This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: vziTDToOqVRCuIdrFDDVVbOV6cdxDHzIoUj+LFbRn54=
Subject key identifier: 78:66:92:A5:08:03:77:94:18:A4:37:C0:5D:CC:D5:C8:3C:7B:90:72
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019B3AFDCBC9D8A8AC86FC0B8FB7AFB36E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 178B
Signing time: Sat 20 Dec 2025 09:01:09 +0000
Manifest this update: Sat 20 Dec 2025 09:01:09 +0000
Manifest next update: Sun 21 Dec 2025 09:01:09 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: bYPWtrkeqov/fCerSkJdKEzVLb/aEVfucr7l2+ipI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:fd:cb:c9:d8:a8:ac:86:fc:0b:8f:b7:af:b3:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Dec 20 09:01:09 2025 GMT
Not After : Dec 21 09:01:09 2025 GMT
Subject: CN=786692a50803779418a437c05dccd5c83c7b9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:6b:05:ba:22:ea:c6:d7:ee:ba:04:09:98:
31:31:e3:bc:0e:c4:50:0d:43:a7:0c:70:99:d9:24:
7a:3d:56:59:75:e8:6f:58:35:84:f7:11:ca:b2:c7:
48:94:3f:92:2f:d2:24:5b:cc:f4:c7:c2:24:0e:b2:
80:54:55:1b:09:96:b0:d2:32:4f:2e:cb:8c:cc:d9:
fa:f5:0a:13:49:70:7b:b0:f4:ea:3f:3b:48:b6:c1:
9c:1c:0f:aa:bb:97:f8:b9:0b:2b:c8:fa:b0:f0:4f:
ea:ef:f6:2c:03:04:61:3c:42:2b:f8:08:87:a8:1a:
d0:40:ea:26:b1:f8:26:13:eb:4a:ec:27:bc:e4:57:
36:55:aa:ec:55:e7:08:fe:27:e6:00:c5:3f:67:00:
50:32:eb:a9:ec:ba:a3:cb:1f:7c:52:85:d5:7c:87:
b3:a9:40:06:71:e6:61:c8:a0:c7:ea:90:7f:2e:24:
f3:e2:6e:a6:28:16:55:c5:90:d5:85:07:79:da:32:
94:aa:af:82:d3:9f:74:3d:db:10:91:37:70:5b:1a:
f5:c1:40:0c:84:e7:48:8c:71:c3:29:98:32:0a:31:
95:d9:90:08:66:34:9a:5b:a2:0c:da:f7:e4:58:c1:
ec:b6:8c:12:f3:6e:24:af:74:c0:48:34:51:71:3a:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:92:A5:08:03:77:94:18:A4:37:C0:5D:CC:D5:C8:3C:7B:90:72
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e9:be:06:0e:13:75:59:41:23:eb:13:11:4f:6e:af:52:14:
88:bf:6b:ea:6e:9c:9d:13:84:5e:ed:1e:6e:0c:8d:79:a8:86:
2f:00:15:70:c4:0d:c2:9c:2f:24:89:4c:41:8f:a2:6a:6f:4e:
47:f7:f0:a2:83:73:30:83:3b:44:f8:28:68:08:a3:e1:34:c1:
26:e6:3a:fd:2b:99:92:a0:1d:70:be:4e:18:53:d4:81:96:e7:
11:15:74:87:73:fe:e8:83:57:d7:4c:f8:0f:a8:91:3c:da:05:
a7:0f:14:0f:bb:34:76:d9:85:30:31:24:6f:0e:bc:58:74:f7:
85:b2:a8:33:d9:8b:45:91:47:74:c3:03:97:cd:58:e3:65:68:
ef:c7:8a:c7:45:25:fa:c2:31:7b:ab:1f:d1:1b:ab:54:7d:b7:
5c:2c:ef:74:a5:f1:ec:29:85:a0:e2:ea:12:9b:9d:d4:20:c7:
e9:13:32:16:e5:bf:95:a2:45:8b:7c:40:5f:6d:15:f1:67:2a:
12:1d:f3:da:a1:75:11:74:60:81:09:18:e9:ca:8f:8d:31:9d:
fd:9b:38:1a:2f:18:33:5d:d2:e7:0c:23:ab:4a:41:5b:0d:87:
5f:a2:88:2d:70:ef:c1:70:d0:0c:2c:2d:f8:65:86:0d:f3:31:
f7:18:3f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6/cvJ2KishvwLj7evs26AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj
MzMyNTAwHhcNMjUxMjIwMDkwMTA5WhcNMjUxMjIxMDkwMTA5WjAzMTEwLwYDVQQD
Eyg3ODY2OTJhNTA4MDM3Nzk0MThhNDM3YzA1ZGNjZDVjODNjN2I5MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf5rBboi6sbX7roECZgxMeO8DsRQ
DUOnDHCZ2SR6PVZZdehvWDWE9xHKssdIlD+SL9IkW8z0x8IkDrKAVFUbCZaw0jJP
LsuMzNn69QoTSXB7sPTqPztItsGcHA+qu5f4uQsryPqw8E/q7/YsAwRhPEIr+AiH
qBrQQOomsfgmE+tK7Ce85Fc2VarsVecI/ifmAMU/ZwBQMuup7Lqjyx98UoXVfIez
qUAGceZhyKDH6pB/LiTz4m6mKBZVxZDVhQd52jKUqq+C0590PdsQkTdwWxr1wUAM
hOdIjHHDKZgyCjGV2ZAIZjSaW6IM2vfkWMHstowS824kr3TASDRRcTrNBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhmkqUIA3eUGKQ3wF3M1cg8e5ByMB8GA1UdIwQY
MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct
ZTA4YmUwZWRhZjc2LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2
LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdem+Bg4T
dVlBI+sTEU9ur1IUiL9r6m6cnROEXu0ebgyNeaiGLwAVcMQNwpwvJIlMQY+iam9O
R/fwooNzMIM7RPgoaAij4TTBJuY6/SuZkqAdcL5OGFPUgZbnERV0h3P+6INX10z4
D6iRPNoFpw8UD7s0dtmFMDEkbw68WHT3hbKoM9mLRZFHdMMDl81Y42Vo78eKx0Ul
+sIxe6sf0RurVH23XCzvdKXx7CmFoOLqEpud1CDH6RMyFuW/laJFi3xAX20V8Wcq
Eh3z2qF1EXRggQkY6cqPjTGd/Zs4Gi8YM13S5wwjq0pBWw2HX6KILXDvwXDQDCwt
+GWGDfMx9xg/aw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:17:31 2025 by rpki-client