This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: AiE0fx8U8ejsQ0VnoB9FcWuDWRyjVFa0fK+u6/IQ90U=
Subject key identifier: 00:DE:20:7B:32:A0:46:EE:8B:55:BA:67:0E:B4:87:E9:70:7B:5C:81
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019AEE2CDFF683BF76E0CB4503D3CB07BD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 1763
Signing time: Fri 05 Dec 2025 11:01:49 +0000
Manifest this update: Fri 05 Dec 2025 11:01:49 +0000
Manifest next update: Sat 06 Dec 2025 11:01:49 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: ANaxNnvZPHNJKzHNIhjfH/tuw5FeUFkrFD/DhU7xTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ee:2c:df:f6:83:bf:76:e0:cb:45:03:d3:cb:07:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Dec 5 11:01:49 2025 GMT
Not After : Dec 6 11:01:49 2025 GMT
Subject: CN=00de207b32a046ee8b55ba670eb487e9707b5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:3e:18:9d:a2:22:41:e5:f0:f6:91:62:37:
74:60:00:be:e8:bc:85:aa:65:78:eb:49:93:4e:c7:
3e:06:25:49:4d:29:1d:d5:d9:82:04:3e:9d:c2:18:
80:f2:a7:30:2e:e9:e5:1b:ce:fe:c8:8d:6a:91:25:
ef:83:ff:5a:3f:2f:38:10:68:ba:f7:77:d2:17:ef:
de:a5:ed:e0:c5:55:30:33:a3:8e:c5:20:13:29:de:
ed:7a:0c:ff:8e:b8:d2:a5:f9:76:cc:8a:d3:44:10:
09:14:3e:b9:d8:8f:c2:ad:70:17:1d:83:75:5a:86:
2b:8b:6e:8f:ea:a8:8e:c1:94:11:9c:5d:f1:5c:40:
c2:31:92:8c:4a:bc:7d:c2:c3:f4:60:e5:37:ec:e5:
50:60:0f:c5:62:e5:3c:4f:ca:7f:b7:c8:6c:d4:4c:
f5:27:e6:80:f0:ab:75:c7:73:b9:a2:aa:97:a7:f8:
49:a8:32:0e:9b:cf:58:7a:69:50:d8:9c:4f:79:74:
4c:3d:51:0d:af:cc:8c:b5:c5:2b:04:47:55:cc:59:
29:3b:57:4b:f0:9a:9a:e1:51:74:ad:b6:ce:da:23:
7a:b7:59:1d:bb:b6:54:aa:07:fb:b0:dc:55:60:68:
a3:ad:97:6c:4c:96:10:94:cc:2e:4d:c5:ab:9e:0c:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:20:7B:32:A0:46:EE:8B:55:BA:67:0E:B4:87:E9:70:7B:5C:81
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:94:6a:f2:e5:72:30:f5:7b:c7:a3:8f:24:eb:81:1a:47:
07:a4:d8:b6:7e:55:bc:0f:0d:f9:63:15:d3:af:47:9a:95:87:
98:e6:6f:68:3b:de:29:ca:9b:3a:8c:92:4f:d3:c7:36:2b:26:
85:cc:09:1e:ef:da:91:45:9c:3e:8b:f3:10:04:7e:f2:c2:ba:
ce:04:e2:86:f2:1d:83:5e:25:39:14:5c:e2:14:8d:84:15:94:
b3:15:71:47:1a:b1:a5:37:5a:b0:85:64:23:db:4d:d7:4e:1a:
13:34:50:61:99:33:e6:3d:67:42:e5:cf:c9:e0:12:d6:d9:8f:
12:d5:41:3e:36:6b:a6:42:e2:99:31:7a:f2:6f:66:75:3c:dc:
c8:77:81:5a:f7:bb:ee:37:aa:29:df:9c:78:06:c5:8a:9f:fe:
73:48:65:10:89:ef:ca:69:9a:89:a4:86:26:bb:0f:1b:96:6b:
32:67:d4:a0:47:88:da:69:da:8d:65:1f:23:cf:39:95:44:96:
2f:30:82:94:8b:c8:76:71:47:e1:52:56:3b:9c:93:54:09:5e:
28:9a:9c:dc:c8:ef:74:ee:e2:c2:f1:8a:ee:43:31:56:ae:cb:
14:30:65:da:7d:4a:f8:12:26:a9:45:ff:8b:ba:aa:c4:24:bf:
39:5c:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:47:09 2025 by rpki-client