This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File: pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier: z6oc0k81rqd96ckvWC2A8gbkJWUB8xoH6WH7dDl6zQA=
Subject key identifier: EE:EF:4F:37:A4:C2:E9:2C:62:25:C7:B9:78:96:18:BD:FD:80:C4:C5
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 019B39EB386BA1EBF19EEBAA4D0C39510C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number: 0BCB
Signing time: Sat 20 Dec 2025 04:01:15 +0000
Manifest this update: Sat 20 Dec 2025 04:01:15 +0000
Manifest next update: Sun 21 Dec 2025 04:01:15 +0000
Files and hashes: 1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=)
2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=)
3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=)
4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: z9MPw+xfHKbagoVFryHPfM/xl7TnfgyrlDuRRGoCiVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:eb:38:6b:a1:eb:f1:9e:eb:aa:4d:0c:39:51:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Dec 20 04:01:15 2025 GMT
Not After : Dec 21 04:01:15 2025 GMT
Subject: CN=eeef4f37a4c2e92c6225c7b9789618bdfd80c4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:93:a2:3a:bd:87:3c:97:77:d0:20:f1:9f:
e1:31:3e:5a:52:4c:2d:9f:b6:b7:0e:aa:78:9a:19:
e4:8b:4a:2c:b4:ae:01:b4:b9:d9:f4:bd:0e:c2:14:
18:79:cc:74:fe:e0:c1:d9:74:8e:54:e9:d7:01:0d:
9a:d3:d7:86:7c:c6:66:e3:4b:6c:de:8a:fd:8f:c1:
ca:58:f1:e5:05:04:ac:ef:dc:d5:dd:60:57:f7:3d:
04:42:db:48:3d:95:c4:b9:31:53:fd:05:f2:8d:14:
df:30:e9:4c:0d:02:b3:9a:af:8a:f5:80:e4:05:c5:
e8:45:9b:2e:54:f8:6c:6a:df:c1:d0:8d:69:76:a0:
69:ab:66:a9:56:c3:37:ce:df:1c:c1:c7:60:19:c2:
89:9c:a0:50:63:04:c7:9e:a3:f6:53:eb:24:f5:2b:
d8:d4:0b:b9:60:44:a3:5f:90:b3:b0:b2:7a:dd:86:
ab:03:8c:f7:4b:c6:de:40:84:10:64:c2:63:39:c6:
df:a4:47:df:14:8e:7c:db:e2:c4:a9:a4:17:54:6b:
62:13:56:46:de:32:83:70:7d:49:97:b0:32:e0:b2:
b8:22:91:c7:84:54:1c:24:f5:e2:97:46:2b:5e:2f:
6d:42:4c:e4:b7:ec:8f:7c:85:47:1f:7f:fa:bd:d7:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:4F:37:A4:C2:E9:2C:62:25:C7:B9:78:96:18:BD:FD:80:C4:C5
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:09:1b:3b:07:57:69:d4:a9:b0:2c:47:a5:cb:5a:33:f5:25:
b2:1c:3e:74:77:e7:c2:96:a0:a6:49:e2:a6:77:00:40:e4:20:
49:ae:22:ec:f4:71:8c:bd:b1:13:ce:a2:8c:48:05:37:af:51:
95:67:b6:fc:62:29:b0:1d:b7:ce:cd:e5:c3:03:c5:06:f9:2b:
8d:ad:d6:2a:29:fa:a6:09:da:3a:ed:42:1b:c0:e9:ee:ff:7d:
bd:8f:9a:40:57:b9:c2:8d:5c:9a:29:1f:9b:b1:85:08:e2:34:
69:04:09:01:7c:c8:50:51:e6:32:43:21:90:b4:a0:69:3f:65:
df:2c:a0:a1:6f:86:57:90:1d:78:fc:60:74:3c:52:e3:62:f8:
0d:38:46:0d:0f:36:85:a3:30:8e:fc:d6:bb:45:94:c7:07:06:
84:d2:5a:fa:26:ba:8f:29:42:8b:1e:08:61:72:bb:ab:be:e4:
bd:08:80:af:b8:23:df:4f:03:7c:c9:93:3b:5f:1e:df:4b:73:
ed:23:5e:73:28:d2:22:1a:a2:7f:2b:46:ef:ad:0e:e8:cc:d0:
82:59:fd:91:c2:db:d1:98:35:ed:0b:15:e0:d5:57:b6:07:c2:
4d:01:fb:df:ee:5c:ad:bc:74:0d:61:a7:90:43:81:ba:a8:73:
4a:8e:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:34 2025 by rpki-client