This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: Cz6KGMeWO24P+w5/UDj2h4S9vaiTKxD9hVLhIPR4obU=
Subject key identifier: 40:F0:2B:39:E6:AC:57:81:03:87:83:27:95:1C:1C:D3:86:04:B4:EC
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019B3B6B0E1860D2198F886C851A6A38F6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 03DB
Signing time: Sat 20 Dec 2025 11:00:30 +0000
Manifest this update: Sat 20 Dec 2025 11:00:30 +0000
Manifest next update: Sun 21 Dec 2025 11:00:30 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: WTVVLz5L7bCLGN/6SeCF/dDD2QKD3yoMSSAxVh+WvpI=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:0e:18:60:d2:19:8f:88:6c:85:1a:6a:38:f6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Dec 20 11:00:30 2025 GMT
Not After : Dec 21 11:00:30 2025 GMT
Subject: CN=40f02b39e6ac578103878327951c1cd38604b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:ba:86:db:77:5f:6b:b4:b2:32:61:f2:96:
31:cb:9b:77:0f:23:15:79:38:8c:51:9a:a6:35:e6:
98:a6:ff:e5:21:0a:1e:aa:94:31:b4:64:2f:68:b4:
d5:ce:aa:4c:58:49:34:8b:67:6e:73:ec:42:22:71:
b4:22:ef:f8:0b:f1:d6:51:dd:36:84:c4:31:68:c5:
de:a7:1d:10:0a:5f:92:9f:3e:4d:de:a1:1c:3f:6f:
a9:c6:8c:e6:c5:4d:ae:a8:60:49:4e:13:d7:2a:81:
54:87:fd:6f:d0:d0:39:93:51:11:01:7a:ec:69:f5:
42:3f:2c:5e:d6:5d:36:85:70:d3:56:48:7a:56:e8:
5a:b9:f0:13:c9:f4:79:ac:f8:62:1c:96:48:7f:19:
21:50:1b:64:f5:2e:27:77:13:d5:90:f7:a8:27:55:
58:80:9c:30:70:03:2e:d8:a4:89:29:c9:01:7c:9d:
1e:56:d0:4b:04:a3:09:ab:ad:3d:ae:99:18:4f:82:
5a:aa:7e:60:49:04:bb:cb:0d:92:f0:5e:e7:bb:bb:
9b:47:f7:9f:ab:1c:a1:8c:d8:85:31:48:61:25:23:
3e:c4:ef:df:e2:26:ce:bd:8d:d5:f5:80:63:a7:c6:
e0:ed:ac:b8:a3:17:47:de:09:28:d1:71:57:b2:f9:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:2B:39:E6:AC:57:81:03:87:83:27:95:1C:1C:D3:86:04:B4:EC
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:74:b8:ca:01:5a:20:5e:4e:d8:c4:53:da:a2:2e:57:7d:
2b:d9:c6:28:67:56:5f:2d:c7:97:7d:e4:ac:46:b0:63:fc:0e:
0d:1a:c7:b5:05:2b:6e:98:e0:63:5b:98:f6:e6:bd:f7:af:16:
40:86:c9:e4:16:d5:05:54:1b:0e:f5:f4:df:69:33:9e:f3:2b:
70:30:b3:98:83:76:6c:0e:ae:50:a9:0b:06:20:0a:d1:ef:be:
9d:8e:b4:32:45:81:d1:05:00:95:26:c4:ff:6a:35:cb:e8:6b:
e9:fc:df:ee:8b:ae:54:6e:b8:8a:05:b3:0a:37:6c:0d:92:41:
a4:98:da:6e:01:b6:b3:11:81:63:63:65:60:8e:27:d7:05:c1:
1e:fb:4e:36:a5:b6:c0:44:68:84:88:9a:ec:73:c2:1d:c5:ba:
b1:24:ad:64:bc:bd:f1:c0:12:dc:96:5d:7a:3b:ad:1e:9f:1c:
a2:93:2b:16:2c:36:02:d0:a6:4a:37:75:fc:06:d6:34:f9:40:
5d:51:15:13:c7:49:20:a7:74:a2:72:7c:b9:7e:e5:42:74:52:
fa:55:05:3b:d2:91:f8:3e:ca:e3:61:f4:f1:46:ef:15:ee:bc:
a6:b9:e2:4d:3c:f1:6a:51:f9:5b:fd:c0:dc:68:57:b3:e1:92:
46:ff:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:23:48 2025 by rpki-client