This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: ML82b7dchpr2wJYELtBkuuxruVySAZ6H9fHPD9EbKFg=
Subject key identifier: 62:0F:62:F7:40:A1:A0:52:0B:52:C3:C0:99:B3:C0:B7:C0:A5:6C:DB
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019B36EA16E6310CF24758F43080DC0B4E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 178C
Signing time: Fri 19 Dec 2025 14:01:09 +0000
Manifest this update: Fri 19 Dec 2025 14:01:09 +0000
Manifest next update: Sat 20 Dec 2025 14:01:09 +0000
Files and hashes: 1: 1-uxvgJ33Ep83LKDPOWyK_TQkRjs.roa (hash: DSKQp+AywW/AiTaKMnd/V3/aO8KTX7yy5Li9SZt44DU=)
2: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
3: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
4: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
5: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: 4/4YIutWCb0zP/lkpByRi2UPn+MP0eICuIsBbFLsuns=)
6: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
7: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
9: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:ea:16:e6:31:0c:f2:47:58:f4:30:80:dc:0b:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Dec 19 14:01:09 2025 GMT
Not After : Dec 20 14:01:09 2025 GMT
Subject: CN=620f62f740a1a0520b52c3c099b3c0b7c0a56cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:56:c1:18:c0:e9:5d:db:14:aa:f8:00:83:
3b:21:57:f6:53:f1:99:20:84:6b:ba:2b:f4:41:3e:
61:76:97:a5:94:81:93:9a:ec:22:7e:59:fe:9b:61:
b6:6f:6f:97:3e:cb:0c:85:f1:60:92:b6:21:dc:8c:
af:10:de:7f:24:1f:30:4d:e2:d6:2c:cb:88:f2:5a:
47:4e:1f:c5:8d:55:3a:cb:13:c5:df:15:eb:a0:97:
7c:15:5e:5b:35:d1:06:6a:59:67:87:98:78:2a:a9:
ee:31:61:23:5f:8a:4a:8a:7a:9b:15:e7:f8:45:57:
e8:28:70:8a:35:f1:28:90:3e:30:ee:60:47:61:9d:
ad:b0:e5:e9:d6:91:a9:b1:d5:dd:f2:e1:99:4e:2d:
35:27:d9:f7:6b:85:af:8d:5d:3c:01:e6:26:5b:39:
71:b8:db:23:18:dc:a6:92:80:f8:3f:68:42:ce:ca:
7e:1b:63:ce:de:8a:0c:d0:92:51:d7:6b:fc:23:67:
0f:15:1d:47:c3:35:fe:79:a0:75:59:fa:ef:9f:ae:
da:7f:98:65:2d:93:22:e8:ce:da:d3:e2:61:80:3e:
0c:cc:e4:34:83:92:9b:eb:66:cb:07:67:46:c3:40:
5e:c9:5e:d6:81:82:61:68:34:aa:af:16:6d:71:ba:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0F:62:F7:40:A1:A0:52:0B:52:C3:C0:99:B3:C0:B7:C0:A5:6C:DB
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:20:48:d2:2e:cf:a9:2d:6c:ba:d6:3b:c0:5a:dd:d8:57:11:
c0:2d:d0:b0:7b:c7:0d:e1:78:68:40:53:27:a5:b8:02:35:2b:
30:61:74:73:9c:96:36:c8:24:3e:9f:7e:bc:68:ef:8e:9e:94:
9c:a0:61:d1:e2:42:fe:33:8f:ea:43:73:94:c0:58:14:05:ea:
e1:df:2c:ec:58:0f:e2:7f:03:3f:a7:89:36:7a:95:db:9a:a7:
91:cc:f1:fb:6d:d5:8f:bc:2f:9f:22:b1:97:e7:c0:e9:4a:f2:
b3:94:59:8a:c0:98:ab:75:4d:77:ac:2d:d1:74:1b:a4:9f:6f:
68:c6:4d:87:20:9c:77:61:cc:ee:fc:83:2f:17:a7:42:4d:02:
8d:b4:2b:ab:fd:4d:c2:f8:f4:7b:30:68:3f:14:53:ac:c1:11:
5f:7d:e1:77:f6:a9:29:09:85:29:85:2c:b6:ff:26:b1:57:24:
7a:13:62:d4:68:42:a8:cc:83:df:6e:16:f5:6f:61:79:e3:cd:
df:4a:78:d2:5d:52:41:1f:37:37:ee:6a:4b:58:87:08:ca:0f:
82:b0:c1:84:a1:17:6b:c7:2c:4f:60:63:1b:2d:5b:44:78:8f:
52:d6:52:f5:b8:3b:12:b4:4d:c0:1c:2f:18:90:4c:f0:57:1a:
f9:d4:5e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs26hbmMQzyR1j0MIDcC05UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjUxMjE5MTQwMTA5WhcNMjUxMjIwMTQwMTA5WjAzMTEwLwYDVQQD
Eyg2MjBmNjJmNzQwYTFhMDUyMGI1MmMzYzA5OWIzYzBiN2MwYTU2Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4dWwRjA6V3bFKr4AIM7IVf2U/GZ
IIRruiv0QT5hdpellIGTmuwifln+m2G2b2+XPssMhfFgkrYh3IyvEN5/JB8wTeLW
LMuI8lpHTh/FjVU6yxPF3xXroJd8FV5bNdEGallnh5h4KqnuMWEjX4pKinqbFef4
RVfoKHCKNfEokD4w7mBHYZ2tsOXp1pGpsdXd8uGZTi01J9n3a4WvjV08AeYmWzlx
uNsjGNymkoD4P2hCzsp+G2PO3ooM0JJR12v8I2cPFR1HwzX+eaB1Wfrvn67af5hl
LZMi6M7a0+JhgD4MzOQ0g5Kb62bLB2dGw0BeyV7WgYJhaDSqrxZtcbqL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIPYvdAoaBSC1LDwJmzwLfApWzbMB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCBI0i7P
qS1sutY7wFrd2FcRwC3QsHvHDeF4aEBTJ6W4AjUrMGF0c5yWNsgkPp9+vGjvjp6U
nKBh0eJC/jOP6kNzlMBYFAXq4d8s7FgP4n8DP6eJNnqV25qnkczx+23Vj7wvnyKx
l+fA6Urys5RZisCYq3VNd6wt0XQbpJ9vaMZNhyCcd2HM7vyDLxenQk0CjbQrq/1N
wvj0ezBoPxRTrMERX33hd/apKQmFKYUstv8msVckehNi1GhCqMyD324W9W9heePN
30p40l1SQR83N+5qS1iHCMoPgrDBhKEXa8csT2BjGy1bRHiPUtZS9bg7ErRNwBwv
GJBM8Fca+dReHQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:56:11 2025 by rpki-client