This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: Of2Q7mARtCJ6AW/dO/XCEkKWhKwVBR6q0Q2rvhxijPM=
Subject key identifier: 63:E2:B7:FB:C8:27:DB:2E:B7:75:A9:0B:B5:F2:C8:EB:20:81:0A:3C
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019B44A5A1855A34E1CBA0C61AF407000512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 1073
Signing time: Mon 22 Dec 2025 06:01:03 +0000
Manifest this update: Mon 22 Dec 2025 06:01:03 +0000
Manifest next update: Tue 23 Dec 2025 06:01:03 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: DRHMZ8xaevr/o+mkjkyHcp59cobeoLQTcglol4uraXw=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:a5:a1:85:5a:34:e1:cb:a0:c6:1a:f4:07:00:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Dec 22 06:01:03 2025 GMT
Not After : Dec 23 06:01:03 2025 GMT
Subject: CN=63e2b7fbc827db2eb775a90bb5f2c8eb20810a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:dd:be:95:9b:49:b8:7c:ad:d7:25:8a:d9:
02:30:c4:84:7f:87:2e:a4:bd:20:14:ff:dd:06:05:
e7:ac:7c:85:d4:85:f0:5e:bf:db:fa:74:90:40:f9:
86:47:78:7d:3b:0f:52:df:a7:54:33:26:0e:86:17:
0c:b5:9b:02:74:e1:43:08:03:c7:76:fe:80:e9:f5:
3b:c6:a8:72:62:12:be:81:aa:53:a5:09:b0:3b:4b:
46:e7:eb:cb:cf:f4:78:f2:7f:eb:06:d9:34:d2:64:
97:de:6b:7e:7a:33:7b:2c:0e:a5:8a:5d:8e:03:e2:
ef:82:3c:32:3d:b0:99:a3:e5:e8:03:08:09:31:0d:
e1:81:68:72:6b:c8:bc:ad:50:ad:5c:51:f2:fd:30:
38:fd:fa:8b:f4:d0:58:98:05:ae:52:fd:ca:82:8d:
0b:63:7e:50:43:d0:e1:ec:31:d5:6d:b9:83:a3:4e:
8e:12:49:2e:41:ab:e2:e9:d9:8d:1c:64:fe:2a:6f:
a7:6c:b2:5e:ba:15:00:00:2a:47:31:53:0f:64:f9:
5d:e5:d7:f8:7e:27:02:03:3f:13:9e:78:78:31:12:
af:d4:19:ca:d1:80:9b:b1:45:77:f7:3b:b1:8b:c8:
63:18:ef:e5:88:b8:9f:da:14:2e:4b:a5:f5:17:23:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E2:B7:FB:C8:27:DB:2E:B7:75:A9:0B:B5:F2:C8:EB:20:81:0A:3C
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:d1:35:e9:53:46:d4:0a:2b:70:33:4b:ed:33:de:7e:6c:
be:33:18:eb:f8:c6:44:a4:72:97:a8:fd:12:9e:f2:f6:27:21:
07:8a:c4:fe:e7:63:e9:dd:2c:33:02:f5:e8:32:a9:f8:60:9d:
06:17:69:91:20:6a:71:d7:bc:df:22:72:c3:72:a4:2b:02:af:
5d:6b:d2:5e:72:e4:d1:29:a0:d3:76:f5:55:8c:74:f8:a9:4a:
67:c2:fa:2f:d7:e8:c6:1e:1f:a3:bf:94:ff:64:2e:85:ac:9f:
8b:97:c7:c5:a8:aa:33:8f:d5:dd:6a:40:4e:df:06:48:fa:0e:
4c:b0:1f:a9:80:63:da:96:89:dc:6a:c5:42:31:e9:48:14:ca:
90:97:a6:f2:8d:4e:a8:a7:d9:06:2b:4c:9d:20:98:c4:8b:83:
5a:28:c8:72:23:3d:45:ff:78:66:50:b1:71:51:1a:50:e2:98:
2c:bc:49:99:89:8d:7a:7f:48:6f:e8:6d:66:ac:82:9a:a4:a6:
38:d6:28:a9:e6:7b:9f:97:b7:ad:c0:2d:54:88:1a:14:b5:9f:
c3:d2:b8:6f:48:7a:d7:9e:a3:8d:cc:98:ac:c9:82:6f:67:70:
3e:d4:96:f5:b0:08:b3:0a:be:ef:6a:81:1a:af:0b:5e:e5:23:
98:95:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:58:18 2025 by rpki-client