This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: 7s4SBZu7sv8r6MLRiwc/SxPxjX4MRPFSIhkXYXmvrbY=
Subject key identifier: FD:0C:F9:A5:1B:E6:98:E1:FB:50:4D:5D:4B:F7:96:DC:01:63:A7:ED
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019B1BAA52AF41CAA89FA3576A5228363C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 12C5
Signing time: Sun 14 Dec 2025 07:01:45 +0000
Manifest this update: Sun 14 Dec 2025 07:01:45 +0000
Manifest next update: Mon 15 Dec 2025 07:01:45 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa (hash: KDb4m2ieiCCUnfzXPEKnNf6EnbdlGwtT0gW5l38r8FU=)
4: y-irRafrFET7ueEFRfDBe0Y0btc.roa (hash: vwA7uPcYphRiy+M8uy7NrhUZ1Q14uz25pMwIRfApgPI=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: LL8q4RWuliOZFKZMAICSfOV7jjKC/5jl4q7oZM32hKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:aa:52:af:41:ca:a8:9f:a3:57:6a:52:28:36:3c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Dec 14 07:01:45 2025 GMT
Not After : Dec 15 07:01:45 2025 GMT
Subject: CN=fd0cf9a51be698e1fb504d5d4bf796dc0163a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:94:22:3c:2c:63:0d:14:8e:e7:71:85:3c:
da:b2:05:50:0b:8e:5d:ec:a7:b5:18:bf:0f:82:35:
28:9e:b1:5d:4f:68:62:a1:3c:59:70:b8:93:ec:0d:
c0:6d:23:45:38:e2:02:c6:39:19:f8:cf:49:0c:6b:
51:3f:3a:b9:01:70:69:25:ef:28:01:01:3e:94:a0:
88:4f:2b:8d:35:f8:a0:1a:03:e1:38:ca:a5:f9:59:
2a:a2:90:d0:df:50:a9:b7:67:40:32:5c:e4:4b:4b:
75:24:54:88:ac:17:32:db:e7:61:43:c1:02:fd:00:
b5:3f:e6:dd:2b:9d:82:78:49:81:58:a7:e1:2c:25:
ab:6d:2c:ce:0d:83:b4:8d:9e:ec:e7:ad:1a:37:a1:
f7:48:c6:41:7f:30:de:37:c2:6c:3d:04:42:0d:93:
fc:f8:3c:08:f0:ee:40:ad:5f:ad:85:c8:f4:df:0c:
73:e1:30:ce:10:66:7f:90:83:1b:6a:89:bd:d8:0c:
82:81:6f:91:0e:66:b7:e4:ef:63:4a:00:ba:8f:dd:
d7:19:01:74:29:ea:bb:36:f5:cf:7f:07:66:da:9e:
35:44:dd:ca:d3:d2:a3:97:28:09:1f:f9:98:d4:bd:
69:45:20:fe:d1:a2:80:1f:b1:c6:87:52:02:ef:d6:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:F9:A5:1B:E6:98:E1:FB:50:4D:5D:4B:F7:96:DC:01:63:A7:ED
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ca:55:c8:cb:7f:ab:67:c4:c9:fa:e7:e9:20:ef:ce:d7:10:
87:99:e8:29:7f:31:c7:34:e4:6d:27:61:43:ed:b0:94:b1:8b:
ac:82:b0:5f:41:88:bb:2b:33:0d:43:a3:16:f4:2a:a1:c8:34:
b6:c3:c9:94:dd:3d:81:e8:52:71:56:c1:39:18:b6:c1:5c:8f:
f7:3a:4b:16:7d:ef:c8:46:56:f9:51:10:83:f9:06:c0:28:58:
5e:2c:69:16:b0:e9:69:bd:b2:90:d3:41:d9:94:10:44:30:16:
b6:2a:34:36:76:38:e4:9f:cf:ba:39:30:c1:62:8c:9f:e4:2b:
9a:0a:b5:a6:56:da:d7:b4:66:ee:68:83:a7:95:b3:c9:10:83:
55:ce:0f:4a:db:cb:5e:a6:0b:6b:72:00:c1:4e:e0:59:e7:09:
0a:15:23:2f:f9:29:90:c9:9a:7e:29:41:64:9a:52:c7:d2:83:
fd:4b:6f:f9:b8:47:93:fc:cd:6e:55:ec:9a:fd:3a:a2:8f:e8:
9e:ba:24:3c:be:49:8c:16:31:3c:b1:be:8f:03:18:bb:c9:66:
dd:f2:a8:9a:ae:58:24:03:94:8b:dc:6d:92:da:f1:81:a3:2e:
a0:38:23:4a:c5:1f:da:54:19:a9:e2:8d:2e:0b:2e:07:ba:8e:
8e:49:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:20:11 2025 by rpki-client