This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: 031FDS9mIg4Yc8cDNMk/O4rZFhs162Y+/Ix/eL2jkSo=
Subject key identifier: 80:CE:3D:A8:BA:3E:B6:70:BA:49:5E:D1:EA:06:32:E4:DF:5E:E4:08
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019B6DA1618C13D6D97A9386A04C767B779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 17A5
Signing time: Tue 30 Dec 2025 05:00:51 +0000
Manifest this update: Tue 30 Dec 2025 05:00:51 +0000
Manifest next update: Wed 31 Dec 2025 05:00:51 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: N+94xrNFf98DkBumeg2BTcg9DQH4HebFMgih52XqCoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:a1:61:8c:13:d6:d9:7a:93:86:a0:4c:76:7b:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Dec 30 05:00:51 2025 GMT
Not After : Dec 31 05:00:51 2025 GMT
Subject: CN=80ce3da8ba3eb670ba495ed1ea0632e4df5ee408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:2b:e4:42:02:3a:0b:c6:09:7e:5b:5f:d0:
77:1c:53:f5:42:23:3a:48:9c:87:9a:fd:6c:3f:60:
42:f7:59:47:fc:b0:89:fd:5e:34:77:a8:1a:5c:82:
c5:5c:34:ac:a0:4d:00:21:a4:21:12:99:86:3e:c6:
54:73:4f:54:e6:f9:c6:d9:b3:1f:96:c8:fa:18:b3:
1c:50:ba:0f:dd:8e:89:42:46:97:e7:70:e9:70:8b:
9a:50:f1:2e:96:d1:f1:59:a0:c6:e8:52:f1:44:6a:
ec:59:30:fc:91:d4:de:3e:ab:69:be:af:2f:bb:bb:
7a:78:e8:d5:f6:21:a7:b7:60:39:6f:b5:dc:81:79:
94:b0:55:a6:18:6a:0c:ae:f0:7e:f8:f9:65:9b:87:
c3:ab:69:2e:c0:4f:9d:81:11:8b:1d:a7:10:f9:35:
25:18:cc:34:92:96:2a:60:aa:99:e9:23:dc:57:88:
dc:a4:e7:50:91:19:e9:83:02:63:99:8c:11:73:f8:
79:46:fd:27:13:be:59:f6:b4:65:9a:16:f3:0c:a5:
e1:8e:5a:37:a6:67:94:13:86:f2:e4:4b:9d:ec:57:
6c:ba:1b:14:fc:b5:9a:ea:eb:f5:b2:bf:99:29:85:
f8:c8:5a:0c:5b:17:bc:cd:41:44:7c:c0:11:6b:c6:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:3D:A8:BA:3E:B6:70:BA:49:5E:D1:EA:06:32:E4:DF:5E:E4:08
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:a9:9e:3e:85:46:73:f3:14:cb:f5:05:43:91:81:b0:c9:
43:6e:45:e1:ea:1a:9b:8a:70:b2:0c:69:f6:b1:65:64:6d:57:
fa:21:7f:26:d5:64:5f:01:63:84:63:1d:da:f1:c4:90:ff:f3:
4f:fc:54:d2:a2:d1:bb:b3:8d:9f:3c:a9:ab:ed:1e:23:09:6c:
ab:9d:f1:92:8f:3d:39:c2:f7:03:2e:94:f1:ec:f9:99:01:64:
1f:28:cf:50:54:ed:3e:44:4a:d8:28:b5:8c:99:c4:63:11:60:
40:f9:08:39:6c:14:54:ac:da:fc:2d:1d:a9:00:81:ee:6a:50:
87:3b:38:7f:1a:5e:75:37:1b:a2:00:9c:a9:e3:3c:6b:2b:50:
4c:f3:f5:25:f7:c1:94:7d:e9:10:4c:21:c6:92:bb:6b:c7:74:
f9:2c:c4:2a:f2:e9:35:0b:cf:95:a4:27:0a:73:c9:b9:12:b8:
7a:b0:da:7a:f6:b9:52:3a:89:dc:49:fd:ea:90:d4:1a:93:60:
d4:ac:04:09:44:79:73:1b:d0:09:33:3c:66:ff:ca:93:e3:7c:
03:f2:a6:a7:23:ae:5b:c6:18:26:53:fa:28:cf:e9:ec:7f:be:
bf:6f:65:54:fe:1d:17:31:25:ab:b2:dd:eb:8e:cd:83:28:9d:
e6:2b:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:14:00 2025 by rpki-client