This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: 0NSlLGpxJW5cDuiPx6E3zkDsYLUDTalHjt/DhR2Lp4Y=
Subject key identifier: 4F:5F:12:9F:B5:7E:2E:95:45:36:9A:47:85:36:56:A3:47:08:83:45
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019B3B6BE4E5EA1553F9D5767B7D1308862C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 178B
Signing time: Sat 20 Dec 2025 11:01:25 +0000
Manifest this update: Sat 20 Dec 2025 11:01:25 +0000
Manifest next update: Sun 21 Dec 2025 11:01:25 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: 4+Svbo4Pg4tlNBrLQ15mqZ4fK2Cf0476m/Gx3uHiy4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:e4:e5:ea:15:53:f9:d5:76:7b:7d:13:08:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Dec 20 11:01:25 2025 GMT
Not After : Dec 21 11:01:25 2025 GMT
Subject: CN=4f5f129fb57e2e9545369a47853656a347088345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:06:58:63:d4:4c:06:f2:2d:86:9f:df:9a:
d6:47:17:ab:ce:ed:f2:7c:df:d2:73:5e:00:4e:1c:
d6:8a:c2:34:fb:15:38:72:28:79:29:59:93:b7:93:
75:2f:6a:8a:d1:d8:9f:a0:c2:1e:4e:6d:e3:3d:d7:
34:63:04:8f:b6:75:b3:bb:71:32:f5:fd:a4:31:24:
9d:e0:04:f1:bb:bf:70:f3:57:9c:a8:0d:e9:c6:8a:
9a:62:db:18:08:2e:73:f8:05:b1:d4:71:c9:ce:6c:
e4:5d:92:80:2c:3c:98:d5:69:29:07:f3:a2:20:62:
99:3f:1c:8d:3f:63:b4:4c:29:a5:f5:4d:15:fd:ee:
f1:6a:46:77:70:92:e8:f0:0f:ca:7c:15:41:5f:dd:
51:b6:2d:23:b6:2c:bf:41:08:fd:fb:3e:5b:43:c8:
e2:d8:84:d8:25:1a:c5:51:2a:9b:0a:a7:57:98:66:
ec:22:f7:15:8c:87:16:25:24:88:66:d6:51:a7:f5:
af:75:6e:b1:aa:35:7f:97:23:18:0b:8e:bd:85:35:
36:26:66:ed:88:b1:6a:b7:ea:e2:61:ed:50:76:2f:
22:06:5f:fe:cb:6f:70:d5:d1:50:b7:e6:46:c0:d7:
63:0e:c8:f4:e9:bb:c3:fb:c3:7b:6d:93:42:18:28:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:12:9F:B5:7E:2E:95:45:36:9A:47:85:36:56:A3:47:08:83:45
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:8e:48:b9:23:ba:b1:e0:4f:39:1b:96:05:51:9a:f9:bf:
06:06:d6:13:d1:ea:94:67:91:55:8a:a2:78:6a:5c:82:dd:b9:
1a:71:d7:30:b6:c6:fd:43:3b:4a:76:e7:27:b8:52:13:4a:ed:
8f:34:8f:7b:be:a4:43:85:01:36:c4:64:9e:e9:67:ef:85:64:
70:66:ac:ba:ff:1a:77:2f:d0:df:c3:4b:d5:3b:2c:7b:4c:6f:
33:0d:fa:b5:a0:20:5b:28:b5:c1:19:db:aa:4c:29:8a:44:ee:
24:6e:47:a7:08:13:1a:fc:53:2b:0e:22:13:54:6c:e9:c3:2b:
f6:12:a1:e0:4c:c1:36:4f:13:87:c5:5f:b7:2e:e6:ad:3b:11:
f0:c0:c7:f0:a3:98:9f:34:02:0b:59:a4:b2:cf:5a:7e:c0:5c:
f2:b7:98:dd:e4:a6:ba:29:9d:47:c0:3e:16:93:b1:79:74:c5:
d2:0a:66:23:f8:da:3b:a0:32:71:c0:0d:8b:f8:0e:1a:8b:a3:
53:15:41:da:dc:21:56:7a:59:32:0f:08:f4:3c:96:2e:0f:e2:
81:82:81:94:d7:68:bb:51:c2:3c:7f:65:40:08:65:13:ee:b7:
89:a2:a7:de:b9:2b:8a:3b:5a:a2:28:43:29:ae:31:6d:ff:61:
57:41:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:15:52 2025 by rpki-client