This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: P+ywJKwNbbqvx8C3C3dBnHB+l+MhhtueH5g8YSxWY1Q=
Subject key identifier: A6:BF:62:26:56:22:61:AF:F6:E0:C8:17:3C:BE:D8:80:EC:F3:49:5C
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019B2B543CC809ECAAB1F5C974C6995B95AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 1780
Signing time: Wed 17 Dec 2025 08:01:39 +0000
Manifest this update: Wed 17 Dec 2025 08:01:39 +0000
Manifest next update: Thu 18 Dec 2025 08:01:39 +0000
Files and hashes: 1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: GtZL0uxIDIuUdyZW9xpYw4xncbfwluxyKpqojH4NzhU=)
3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:54:3c:c8:09:ec:aa:b1:f5:c9:74:c6:99:5b:95:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Dec 17 08:01:39 2025 GMT
Not After : Dec 18 08:01:39 2025 GMT
Subject: CN=a6bf6226562261aff6e0c8173cbed880ecf3495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:d0:4c:38:d8:dc:24:07:74:fc:64:e1:78:
81:15:ee:33:d7:c9:e1:2b:57:e8:12:2d:a7:01:8f:
01:c4:bb:e5:57:0b:56:79:51:fb:45:70:3b:1f:2c:
1c:b7:43:c8:8b:dc:6f:1c:94:f2:55:d6:04:55:86:
d5:e8:8b:40:65:ce:ff:d2:8b:34:65:5b:90:3c:a2:
a1:92:5b:14:0b:f9:05:f6:ca:54:b5:ef:3a:fe:2d:
51:ec:eb:f5:bf:e4:ea:9b:43:bd:0a:f0:bc:7e:c9:
55:b4:46:e4:c1:56:1f:16:80:84:74:88:72:11:07:
6d:5d:d7:73:5f:6d:5a:b5:52:b5:d7:36:ea:fc:22:
e7:8c:5a:8e:a9:03:7f:13:a6:42:ab:a3:3b:7c:cd:
64:12:15:6f:01:ef:ce:96:fe:a3:5f:c4:36:63:40:
a0:17:17:fb:2d:72:a1:79:05:6e:da:80:cb:a6:45:
86:9c:8c:fe:3e:b1:a3:ce:a7:4f:e9:0e:8d:b7:87:
43:ba:42:b2:27:1e:2a:b0:01:3e:b9:84:de:56:90:
78:fe:11:58:7b:0c:d2:62:ba:35:1d:ce:76:1f:9b:
aa:61:fd:a9:4f:15:f0:ed:31:04:02:18:3d:51:11:
82:e7:39:7b:09:32:4d:cb:91:15:a7:4c:c1:de:36:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:62:26:56:22:61:AF:F6:E0:C8:17:3C:BE:D8:80:EC:F3:49:5C
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d0:39:7c:fc:81:f0:dd:07:32:81:4a:cc:dd:84:8a:9f:f9:
60:30:ad:f7:c5:12:04:17:2a:09:a9:b9:86:25:b4:89:8d:bb:
a5:8f:8d:c7:8a:7a:aa:d0:c7:6a:a7:a7:17:94:d6:3c:b7:62:
b3:64:4b:63:6c:4d:e4:b6:87:21:db:a7:fb:32:16:82:00:e0:
d9:ec:1e:6b:61:cd:38:72:53:5d:f7:da:44:44:ba:a5:4a:84:
de:83:7c:61:13:4e:ab:cc:42:84:fd:ac:ff:a2:9e:72:29:c4:
6f:c1:a0:47:1b:a9:34:ad:1d:f7:e3:88:89:d6:50:92:fc:58:
f6:99:5b:81:5c:57:05:fd:7b:b0:74:4a:43:6e:9c:17:7a:d8:
25:7e:71:d3:11:4e:45:7f:e9:58:e8:a8:3f:f2:12:a5:98:3d:
38:a5:21:a6:19:6d:d6:a3:9b:77:de:fd:bf:c5:9a:b9:da:ff:
39:50:b8:8d:d5:08:78:96:bf:db:57:dd:18:a5:80:9b:09:e6:
ad:b9:6b:4f:db:3e:a8:a6:ca:9b:ba:48:f8:d4:1c:f8:be:4b:
9a:99:89:de:1f:b9:55:82:35:70:16:55:23:27:7d:d1:72:69:
b1:f3:eb:a0:14:d6:18:52:20:3e:cf:1a:08:3f:2e:c3:5a:e9:
1f:df:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:07:28 2025 by rpki-client