25:6f:4e:51:86:32:66:39:94:bc:1e:61:0d:83:9b:69:32:
54:5c:ff:c7:ed:75:1e:86:68:04:a1:3f:2c:2e:84:e8:48:3b:
04:da:72:97:26:7f:fd:dc:28:ba:6f:e3:b5:a2:84:d1:55:03:
cc:c2:44:c6:d9:89:e2:78:dd:45:de:80:9a:1b:f7:01:11:92:
c3:58:7c:91:72:74:4d:70:6a:92:0a:e9:12:d7:3c:ea:b3:91:
35:f3:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 05:15:36 2025 by rpki-client