This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: xCxsrIGtaC6gMz2tAoT/L+EDcD8kLrYUpPgHhawh5Og=
Subject key identifier: 5D:81:9E:E8:6E:2E:2A:5D:12:C3:C0:00:1C:91:59:FD:87:75:40:65
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019B563DCDC86CEDC67E94C9BDA8DAD07B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 0834
Signing time: Thu 25 Dec 2025 16:00:49 +0000
Manifest this update: Thu 25 Dec 2025 16:00:49 +0000
Manifest next update: Fri 26 Dec 2025 16:00:49 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: WhajS4x8pXhQXoEYl7BuR+qHToz942QuTJ6YkmSbcmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:56:3d:cd:c8:6c:ed:c6:7e:94:c9:bd:a8:da:d0:7b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Dec 25 16:00:49 2025 GMT
Not After : Dec 26 16:00:49 2025 GMT
Subject: CN=5d819ee86e2e2a5d12c3c0001c9159fd87754065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:1c:d7:1f:3d:f7:46:63:70:49:ff:b7:8b:
e0:78:ec:e7:1f:dc:b6:81:91:8a:89:c7:14:a1:6b:
08:2d:d2:71:72:9f:bc:8e:8b:99:e9:40:b3:07:45:
ae:17:f3:c8:f2:63:c1:42:b2:37:e0:64:a6:fc:82:
2c:6e:12:68:75:e9:73:f3:52:74:f7:3a:d1:5a:ad:
23:81:57:1d:de:3d:5e:02:24:19:b3:6b:64:ff:df:
1b:6f:06:2c:34:f9:83:70:1b:6b:91:37:0f:a3:73:
17:45:05:57:c9:df:fc:fa:95:3a:9c:7c:30:bf:31:
54:f0:95:df:35:f5:7b:ca:29:32:41:a7:e1:fe:e2:
73:85:a8:e0:d2:6c:bd:d3:19:cb:90:47:bf:20:93:
1d:2c:07:cf:11:a8:40:29:6d:db:3b:24:37:0c:d3:
22:09:ab:ff:99:3c:34:6d:03:91:bd:cb:c7:e4:fd:
39:41:4a:0c:20:1d:d1:45:0b:6d:3c:21:56:d5:8f:
7d:08:7e:59:72:6a:2d:a9:66:00:39:6e:33:11:59:
a1:aa:72:23:77:29:52:27:38:4e:fc:c0:ea:67:d0:
f4:89:87:9f:49:65:66:8d:7e:72:55:45:ee:84:d5:
41:6f:7f:d4:c7:5d:8e:b9:d6:0f:7a:c9:54:a7:61:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:9E:E8:6E:2E:2A:5D:12:C3:C0:00:1C:91:59:FD:87:75:40:65
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8c:22:d3:8a:2d:28:a7:e6:a1:34:af:03:59:a5:23:20:5d:
e6:39:d5:46:ac:21:2d:b0:d7:9f:d6:1d:af:4e:c7:41:40:ad:
22:64:a8:7c:c3:7a:00:1d:0b:93:95:f2:58:ce:59:93:e7:6b:
be:66:a5:ab:71:74:67:05:da:45:e2:cb:57:db:4a:17:7b:6d:
7b:ec:49:fa:d1:f3:cc:cb:39:04:6a:61:2f:4d:28:ac:92:18:
18:f9:e7:cf:95:17:c8:fb:88:10:9f:f8:83:46:90:2c:ac:25:
4a:cf:bb:a5:b0:4b:31:70:5f:d1:b5:51:05:ec:39:09:b6:36:
4a:8a:b8:85:27:51:7a:fb:e3:19:1f:a0:16:f2:89:cc:ef:80:
d8:5c:29:d5:0a:f1:d8:b9:c7:95:6b:70:86:b5:75:05:64:99:
a6:a6:73:93:c9:f1:26:f7:7a:c9:21:e6:07:fa:ab:51:8f:16:
4e:26:ff:9f:c5:cd:c2:c3:2b:d0:57:14:1c:36:aa:47:bf:a2:
5b:0b:18:11:ce:4c:3e:a1:4d:85:15:f4:ee:74:df:c7:58:2e:
5d:a0:ac:7f:1d:ea:08:d5:39:c4:61:11:3f:c2:33:09:c4:65:
0f:36:91:82:c7:45:fa:65:11:82:c3:7e:cd:48:5c:3d:39:4d:
c1:19:94:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtWPc3IbO3GfpTJvaja0HtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjUxMjI1MTYwMDQ5WhcNMjUxMjI2MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZDgxOWVlODZlMmUyYTVkMTJjM2MwMDAxYzkxNTlmZDg3NzU0MDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDwc1x8990ZjcEn/t4vgeOznH9y2
gZGKiccUoWsILdJxcp+8jouZ6UCzB0WuF/PI8mPBQrI34GSm/IIsbhJodelz81J0
9zrRWq0jgVcd3j1eAiQZs2tk/98bbwYsNPmDcBtrkTcPo3MXRQVXyd/8+pU6nHww
vzFU8JXfNfV7yikyQafh/uJzhajg0my90xnLkEe/IJMdLAfPEahAKW3bOyQ3DNMi
Cav/mTw0bQORvcvH5P05QUoMIB3RRQttPCFW1Y99CH5ZcmotqWYAOW4zEVmhqnIj
dylSJzhO/MDqZ9D0iYefSWVmjX5yVUXuhNVBb3/Ux12OudYPeslUp2EC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2BnuhuLipdEsPAAByRWf2HdUBlMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYwi04ot
KKfmoTSvA1mlIyBd5jnVRqwhLbDXn9Ydr07HQUCtImSofMN6AB0Lk5XyWM5Zk+dr
vmalq3F0ZwXaReLLV9tKF3tte+xJ+tHzzMs5BGphL00orJIYGPnnz5UXyPuIEJ/4
g0aQLKwlSs+7pbBLMXBf0bVRBew5CbY2Soq4hSdRevvjGR+gFvKJzO+A2Fwp1Qrx
2LnHlWtwhrV1BWSZpqZzk8nxJvd6ySHmB/qrUY8WTib/n8XNwsMr0FcUHDaqR7+i
WwsYEc5MPqFNhRX07nTfx1guXaCsfx3qCNU5xGERP8IzCcRlDzaRgsdF+mURgsN+
zUhcPTlNwRmUYg==
-----END CERTIFICATE-----
Generated at Fri Dec 26 01:35:43 2025 by rpki-client