This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier: sIEJGN66SfSx26MUOkMVV9bP6c/YDL9LnrHQ/PpHIHQ=
Subject key identifier: D9:49:78:92:10:D3:A5:C7:9C:23:99:AD:CD:FB:72:96:EC:95:CF:F6
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019B38A1568A1B27E830A02116472E3540E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number: 0799
Signing time: Fri 19 Dec 2025 22:00:56 +0000
Manifest this update: Fri 19 Dec 2025 22:00:56 +0000
Manifest next update: Sat 20 Dec 2025 22:00:56 +0000
Files and hashes: 1: 3h99B3B928ItdGjcKoHk10e2CY4.roa (hash: QICYNqcrZ0Xnzlwywop1Rva0m6JoHs3pi7Cn/R4enXk=)
2: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=)
3: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=)
4: MSnKv-V5f4ZhMSBkUowC4eAKwnc.roa (hash: GNpg734fprSqUaaC2JbrcVA6y9oknxkgNnhf9ZX5sJE=)
5: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=)
6: NxDioS42mqzdQfLMxyB7X-GlaRk.roa (hash: C3TTQFAalnMmHYCoE9DHkCJCL/yOjyVdjjZKsCzOrhY=)
7: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: 3Ie2QyWF1ekEeZP0V6AYv5Rx2xQ9moDlRLCvB50G8+s=)
8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=)
9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=)
10: t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (hash: UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=)
11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=)
12: wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa (hash: NkI4eJ+m8t9g8zspdgWjN+brolZtyYl6e2q5ivq3HCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:a1:56:8a:1b:27:e8:30:a0:21:16:47:2e:35:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Dec 19 22:00:56 2025 GMT
Not After : Dec 20 22:00:56 2025 GMT
Subject: CN=d949789210d3a5c79c2399adcdfb7296ec95cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:e2:28:eb:66:e8:95:14:de:c8:c6:e4:ee:
63:a5:5c:94:52:93:27:3d:ef:09:93:ff:52:92:5a:
24:84:86:1c:f0:46:e1:2a:a2:b6:b3:50:bc:59:d0:
70:81:94:02:04:5b:83:5a:94:e2:bf:d9:77:4f:56:
d4:55:a0:10:7e:71:d2:cc:aa:0a:fe:ca:e0:85:db:
c9:d0:aa:71:7f:34:ad:f7:d4:9c:02:9f:fd:24:b3:
62:c2:ab:b3:35:f3:61:cf:b7:cb:fe:6a:d8:25:fd:
78:22:bc:ec:70:eb:7c:1a:3b:ed:9a:7f:92:62:55:
3a:92:d4:93:53:ff:93:8d:b8:79:8f:82:83:be:7c:
5d:34:6f:d8:a2:f4:69:49:5e:fa:b5:21:1b:bd:af:
b8:10:5d:37:17:7a:e6:80:bf:5c:5b:bd:10:9e:f1:
34:74:ca:73:14:f0:13:22:d6:b1:8b:af:3b:50:1c:
84:b9:55:9a:4e:d1:88:17:ef:68:0c:4f:d9:fa:20:
0a:4d:dc:74:c9:c9:6d:00:70:6a:b1:ba:31:94:b2:
9c:68:c9:d4:e1:eb:9e:1c:f5:92:21:ee:1d:fa:a9:
d0:30:d8:66:41:08:e9:6e:c6:b5:84:60:9a:84:2f:
fa:a6:a2:57:40:21:80:3d:ca:c0:37:b8:23:4c:99:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:78:92:10:D3:A5:C7:9C:23:99:AD:CD:FB:72:96:EC:95:CF:F6
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:27:cc:32:23:fb:22:1e:f3:2b:be:3a:59:1e:52:22:9c:f3:
5e:ae:91:f7:d8:82:c6:da:21:c1:41:31:29:07:26:71:37:f3:
49:39:59:a8:fc:55:f4:d7:96:b2:c3:da:32:43:59:53:f2:ee:
79:f5:f3:7b:c2:2e:39:80:ee:f3:fb:27:b4:73:03:5c:d4:e6:
ce:ce:5e:59:1d:b2:b0:11:96:a4:91:2e:d6:0b:80:8e:d3:6f:
e5:6a:09:20:e7:b4:03:d5:1c:3e:00:77:8c:7e:c0:92:29:8a:
d5:f5:0f:a1:75:c6:c0:a4:da:74:b3:77:ad:30:ca:33:98:72:
45:06:a0:78:2d:b5:84:d1:58:ce:8e:de:fd:ea:78:a3:22:c7:
2f:5c:e7:b7:22:f0:16:33:36:bb:e5:46:81:70:48:a4:41:80:
ff:dc:e7:42:ad:2d:2e:06:23:bd:69:20:46:39:13:1f:78:5a:
2b:21:f4:1a:4d:8c:39:85:b3:62:d2:10:ca:8d:eb:73:3d:f5:
99:73:ee:63:c6:68:c6:84:61:21:71:11:41:e7:2e:71:cb:b4:
af:00:13:d3:56:a7:c7:36:66:7c:06:0a:78:9b:93:56:a3:4b:
5a:db:6a:43:f9:63:f8:32:e6:b8:1b:cd:a1:60:db:d5:33:53:
d7:7e:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:53:04 2025 by rpki-client