This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: zqAy9Ho/daj/WV+OfuWGrJp40y9cPvjS4sNd1l5pryc=
Subject key identifier: 47:0E:36:54:CE:71:55:0A:0C:06:E7:3B:C3:50:47:C4:7E:C8:B9:25
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019B3AC6A43CD657B54FAAB155AA16974DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 09C5
Signing time: Sat 20 Dec 2025 08:00:55 +0000
Manifest this update: Sat 20 Dec 2025 08:00:55 +0000
Manifest next update: Sun 21 Dec 2025 08:00:55 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: VH4lWME7OQC+jiH2ajmt/wb99RvehfLTaQGtAm/UD2w=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:c6:a4:3c:d6:57:b5:4f:aa:b1:55:aa:16:97:4d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Dec 20 08:00:55 2025 GMT
Not After : Dec 21 08:00:55 2025 GMT
Subject: CN=470e3654ce71550a0c06e73bc35047c47ec8b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:8e:c0:be:40:8a:09:58:b4:29:3a:c9:34:
fd:22:0f:8f:22:fc:75:2e:fc:cc:fe:a9:51:a3:80:
a6:7e:46:8f:40:f6:b7:04:72:8e:c1:d9:5d:ab:b2:
85:4d:c2:aa:07:11:b0:47:4d:79:f8:3a:c1:f0:ba:
41:20:0b:4d:e9:9e:74:8b:d1:6c:52:a5:12:0f:b9:
2e:81:f0:13:ae:a5:db:6a:dd:06:51:e0:2e:6d:ec:
6b:53:07:87:6b:ff:d7:04:af:91:bd:44:a4:fd:b7:
4f:b6:85:8f:f8:09:f0:03:66:f2:1f:73:1c:12:a0:
fa:f9:39:b4:95:6b:88:33:66:c5:a2:6d:18:51:54:
d4:a5:90:e5:b1:ad:aa:37:c5:83:4d:77:04:c8:a1:
a7:62:77:37:4d:8f:6b:66:9e:e8:44:21:81:d6:83:
56:69:49:59:05:2e:8e:ac:0c:56:eb:f9:b4:28:d2:
0f:47:d6:50:ca:64:e0:ae:39:4a:cc:8b:53:c7:96:
14:53:65:cc:26:c4:e7:03:90:a4:34:87:55:44:d6:
1a:db:94:a1:40:ec:8b:52:02:2e:af:b3:d0:0c:c6:
03:04:97:53:d5:3d:b1:ae:b8:7b:b2:6e:bd:10:01:
95:49:9d:17:5f:12:65:5c:ee:ea:51:a3:e3:de:dc:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0E:36:54:CE:71:55:0A:0C:06:E7:3B:C3:50:47:C4:7E:C8:B9:25
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:74:37:6e:54:4a:9a:39:9b:73:03:8b:49:18:73:c5:6a:fa:
99:83:e6:88:df:8c:d7:9b:82:f5:bb:52:b9:e5:8f:e8:53:76:
13:07:eb:ea:1f:7d:60:62:9c:dd:23:e9:63:ac:b7:1d:82:89:
f5:df:93:98:ad:6c:66:b7:44:a7:4c:75:e1:35:7f:1e:c4:aa:
c8:5b:c9:6d:71:fd:be:c3:e0:2c:2b:0d:85:a6:42:01:77:9c:
ad:16:53:db:e8:bb:fc:9e:c1:09:27:a5:24:fb:c9:7e:3a:9f:
70:ac:82:c6:15:c5:92:10:3e:66:0c:7a:52:10:ef:80:65:dd:
ac:4f:b3:d9:b3:be:1c:31:03:ea:e0:0d:24:7c:4e:f4:a1:78:
aa:b7:a1:a9:cb:bc:12:be:e0:3a:7f:e5:2c:08:37:ce:1c:dc:
4c:0d:0a:3a:81:b0:53:98:e9:90:6f:4d:f4:15:1c:2f:58:00:
42:d1:81:34:8e:63:79:76:1c:6d:06:f2:85:ac:da:64:a3:c6:
b5:e8:6e:84:fa:f9:3e:97:0c:90:76:0a:2b:eb:3b:fb:d1:55:
e5:7c:38:5e:a9:fa:b9:87:20:88:67:9c:38:5d:b9:c6:78:99:
27:7a:ba:c6:46:81:de:86:d9:94:43:24:3b:95:00:0c:1b:d1:
f9:9f:db:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6xqQ81le1T6qxVaoWl03iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjUxMjIwMDgwMDU1WhcNMjUxMjIxMDgwMDU1WjAzMTEwLwYDVQQD
Eyg0NzBlMzY1NGNlNzE1NTBhMGMwNmU3M2JjMzUwNDdjNDdlYzhiOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp46OwL5AiglYtCk6yTT9Ig+PIvx1
LvzM/qlRo4CmfkaPQPa3BHKOwdldq7KFTcKqBxGwR015+DrB8LpBIAtN6Z50i9Fs
UqUSD7kugfATrqXbat0GUeAubexrUweHa//XBK+RvUSk/bdPtoWP+AnwA2byH3Mc
EqD6+Tm0lWuIM2bFom0YUVTUpZDlsa2qN8WDTXcEyKGnYnc3TY9rZp7oRCGB1oNW
aUlZBS6OrAxW6/m0KNIPR9ZQymTgrjlKzItTx5YUU2XMJsTnA5CkNIdVRNYa25Sh
QOyLUgIur7PQDMYDBJdT1T2xrrh7sm69EAGVSZ0XXxJlXO7qUaPj3txB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcONlTOcVUKDAbnO8NQR8R+yLklMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1XQ3blRK
mjmbcwOLSRhzxWr6mYPmiN+M15uC9btSueWP6FN2Ewfr6h99YGKc3SPpY6y3HYKJ
9d+TmK1sZrdEp0x14TV/HsSqyFvJbXH9vsPgLCsNhaZCAXecrRZT2+i7/J7BCSel
JPvJfjqfcKyCxhXFkhA+Zgx6UhDvgGXdrE+z2bO+HDED6uANJHxO9KF4qrehqcu8
Er7gOn/lLAg3zhzcTA0KOoGwU5jpkG9N9BUcL1gAQtGBNI5jeXYcbQbyhazaZKPG
tehuhPr5PpcMkHYKK+s7+9FV5Xw4Xqn6uYcgiGecOF25xniZJ3q6xkaB3obZlEMk
O5UADBvR+Z/bDw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:53 2025 by rpki-client