This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: RTsjchPC6UNfadrrBPYcmnjOZxfeO4oamjABLzSgNnw=
Subject key identifier: 9B:8F:4B:4C:F0:DD:26:BB:A5:2F:00:42:4A:89:09:4A:08:89:B4:64
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019B5899F9B97CA4CCBAE776DE3099F371C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 179F
Signing time: Fri 26 Dec 2025 03:00:44 +0000
Manifest this update: Fri 26 Dec 2025 03:00:44 +0000
Manifest next update: Sat 27 Dec 2025 03:00:44 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=)
4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 7fglcAQR4IZ5PX0skRbh1V0jetf972P3cvheclyObXM=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:58:99:f9:b9:7c:a4:cc:ba:e7:76:de:30:99:f3:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Dec 26 03:00:44 2025 GMT
Not After : Dec 27 03:00:44 2025 GMT
Subject: CN=9b8f4b4cf0dd26bba52f00424a89094a0889b464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:19:d6:87:75:25:2a:92:fc:18:65:b3:ae:
00:a1:60:cc:91:e7:9e:00:ed:f9:52:a9:03:44:d2:
21:77:d4:be:7c:2c:ac:fd:b9:f0:e4:41:05:b5:0f:
6d:1d:29:2b:cd:46:9c:12:ab:5f:04:68:1c:68:49:
8e:49:99:5a:13:1f:be:87:5a:81:7a:be:c8:71:ae:
40:3f:88:f6:7c:ab:13:cb:60:9a:f2:5b:de:4b:7c:
0d:27:10:3b:fb:ec:81:aa:d4:70:66:c7:46:bf:e3:
2d:2c:ed:17:a5:9a:21:8f:31:48:81:ee:af:98:c1:
48:ef:99:58:05:8f:d0:9e:87:c6:fa:0f:4e:5f:ba:
2d:42:bc:cf:2f:9d:71:7a:c4:a7:24:60:7e:1c:c3:
a8:58:9c:35:70:54:6d:a7:c1:f7:0a:c8:5b:ab:9c:
51:5f:fd:a2:5c:fc:dc:89:ed:2c:37:21:cc:27:af:
72:93:aa:aa:41:f0:31:12:85:0e:cf:b3:ec:38:42:
58:fd:d5:51:51:73:00:bb:ce:eb:21:3d:f4:60:c8:
c4:a9:f4:11:f4:d1:f3:10:3a:bd:5d:d7:32:0e:93:
56:1e:a8:34:fa:01:f4:1a:f8:53:b8:e5:b3:2b:71:
2c:a3:90:89:94:7c:2c:c6:b6:07:26:2b:2f:ec:91:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:4B:4C:F0:DD:26:BB:A5:2F:00:42:4A:89:09:4A:08:89:B4:64
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:06:bc:d7:6b:05:88:89:e6:26:6e:4f:86:73:54:65:65:28:
97:95:97:af:f0:55:4e:38:59:0c:18:4e:4d:07:1b:47:08:5a:
a6:dc:d0:05:4c:ca:7d:0b:7e:6f:c1:94:1b:6c:d9:20:33:78:
ab:0e:24:9a:c6:3d:89:bc:ed:5b:6f:5d:40:d7:fc:66:8a:85:
36:46:e0:a8:65:28:e0:2f:32:e8:94:9c:c0:c7:d7:12:b9:ea:
ce:1e:bc:09:1c:26:34:66:1a:1d:70:ef:50:27:65:9b:22:02:
fd:6c:17:ea:28:6e:75:02:ee:da:38:3a:f8:db:2d:5e:c4:97:
e5:7c:01:0a:b6:fa:59:fe:73:4c:4b:e0:aa:8d:14:ee:3f:5e:
dc:58:b1:a2:8f:1d:81:e9:0a:ca:a4:18:a5:c3:1e:bc:47:eb:
88:4c:74:61:33:93:82:d6:77:1d:6f:7f:e2:cd:1d:ff:b0:46:
80:5d:fa:bf:b9:ee:3e:08:42:10:da:ec:f7:d6:0c:e4:13:4c:
4b:73:b8:26:09:d8:c2:f3:76:f2:6a:7c:c9:ca:88:1c:da:d9:
3b:9e:18:e0:6c:14:f0:b2:08:3b:59:a5:b7:e8:4a:26:bf:29:
75:be:e9:f0:b4:98:fd:2d:6d:d0:a9:f7:da:a6:4a:29:9f:95:
85:9d:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:53:17 2025 by rpki-client