This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: rPt1kNOPs6DqChH31qssu5AxaCcwBNazC5Xt01D2NQs=
Subject key identifier: 03:7C:37:7B:31:7B:E4:9E:6D:84:36:83:47:46:7B:65:BB:1B:07:DF
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019B10EEDBF11EACFB30BB042D5F49C68121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 03C5
Signing time: Fri 12 Dec 2025 05:00:47 +0000
Manifest this update: Fri 12 Dec 2025 05:00:47 +0000
Manifest next update: Sat 13 Dec 2025 05:00:47 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: n+iso//Zcg7SPMl68CFy+Ip3Y+Y3ewwmkpbeXD5OAFU=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:ee:db:f1:1e:ac:fb:30:bb:04:2d:5f:49:c6:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Dec 12 05:00:47 2025 GMT
Not After : Dec 13 05:00:47 2025 GMT
Subject: CN=037c377b317be49e6d84368347467b65bb1b07df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:91:98:7a:11:80:ee:ea:b2:ed:0a:0e:db:
63:93:bd:98:c4:85:1a:e7:9d:ad:e1:eb:bd:79:ed:
a5:7a:f0:a0:a8:bb:7c:2c:55:41:26:8e:ee:3b:3b:
74:7b:9f:bc:d7:85:f6:9e:bd:ad:63:9d:5c:e3:61:
52:68:4d:53:6d:d0:08:93:63:3b:65:7b:c9:63:95:
fc:f5:4d:7f:93:4c:5b:25:18:b0:ff:24:8a:75:98:
1c:0d:cf:da:32:a1:21:f3:da:38:b5:74:43:31:50:
40:f8:f9:82:61:7b:81:52:93:93:90:0f:f3:f2:2f:
f1:19:67:5d:02:f3:85:de:85:19:bd:ea:36:c1:1f:
e5:7d:6f:fa:bb:9f:b0:87:97:cd:f5:30:b3:ce:d4:
6a:71:1e:22:1d:06:c0:43:27:44:fd:ac:5a:fe:38:
a9:2c:ca:6b:de:fe:eb:26:6f:88:0a:c2:49:20:34:
ff:48:02:11:a7:7c:1e:95:9a:c7:5a:05:29:e2:f4:
a4:c9:6f:76:b8:d8:26:43:4d:08:d8:4e:bb:c5:4f:
ca:7a:d0:e8:4f:09:34:d5:10:ce:ab:ca:b2:44:c7:
0c:b3:ba:2c:db:20:43:02:41:89:db:25:4b:6e:96:
b1:ac:9f:c6:50:53:1f:57:ba:90:1e:df:9a:06:31:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:37:7B:31:7B:E4:9E:6D:84:36:83:47:46:7B:65:BB:1B:07:DF
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:f0:32:bc:e6:c5:5d:84:b6:e7:91:e9:5e:f6:08:53:5a:
7f:0f:bc:8c:f8:51:33:fa:85:a7:d1:82:73:6f:d3:bf:e2:6a:
ed:29:ec:8f:c2:ca:35:78:95:16:41:61:54:f5:4c:14:ab:19:
08:04:84:ac:a2:97:5d:7d:7b:6c:6a:2f:26:15:74:40:ea:00:
40:98:03:04:d4:bf:92:d4:cb:09:da:86:6b:6c:e4:1c:ef:7d:
8b:24:9b:fa:67:08:97:74:b0:f6:e9:8d:e0:80:29:4f:19:cd:
bc:b5:09:a5:d4:7d:a8:49:d6:37:ec:c7:20:2b:58:f3:a4:46:
92:9c:1c:4e:79:3f:13:41:2a:0d:e5:d5:87:38:ef:e7:e1:fc:
2e:3c:f3:af:fa:9f:99:88:47:28:cd:29:7a:83:5e:9a:44:bc:
76:09:9e:e7:cd:a8:aa:bf:ca:20:bf:27:ea:08:6d:c0:8b:e4:
7b:f8:4a:d6:97:d2:34:db:1c:9e:64:fc:62:2d:3a:72:d2:9a:
c5:e8:58:22:02:3b:60:39:42:fe:c8:98:4f:b6:b0:5b:ce:ab:
dc:7d:60:3e:a0:75:1f:01:f4:77:e5:97:bf:20:ee:fc:06:72:
c2:0f:dd:d8:5e:47:97:d3:96:7b:f6:b9:c9:b8:84:f3:7a:f9:
6c:47:7f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQ7tvxHqz7MLsELV9JxoEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1
OTliMzcwHhcNMjUxMjEyMDUwMDQ3WhcNMjUxMjEzMDUwMDQ3WjAzMTEwLwYDVQQD
EygwMzdjMzc3YjMxN2JlNDllNmQ4NDM2ODM0NzQ2N2I2NWJiMWIwN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroORmHoRgO7qsu0KDttjk72YxIUa
552t4eu9ee2levCgqLt8LFVBJo7uOzt0e5+814X2nr2tY51c42FSaE1TbdAIk2M7
ZXvJY5X89U1/k0xbJRiw/ySKdZgcDc/aMqEh89o4tXRDMVBA+PmCYXuBUpOTkA/z
8i/xGWddAvOF3oUZveo2wR/lfW/6u5+wh5fN9TCzztRqcR4iHQbAQydE/axa/jip
LMpr3v7rJm+ICsJJIDT/SAIRp3welZrHWgUp4vSkyW92uNgmQ00I2E67xU/KetDo
Twk01RDOq8qyRMcMs7os2yBDAkGJ2yVLbpaxrJ/GUFMfV7qQHt+aBjFk6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN8N3sxe+SebYQ2g0dGe2W7GwffMB8GA1UdIwQY
MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct
MjRjNzliMWNiNGRhLzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh
LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6HwMrzm
xV2EtueR6V72CFNafw+8jPhRM/qFp9GCc2/Tv+Jq7Snsj8LKNXiVFkFhVPVMFKsZ
CASErKKXXX17bGovJhV0QOoAQJgDBNS/ktTLCdqGa2zkHO99iySb+mcIl3Sw9umN
4IApTxnNvLUJpdR9qEnWN+zHICtY86RGkpwcTnk/E0EqDeXVhzjv5+H8Ljzzr/qf
mYhHKM0peoNemkS8dgme582oqr/KIL8n6ghtwIvke/hK1pfSNNscnmT8Yi06ctKa
xehYIgI7YDlC/siYT7awW86r3H1gPqB1HwH0d+WXvyDu/AZywg/d2F5Hl9OWe/a5
ybiE83r5bEd/ZQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 09:27:47 2025 by rpki-client