This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: kVUnQjGOfokNBh9pVpL/0nE7+ZA1APHcxyqhgsYm71U=
Subject key identifier: 4C:36:C9:C5:0F:51:87:53:EA:F4:2F:EF:58:59:BA:36:68:4E:7C:C6
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019B38335A9721025B5DAFE80669F071E404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1787
Signing time: Fri 19 Dec 2025 20:00:48 +0000
Manifest this update: Fri 19 Dec 2025 20:00:48 +0000
Manifest next update: Sat 20 Dec 2025 20:00:48 +0000
Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: tQoNrFwBOkBmfuoUuQuQvvQwPUeU/0HyiXcrVlIeB5A=)
2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:33:5a:97:21:02:5b:5d:af:e8:06:69:f0:71:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Dec 19 20:00:48 2025 GMT
Not After : Dec 20 20:00:48 2025 GMT
Subject: CN=4c36c9c50f518753eaf42fef5859ba36684e7cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:1e:da:41:52:4f:f9:07:80:2a:6f:f6:9a:
0f:54:89:d1:6d:a6:14:d6:a2:3e:55:d0:9a:fc:5f:
cb:7a:cc:99:7d:2f:03:10:30:81:d0:ea:db:d9:e6:
87:33:2d:27:8a:c0:6d:93:2d:c4:42:5b:c6:85:ed:
68:ca:e9:10:3d:8d:81:ec:d7:77:24:4f:70:f1:46:
f4:46:1d:e4:c4:39:58:6c:ce:1a:b1:86:ce:d5:b1:
a2:7c:b8:cd:cd:a9:3e:ca:cf:f4:e2:b0:16:89:a9:
57:e3:5f:02:14:2d:6a:40:de:ca:2f:37:f2:53:65:
49:21:71:8b:1a:1a:c7:04:90:ca:18:55:40:4f:ee:
7c:77:34:1e:96:e6:3a:84:f6:0e:1e:24:8b:1c:81:
e3:4c:94:4d:a1:fe:50:13:53:fd:56:e7:d0:a2:36:
04:88:ad:35:a6:48:9f:2b:64:2a:92:2d:b7:19:6d:
da:c7:f1:7b:8e:28:70:d0:aa:73:11:69:d9:dc:7b:
73:10:42:b7:da:29:0c:c1:a0:bc:59:66:0b:d9:ba:
e4:6a:8f:28:d6:69:1c:b3:3a:23:15:36:fc:2e:ca:
ba:5e:00:05:18:2e:6b:7f:e6:8c:43:48:13:af:d4:
92:9d:7e:8f:73:93:5f:e5:2c:98:d0:25:2d:cb:e1:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:C9:C5:0F:51:87:53:EA:F4:2F:EF:58:59:BA:36:68:4E:7C:C6
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:50:a2:94:8d:e7:a7:bb:ac:5f:6f:98:80:3f:db:d7:3d:
83:4a:3b:89:b1:44:9d:b8:e8:44:b7:df:a9:e9:61:b4:96:75:
5d:3e:1d:cc:b0:16:b5:70:21:de:8e:de:41:0e:bd:05:d8:bf:
73:b5:c7:df:47:42:c6:1e:9c:37:6a:82:16:f0:4e:9b:71:7c:
26:22:b9:04:96:d2:be:33:42:52:2d:ea:cf:8f:cd:e6:bb:e4:
81:e6:68:e8:84:87:8d:76:d8:49:29:ce:2d:ad:14:f8:b6:97:
1e:e1:86:5f:b1:65:d0:45:aa:11:15:d8:4d:c4:41:ac:37:f3:
59:0f:14:b3:51:1a:09:2b:d6:ff:2c:41:b1:35:c4:0a:ef:51:
92:e8:77:1e:84:b1:ec:c4:d3:a4:e7:9c:37:2e:5e:95:0f:3f:
c8:c7:2a:74:7c:0a:16:62:72:5c:ff:b3:77:ea:af:2c:42:87:
02:18:1d:52:31:82:14:57:97:f2:4d:bc:d9:58:c6:7a:e4:01:
f7:45:eb:7c:57:d7:d1:e9:11:ee:dd:58:39:ce:0e:67:8e:6d:
15:e5:4d:0d:43:60:f8:b4:c6:dc:c7:c0:c3:8a:94:35:ca:4c:
14:4a:3a:31:8b:8c:00:75:ff:4d:36:0a:c7:91:03:4a:f4:53:
b2:7d:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:28:42 2025 by rpki-client