This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: 2oQz/xpdn1YbqGwj0dxNFxOPknI82FiyrQRiC0j4DGw=
Subject key identifier: 5C:E0:AE:48:F3:4D:16:92:45:A5:F4:D2:40:C5:83:BD:C9:4A:B4:96
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019B3A21D500B17AEC1E6DA92C345FCB8F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1788
Signing time: Sat 20 Dec 2025 05:00:54 +0000
Manifest this update: Sat 20 Dec 2025 05:00:54 +0000
Manifest next update: Sun 21 Dec 2025 05:00:54 +0000
Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 3rxYG2Y5iF+jG2S0NdGnfny7LuozM7bFTalh9/Vz83E=)
2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:21:d5:00:b1:7a:ec:1e:6d:a9:2c:34:5f:cb:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Dec 20 05:00:54 2025 GMT
Not After : Dec 21 05:00:54 2025 GMT
Subject: CN=5ce0ae48f34d169245a5f4d240c583bdc94ab496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:29:5e:a5:cc:fa:73:81:73:4c:8a:9a:d6:70:
fc:eb:d7:7a:67:08:f8:4b:3e:3c:c3:b1:b4:cf:ce:
8b:5c:8e:49:cc:88:62:13:42:95:c1:5a:f5:18:10:
cb:d1:ed:5b:14:10:19:8c:a7:2a:1b:21:a7:3a:33:
b4:8d:76:10:20:0f:ec:a7:b9:24:31:e0:7c:92:ea:
1f:a1:90:92:85:6f:ac:f5:95:9a:71:6a:b4:71:f6:
cd:b1:3e:bd:3e:79:ba:5a:1b:63:8b:91:89:65:43:
70:e3:81:ec:60:3f:33:7d:d5:89:93:95:27:b5:4c:
5a:fd:0c:ce:4e:3f:a8:a4:64:c4:8e:bd:64:0e:04:
48:2c:54:1b:92:74:b8:61:58:33:9c:62:85:87:4d:
51:35:c8:d4:38:6a:64:ab:66:da:5a:8a:a3:bf:0d:
fb:c5:c9:0a:4c:28:e0:01:63:dd:86:63:81:c6:a8:
42:04:0b:cd:d3:3c:04:e1:b5:ab:41:69:96:e1:58:
20:bf:3d:97:74:ac:70:9a:5b:3f:9d:75:05:bf:6c:
9e:69:3d:a8:29:33:ae:fc:59:b9:7b:c7:e8:00:a1:
44:13:69:ff:d3:aa:4e:7b:96:b7:3e:74:37:64:f7:
0f:a1:6c:d5:ff:56:24:59:ec:b2:2b:fd:38:52:29:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:AE:48:F3:4D:16:92:45:A5:F4:D2:40:C5:83:BD:C9:4A:B4:96
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b8:9c:16:90:98:f5:86:f0:80:8e:a3:00:e3:8d:44:fe:bc:
38:d9:20:81:35:57:dd:37:7e:5b:20:0f:e2:92:de:c0:b0:36:
eb:9d:de:75:cd:61:b1:5b:3f:f4:63:c9:00:07:d4:d4:2d:9b:
4a:71:65:62:9c:77:b6:52:1a:48:75:eb:8d:72:b4:74:a7:12:
98:da:84:3d:b8:0e:fe:a2:c3:4f:70:0c:6a:81:34:9f:c9:63:
f7:30:85:79:89:f4:d7:2d:9b:8e:68:98:6b:b3:58:03:4a:b4:
5a:b5:7c:9f:89:8e:14:fc:23:8d:c1:df:9d:87:68:0e:49:09:
15:93:d5:5b:9c:be:71:0b:2d:be:cb:92:63:ac:b0:8e:45:51:
61:63:50:e1:2c:4f:ba:f2:e1:23:bb:14:75:c1:4d:57:f8:cd:
1e:1c:82:e0:99:8c:37:df:d4:32:0e:6b:d4:c0:59:8a:97:b4:
99:ae:54:46:1c:d3:fc:7e:9f:99:e6:8b:48:4b:24:89:26:65:
b5:0f:51:88:d2:d4:aa:af:ab:8a:c4:61:f5:6e:f2:50:70:7f:
e0:54:1f:fd:38:3d:00:ba:c6:43:82:27:c8:58:b0:4e:9b:f2:
3d:7f:92:35:81:8b:45:5a:8c:48:49:14:bd:7e:94:ec:9d:03:
08:bc:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:38:48 2025 by rpki-client