This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: Wux4rgjkpVJ85HjjwbmbpJ2WJczJvI1zVSJaaoxrSRc=
Subject key identifier: 79:48:B3:CB:0B:F1:92:9F:C7:3A:F1:89:04:3F:70:FC:59:42:D0:2A
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019B5D89DE1A78352FE6C76C0E82282DD54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 16B0
Signing time: Sat 27 Dec 2025 02:01:14 +0000
Manifest this update: Sat 27 Dec 2025 02:01:14 +0000
Manifest next update: Sun 28 Dec 2025 02:01:14 +0000
Files and hashes: 1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: 6RMtIfdzQ4r2InoDvP4K+sRYd/KTEAfPHmskUSs9ho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5d:89:de:1a:78:35:2f:e6:c7:6c:0e:82:28:2d:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Dec 27 02:01:14 2025 GMT
Not After : Dec 28 02:01:14 2025 GMT
Subject: CN=7948b3cb0bf1929fc73af189043f70fc5942d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:b4:16:8f:6a:10:eb:49:b0:9a:7b:a8:97:
a5:c2:dc:39:14:80:ef:f0:dc:74:11:40:73:28:35:
1e:60:0b:a4:57:67:6d:8b:ef:46:bc:ff:ca:67:e7:
61:34:12:71:6e:f7:9f:58:f2:c9:99:18:4f:ef:df:
8b:95:be:46:ed:d6:4c:eb:47:ad:49:99:43:fa:58:
21:73:d6:33:fc:68:40:25:0b:72:58:b1:bf:e0:d6:
f3:40:35:78:b4:46:39:0f:be:a3:43:9b:93:d3:18:
54:f7:a8:d4:1f:3e:f1:d8:ed:26:55:22:80:10:d0:
cd:12:da:4e:7e:f1:21:44:6f:b9:fb:04:1b:5d:c0:
75:c1:29:63:3e:91:b7:e3:32:f7:a8:4f:57:38:2f:
12:fd:12:90:e7:0f:0b:6e:8a:39:38:d3:0b:09:02:
1d:3e:50:83:6b:73:99:c2:db:a8:b0:93:14:39:b2:
20:31:85:db:d7:7a:2e:12:9d:7d:f8:72:a1:c5:6f:
7c:87:65:f9:4b:84:77:66:ea:91:47:79:71:a4:45:
14:c1:40:31:27:a6:99:b8:69:47:92:1b:c8:83:db:
ec:21:b2:36:f8:3b:c5:99:ce:95:8d:ec:3c:dc:e3:
c6:df:2b:47:48:36:46:3a:3d:90:68:d6:51:96:17:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:B3:CB:0B:F1:92:9F:C7:3A:F1:89:04:3F:70:FC:59:42:D0:2A
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:e5:9c:6d:50:40:e2:a6:d7:55:5c:2f:50:d0:52:71:4c:
4e:e7:78:43:07:41:ec:a7:3b:a1:82:51:2c:99:6d:e2:b5:62:
42:83:fd:05:39:26:0c:fa:62:c8:de:30:55:01:f5:1f:d1:9e:
20:08:3c:08:e7:04:5d:39:87:5a:6a:1a:e3:56:1a:ce:ba:18:
21:7d:c0:9d:7b:0c:a5:15:d5:bf:90:ff:07:a7:17:80:24:9c:
82:d9:50:53:2e:6e:c9:81:50:12:b6:9a:73:1f:50:6d:82:22:
4a:29:12:2c:65:08:55:c7:48:11:75:53:40:99:9b:00:52:15:
e9:1a:15:41:f0:54:21:12:1d:d2:57:26:55:5c:f1:5f:ee:d9:
28:64:b5:2a:52:a3:54:ca:8c:85:fd:fd:de:71:a7:e6:6c:8d:
0f:ab:78:82:77:80:d4:30:5d:f6:fa:dd:39:4d:c0:65:5f:5e:
ff:27:c7:7b:6f:81:eb:6e:8a:3e:17:5f:e2:8a:8b:03:a7:de:
5e:a4:f9:d8:a2:61:14:0a:ae:2f:43:ff:75:09:73:4c:e0:f8:
d6:8c:b1:8f:85:8e:10:6f:56:6c:3c:88:05:2e:a8:aa:8b:1d:
0a:c1:86:88:e5:06:d5:83:02:c8:73:22:4c:28:b9:cc:7f:4c:
84:e9:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:38:51 2025 by rpki-client