This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 8FpjukKuzrFj3cGSzukkbKnKBMUKQDOVWY3+alDIA3E=
Subject key identifier: 31:D9:62:63:D2:C6:B9:76:08:16:9A:79:B0:97:52:38:89:A4:8E:6E
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019B3D90B9BBC80F48EE9F25C0E9AA0B6988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 05A3
Signing time: Sat 20 Dec 2025 21:00:53 +0000
Manifest this update: Sat 20 Dec 2025 21:00:53 +0000
Manifest next update: Sun 21 Dec 2025 21:00:53 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: daRdcd9UiFYk2kVD9zfFTffunxJZYSafp2UO1xXyeMQ=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:90:b9:bb:c8:0f:48:ee:9f:25:c0:e9:aa:0b:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Dec 20 21:00:53 2025 GMT
Not After : Dec 21 21:00:53 2025 GMT
Subject: CN=31d96263d2c6b97608169a79b097523889a48e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:9a:b0:7d:49:15:bf:71:4f:8e:69:03:62:
bc:5b:70:ac:ed:0d:b8:17:af:97:69:77:a4:dc:e0:
27:c5:f1:e5:02:a8:41:10:9b:2e:98:9d:7e:cd:3e:
a4:5d:73:bb:a8:c1:cd:93:e4:fa:f2:95:f6:00:c5:
7d:8a:4b:2f:48:ad:9d:c3:24:5f:c8:ff:35:10:40:
d8:b8:8e:73:86:4f:e7:21:c9:3d:da:91:61:35:1f:
b7:6b:a4:63:e4:a8:52:e9:b1:20:d2:5d:3d:1c:84:
8f:78:dd:b1:1f:33:5a:20:53:2c:e4:e0:ce:d1:cf:
9f:15:27:01:81:dc:08:37:01:5b:ba:fc:0e:13:fa:
df:43:4c:43:c2:38:03:0e:77:3d:9f:36:ec:85:5d:
dc:b8:c9:6e:75:5d:a6:c1:cc:6b:05:b5:25:03:af:
50:d3:7a:20:cd:2f:a4:b6:b4:44:cb:d1:b1:83:8a:
60:fc:89:42:c3:df:2c:00:74:f3:a5:16:46:64:0c:
17:a4:e7:f2:a5:04:65:00:51:25:29:73:fa:49:ff:
19:ea:7e:2f:d6:c8:9b:4a:41:47:27:ca:2e:62:44:
20:64:a2:41:d5:bd:12:06:f4:19:c8:ef:38:98:3a:
b3:9d:3f:3e:11:75:03:9a:18:29:47:0e:8e:12:a9:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:62:63:D2:C6:B9:76:08:16:9A:79:B0:97:52:38:89:A4:8E:6E
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2e:c5:ef:4e:00:bb:7e:fe:ac:12:66:08:f6:c3:4c:9b:c3:
46:a6:b1:31:5c:55:85:41:e6:2e:64:6f:a3:4c:f3:ca:87:4f:
9d:63:a4:f1:e4:cb:b4:d2:84:bd:ae:78:a2:6f:2d:ac:56:e7:
40:7e:00:09:80:58:51:df:fe:a8:94:96:18:35:3b:0e:1c:50:
3f:67:cf:e7:94:f0:fc:66:64:b7:22:95:4b:e3:36:c0:15:31:
6d:a1:7e:a1:69:20:1e:6e:a9:58:67:41:17:64:06:95:c1:f8:
51:90:3a:57:7a:ec:d9:dc:7e:2a:31:14:c4:d3:2a:d3:09:ee:
44:ad:1d:64:98:00:32:11:0c:d4:4e:d3:2c:4c:fe:e4:5a:99:
5b:b3:0c:9a:e6:e2:ec:ac:ea:9e:c3:c6:18:13:65:18:99:9b:
65:a3:1a:ab:af:62:d2:e5:51:b9:3f:6b:84:f0:0e:f1:2f:c0:
7d:17:38:e4:69:a0:7d:57:8c:35:5c:d1:75:bb:a9:c6:80:39:
2b:b6:e8:c1:14:16:7e:a9:82:a0:08:4e:49:a1:63:cc:fe:e8:
ce:f1:43:2e:38:82:e2:9d:a8:e9:31:d7:ba:8c:ce:f7:82:4a:
1a:92:c8:3e:14:48:b4:31:6a:2e:4f:fe:47:b7:e1:1e:21:27:
e9:93:bf:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9kLm7yA9I7p8lwOmqC2mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx
MTg3ODYwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD
EygzMWQ5NjI2M2QyYzZiOTc2MDgxNjlhNzliMDk3NTIzODg5YTQ4ZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqasH1JFb9xT45pA2K8W3Cs7Q24
F6+XaXek3OAnxfHlAqhBEJsumJ1+zT6kXXO7qMHNk+T68pX2AMV9iksvSK2dwyRf
yP81EEDYuI5zhk/nIck92pFhNR+3a6Rj5KhS6bEg0l09HISPeN2xHzNaIFMs5ODO
0c+fFScBgdwINwFbuvwOE/rfQ0xDwjgDDnc9nzbshV3cuMludV2mwcxrBbUlA69Q
03ogzS+ktrREy9Gxg4pg/IlCw98sAHTzpRZGZAwXpOfypQRlAFElKXP6Sf8Z6n4v
1sibSkFHJ8ouYkQgZKJB1b0SBvQZyO84mDqznT8+EXUDmhgpRw6OEqmXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHZYmPSxrl2CBaaebCXUjiJpI5uMB8GA1UdIwQY
MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt
MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl
LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri7F704A
u37+rBJmCPbDTJvDRqaxMVxVhUHmLmRvo0zzyodPnWOk8eTLtNKEva54om8trFbn
QH4ACYBYUd/+qJSWGDU7DhxQP2fP55Tw/GZktyKVS+M2wBUxbaF+oWkgHm6pWGdB
F2QGlcH4UZA6V3rs2dx+KjEUxNMq0wnuRK0dZJgAMhEM1E7TLEz+5FqZW7MMmubi
7KzqnsPGGBNlGJmbZaMaq69i0uVRuT9rhPAO8S/AfRc45GmgfVeMNVzRdbupxoA5
K7bowRQWfqmCoAhOSaFjzP7ozvFDLjiC4p2o6THXuozO94JKGpLIPhRItDFqLk/+
R7fhHiEn6ZO/9w==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:02:36 2025 by rpki-client