This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: gkrqBLx/+xZ+JNJSdJZtc26XXCLDp38dole3KBEHerw=
Subject key identifier: C1:65:74:CB:F2:1E:95:BB:A9:4A:64:53:B0:78:F1:71:22:54:65:69
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019B3E6CCD3D8AA2DA09040727579388603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0C6C
Signing time: Sun 21 Dec 2025 01:01:16 +0000
Manifest this update: Sun 21 Dec 2025 01:01:16 +0000
Manifest next update: Mon 22 Dec 2025 01:01:16 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: 6ukiIpK477TvBgQ6fK7cLjm1XyEexXxjUng9qYatlNU=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6c:cd:3d:8a:a2:da:09:04:07:27:57:93:88:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Dec 21 01:01:16 2025 GMT
Not After : Dec 22 01:01:16 2025 GMT
Subject: CN=c16574cbf21e95bba94a6453b078f17122546569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:a1:44:c9:cf:6d:34:d5:7a:d4:b6:b8:20:
d9:74:e3:92:a0:92:65:57:74:d7:82:a5:47:bb:78:
25:fd:37:c0:59:21:4d:6c:61:bc:c7:9f:b8:34:79:
8e:a1:8c:96:2c:7e:2d:f0:ff:4a:04:4c:07:f1:e6:
d7:1e:f2:68:08:8f:36:70:13:9e:ae:c5:74:f3:b5:
cf:e2:b5:30:42:b1:b6:b7:be:43:0a:d5:f7:f6:96:
78:59:f9:bb:1e:f3:3c:27:ff:b9:dc:b0:17:72:44:
f8:41:70:02:86:1e:46:80:e3:76:5d:39:87:1a:bf:
dc:86:81:d9:e9:57:27:e3:cc:1e:9e:48:86:70:97:
b8:c5:91:d3:15:7b:14:a9:4d:5e:0a:81:50:26:9b:
27:59:3e:bc:83:c7:87:d6:f1:d3:a1:7f:7c:31:ea:
1c:ee:ba:bd:bd:14:84:11:43:f7:0d:57:ab:24:20:
21:61:19:f2:82:59:5a:cb:56:60:32:c1:92:d4:13:
02:b4:fb:87:8f:94:33:49:8e:b2:9e:cf:cb:78:c5:
20:f2:a5:de:bd:52:31:e3:3a:9f:aa:0f:c1:37:52:
72:75:dc:81:5f:91:5f:fa:f4:eb:4d:63:72:f8:08:
9b:74:75:e7:b8:c7:68:fd:da:67:1a:2b:85:a0:ee:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:74:CB:F2:1E:95:BB:A9:4A:64:53:B0:78:F1:71:22:54:65:69
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a8:d9:ed:10:88:85:48:22:22:19:27:d1:63:62:c5:29:b4:
f2:88:e6:3c:eb:6b:05:47:b5:3f:82:cc:aa:ad:4a:9f:2e:82:
1a:df:cd:43:c8:ce:50:8d:90:ac:84:49:74:88:d8:bc:b8:a8:
05:55:36:c8:fc:d4:eb:af:66:59:04:9c:42:4b:2c:ec:a7:65:
fb:b2:2e:c3:28:f7:ff:2f:f7:8b:99:53:7b:c3:75:48:5f:a4:
28:a6:5c:42:06:e9:d7:a3:d2:3b:ec:7f:a0:c5:ee:37:67:dc:
b2:e7:a5:6d:71:6a:a9:92:84:e3:bc:cd:b2:c5:f6:50:3b:c0:
a8:7a:a2:3e:10:6a:a8:6f:e3:56:a9:6d:5e:90:4a:64:96:2a:
fc:26:ef:34:9b:3b:8e:f2:fb:bd:50:f8:30:31:d6:23:e4:65:
4e:a7:64:54:9f:b9:31:49:af:3b:a5:d7:03:8e:35:4f:db:e9:
c0:61:49:73:df:5d:bc:78:fd:90:eb:af:8e:79:f9:9e:27:a7:
ce:77:e1:68:9d:a9:d9:d7:e9:16:46:9b:bd:ae:df:1a:2d:03:
62:a2:1c:92:e7:14:ad:64:34:24:c9:15:c0:59:20:dc:98:18:
66:bc:ef:c0:6f:2f:ff:de:13:86:7d:9c:a6:2e:2e:d2:78:ad:
5b:51:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:56 2025 by rpki-client