This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier: VX7m7iTJn3gxVXuQZPqLjmAFh14SuqiMsn9/Ri3mu4k=
Subject key identifier: 8B:DA:74:2D:3D:D3:1E:83:1A:9B:C8:F9:E9:67:45:55:17:BE:A5:40
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019B2F6768B0EF98612C393ECA53BEC5163B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number: 1892
Signing time: Thu 18 Dec 2025 03:01:04 +0000
Manifest this update: Thu 18 Dec 2025 03:01:04 +0000
Manifest next update: Fri 19 Dec 2025 03:01:04 +0000
Files and hashes: 1: 0zMZ8SOlpUUnZ-oANbPoFPAsoeo.roa (hash: zgBPWtd8z92Sglk9HpDyK2WxJ8evuKp1/GAGaMlRCOw=)
2: 1-MHL7FCFOo3d5SBfZqVAq6OGUKg.roa (hash: JKX+6uz7j+QIFz/PbhY8E7/mwj5YSnWWxlrzu1hhuDY=)
3: 1f-9tUF1QCZIsfJt2ipW4khRx9g.roa (hash: qvsbL3ItSjRr+HrTxGxdX6hRWDpLj1yz143EUSJxB+k=)
4: 25NziVTx-Lz9txTSQZBkSrAUGTw.roa (hash: 4eHXeIS/+/q1uLQaBtoURFO7E/Md64lid2PQOJ70S4g=)
5: 4Z2hCqyh6BmW90Ph3YJgbvH-8Kw.roa (hash: Ir4hBZQ+f+lKLqxyAW+VSZk1PLwye846E8VymHnnxpk=)
6: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
7: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
8: CfW3XQtgzqoTsNgygaqBk_IDaAg.roa (hash: wtkzLwYk8AqxMNlbCH9foq6LUUygaTWoJr2pbzB17hI=)
9: G-6qJAbYc1mXlsY2h-ViLS7Je-0.roa (hash: XwKTSRhNczLWX76Yb7IP0/HJfhDx29EPeE3hdNZ4K+s=)
10: JJR7t3SOaehud6UemiYdHhnAj6E.roa (hash: IYFZ649aZkPs/CpPLi0MvQ8g4ho4uA+35m4HpQxYyhI=)
11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
14: PWojxW9iXS1jgfgbFPdUQeVZND0.roa (hash: YToPlOG2G4JuPFJzGtMhxZmKt4Yh4oO1yAxhQTyQoC8=)
15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
16: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
17: VHARbjmRGA2iFnJKjKjZy-WzcPs.roa (hash: OjH/Rh5sSPUY3jwuvNkEft7qNA+738Oz4tbphGiFxzc=)
18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=)
19: Yo1yRImGU_G1MONfoe4nlQj4yM4.roa (hash: OjIAaD7BSbnZ62LZQPcicsjwlkflnbNeuXfNLm2u9yA=)
20: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: vOZ92UIkl/TJCKfgM1K9xmnAftV5bJm9YUwT3QB3HMg=)
22: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=)
23: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
24: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=)
25: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
26: tFKx2W0hVUngD8acE4McZx87sLc.roa (hash: lGDNoZz2KcU43imZSTSiOsd4WfNE56Crra/N3mYFU1E=)
27: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=)
28: uZfvttHeYCpTmwGtvthls2GR6Mk.roa (hash: +oUNgtgeFHW/Ao/Yv6Zmwz+f8VUM2x/qnI4Y2b/e5es=)
29: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=)
30: ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa (hash: 5jg17zFL+w2Qub3GdrheBJMuQFL1rKAkrWJtLe0JMeU=)
31: zLZPib2q4N-wxUBLghJm8S0LpmI.roa (hash: zwKUjOOpiqrym9HQMr4/mJ1TtSF5ArH6j4HJ3LWd0ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:67:68:b0:ef:98:61:2c:39:3e:ca:53:be:c5:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Dec 18 03:01:04 2025 GMT
Not After : Dec 19 03:01:04 2025 GMT
Subject: CN=8bda742d3dd31e831a9bc8f9e967455517bea540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:95:36:12:99:34:51:0e:8e:a5:f6:9e:18:
69:b8:a4:53:65:a5:9e:cb:05:db:24:c5:ee:fd:5b:
39:8d:9f:69:e3:f8:18:50:2f:fc:12:b7:8a:7f:99:
ae:62:c8:14:6e:89:16:69:dd:47:65:2d:e2:a1:00:
57:1c:f1:0e:21:d2:fe:d8:85:21:a8:70:81:bf:48:
33:f2:83:0c:25:ff:26:70:cb:0d:29:5b:a6:12:e4:
50:9e:1e:3a:4b:c9:f9:c1:2d:6f:cd:c0:f5:d1:ad:
24:0a:cb:3f:8d:90:11:a7:56:29:21:8d:93:9d:e0:
94:fe:ee:e3:b7:05:93:5a:4e:05:8b:05:c4:6a:97:
0a:a5:38:45:7e:15:10:aa:08:5b:b4:d8:74:4c:f2:
76:6a:0c:0a:ed:b6:59:58:e2:45:21:bb:4b:b2:27:
09:3b:a6:c8:78:96:ea:50:62:48:47:ee:58:96:15:
80:20:70:fe:c4:c1:0c:5c:d6:ed:76:60:f0:47:f4:
bd:b8:43:77:42:fc:61:34:f6:58:3a:b5:3e:ef:0e:
e7:e1:c2:52:a7:ce:71:68:9c:26:2b:0a:97:4d:c3:
fd:2b:43:38:ec:6a:8e:bd:e2:74:ec:fc:8c:fb:31:
ba:21:81:82:31:2e:8b:38:3d:b8:5e:14:96:8d:c8:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DA:74:2D:3D:D3:1E:83:1A:9B:C8:F9:E9:67:45:55:17:BE:A5:40
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:39:77:8b:eb:ac:15:fe:52:8d:39:99:05:ae:57:55:82:d7:
65:c1:3a:90:05:d8:f3:cb:10:8f:b1:d6:e7:ea:5b:4e:2d:b7:
05:19:23:5e:79:2e:46:25:87:05:0b:ac:43:56:3d:2e:e3:76:
f5:d1:ba:55:d6:6c:16:f1:8b:68:08:c4:f4:5e:42:52:05:5e:
2b:87:fb:4c:e8:bc:f5:13:eb:2e:18:8e:b1:a3:ff:05:57:cb:
72:a9:a1:e0:38:8e:33:91:bb:9e:6f:dd:91:ff:33:9f:d9:a2:
b7:c2:bc:f3:8e:ed:27:20:b7:d8:37:57:5b:19:8c:70:e9:91:
d6:f9:ec:a1:0d:2e:a8:02:f9:a5:8c:43:ac:f5:d4:93:f7:11:
5f:1a:9e:a0:cf:a9:dc:78:1e:49:5e:80:af:23:a0:ae:28:9a:
7f:49:58:ce:b7:6b:85:7b:db:4b:36:84:72:c8:be:e0:52:fe:
89:98:ab:4e:4d:b3:b3:2a:ea:d5:e5:bb:cd:8f:99:4c:f1:60:
f0:6e:45:b7:30:71:73:d1:43:b6:b5:c9:31:bc:f0:dd:82:7a:
45:ac:23:13:8b:a1:1f:ec:fc:67:70:e7:fb:5c:e5:d2:03:c3:
de:fe:17:65:23:b3:b8:37:4d:e9:d1:42:7b:4f:fa:bf:e9:1c:
0a:41:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:55:33 2025 by rpki-client