This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: oXrSahsiOzY7xd9qCD/jeCLPlgSRiQo41o5WVilM6ZE=
Subject key identifier: FF:67:C2:3B:31:FF:DE:AC:7B:0B:B9:A4:32:F7:88:91:7E:53:0F:3B
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019B405C3284352377A724D6BF57FB33C02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 060B
Signing time: Sun 21 Dec 2025 10:02:22 +0000
Manifest this update: Sun 21 Dec 2025 10:02:22 +0000
Manifest next update: Mon 22 Dec 2025 10:02:22 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: FtPE5op+fmuclErnYN2RmkL2we/B6EzqrS48Zor2syM=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:5c:32:84:35:23:77:a7:24:d6:bf:57:fb:33:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Dec 21 10:02:22 2025 GMT
Not After : Dec 22 10:02:22 2025 GMT
Subject: CN=ff67c23b31ffdeac7b0bb9a432f788917e530f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:3f:a5:f0:d5:6e:18:97:95:f7:91:6a:b4:
9e:47:2b:82:c1:3e:df:4e:06:8e:63:1f:af:fd:18:
c9:12:61:62:aa:40:9a:d2:81:78:83:b9:15:78:21:
db:45:af:cd:bc:c5:0b:ee:af:4e:c1:b2:11:0b:6e:
bd:d7:50:fc:8c:91:6b:39:b1:5e:e3:fc:59:cd:65:
d1:0c:0a:82:f6:a1:b6:c6:b2:88:35:63:ec:26:07:
bc:19:1a:d1:8b:64:be:a4:77:23:ae:01:a5:89:0b:
a2:95:95:3f:a4:fc:ec:aa:ba:2f:60:e8:d2:7b:b1:
fc:c1:7c:98:45:3e:a6:a8:49:c9:d2:6f:27:80:72:
94:11:56:60:01:59:e3:69:05:29:5b:aa:d3:4d:d7:
64:d8:7c:3f:bf:d2:55:74:ba:ca:a0:ce:c6:b7:15:
ad:e5:d4:ff:a5:96:91:6b:c7:94:21:b7:18:46:f0:
24:44:d8:71:3a:d4:08:86:85:20:11:bf:30:01:d8:
c4:9c:7f:ce:b3:70:a4:81:f4:88:fd:7b:a7:08:31:
2e:52:43:af:6a:55:b6:f6:1d:c7:ce:63:6c:6c:cd:
1c:ed:de:e8:00:2b:d7:02:15:65:cc:f4:c3:3b:15:
f1:96:f7:f8:14:2a:2e:77:e8:bf:d9:77:7b:f2:eb:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:C2:3B:31:FF:DE:AC:7B:0B:B9:A4:32:F7:88:91:7E:53:0F:3B
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:92:96:f5:15:c3:05:87:2f:9b:81:af:b6:ec:59:8f:dd:24:
45:8f:2e:90:b1:68:14:4d:75:ab:f8:ce:eb:1a:67:58:58:3d:
9a:d0:d8:b0:42:03:1e:72:1c:22:73:b1:a6:fb:32:47:33:71:
b5:b3:19:7f:28:a7:94:1a:e5:80:11:5b:d1:6e:e1:4f:aa:c9:
97:cc:64:a1:4d:d9:02:db:a9:3d:48:33:2c:5e:ba:10:87:2a:
28:6b:3c:e7:f2:45:71:54:70:3d:31:b2:d0:f2:90:45:42:09:
c3:ad:21:4d:e6:97:9b:89:c0:11:66:cc:bf:a2:6b:85:63:6f:
98:2f:48:bd:88:2b:6a:02:5c:8a:3e:b3:f5:b0:20:2d:df:6f:
77:53:4f:44:af:39:8e:69:8c:27:21:29:2e:74:e3:2a:0a:9f:
df:ae:29:dc:5f:19:2d:d4:c8:36:37:b8:72:5d:25:f8:dc:d5:
a2:5c:20:95:fb:98:77:dc:fd:c3:ce:97:32:09:32:ad:50:00:
fb:b6:cf:6f:6a:f3:a3:54:c1:05:f2:c6:d0:be:40:36:73:ad:
d4:65:ed:79:71:3f:c5:28:37:3b:5f:0e:9c:e1:74:45:9e:09:
fe:c3:c9:6b:7b:d5:70:f6:e1:bb:2e:85:2f:90:23:2f:a9:f3:
16:77:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:50:02 2025 by rpki-client