This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: cQfe87kSwiLu+QHup3JtMz3fAMhuIKvklFVPXoZdnr4=
Subject key identifier: 73:8D:B4:36:2A:95:46:EE:5A:58:A2:89:F1:C0:16:9E:08:6C:63:71
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019B62422EE17D9790FC8FC73311DCE276DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0AAE
Signing time: Sun 28 Dec 2025 00:01:03 +0000
Manifest this update: Sun 28 Dec 2025 00:01:03 +0000
Manifest next update: Mon 29 Dec 2025 00:01:03 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 5UlVlrThVVimFbJ9FZ8G402OHtTma5pfogikL9kh6t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:62:42:2e:e1:7d:97:90:fc:8f:c7:33:11:dc:e2:76:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Dec 28 00:01:03 2025 GMT
Not After : Dec 29 00:01:03 2025 GMT
Subject: CN=738db4362a9546ee5a58a289f1c0169e086c6371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:2c:f9:85:f3:e1:46:91:7d:20:33:cf:4d:
84:4c:a1:21:a5:17:d3:09:86:83:12:12:79:ec:41:
b8:d4:d1:58:4f:51:45:f0:66:04:7e:59:83:41:86:
41:21:ce:1f:f6:13:e5:fe:ea:e4:3d:a5:10:4e:be:
85:99:13:10:94:cb:57:fe:68:c2:01:cd:de:c0:18:
76:7d:96:47:74:a8:ec:28:ba:8e:02:e1:05:14:d0:
38:d0:83:a5:aa:b1:ea:4e:21:16:c5:89:71:19:66:
cf:21:8c:d7:6e:fc:f0:64:dc:a4:00:7d:71:52:8c:
05:6c:0a:02:5a:43:88:f5:0c:d2:4f:e8:9a:db:e7:
67:c9:39:51:92:61:42:41:f9:04:d8:11:ea:bb:dd:
a4:2f:96:75:c5:55:ad:cc:7f:2f:3c:61:5d:13:33:
b6:c0:e3:6c:a8:49:49:80:4b:19:83:69:d0:40:e2:
be:b9:9d:ea:d3:31:41:2c:25:c1:70:f0:f3:ec:f2:
a1:c7:f2:38:25:b4:40:02:d9:4a:13:9d:8a:b5:0f:
ba:39:08:a6:50:d9:eb:d0:99:b9:61:89:ce:4a:4d:
24:38:63:22:5e:97:3d:d9:71:ee:fa:1e:3b:2f:18:
c3:ee:3d:f0:18:4c:5b:51:72:b8:c2:7a:ee:cf:58:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:B4:36:2A:95:46:EE:5A:58:A2:89:F1:C0:16:9E:08:6C:63:71
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0b:b1:1f:79:35:42:3f:7a:23:f2:61:1d:3d:d7:13:bc:20:
46:d0:ee:55:2a:47:8b:78:c6:a0:96:7f:35:82:6c:60:6e:92:
75:84:9f:c9:7c:56:3e:04:f3:bc:9b:78:fa:be:9b:43:13:7e:
f2:16:2e:c7:91:91:a7:05:a8:68:6f:2e:1b:a4:d3:be:20:9d:
01:9e:97:2b:34:8c:2b:f7:ad:15:5e:16:a3:10:25:cb:10:46:
c8:27:83:18:48:04:37:3f:ad:11:3b:97:4f:c0:ef:fd:36:83:
a6:04:f2:e3:19:5f:26:46:e6:69:92:45:19:55:54:e8:b1:50:
18:6e:8a:83:fa:78:68:c8:12:40:43:b0:a0:6c:ab:bb:b3:2b:
d2:4c:db:3d:4e:16:3d:a7:59:64:1a:5e:2d:ff:21:9f:39:c2:
e0:f7:dd:83:61:b8:33:18:67:b2:df:bd:2c:28:75:48:e6:76:
44:cf:d2:75:64:21:a1:99:a1:0a:9f:ce:ce:30:f9:d4:5a:b7:
71:79:4b:1c:9a:17:28:6d:bf:34:f2:aa:bd:f7:3a:1e:e5:ec:
bf:a7:68:5e:69:48:37:fe:ad:b0:2b:2e:50:d1:ee:a7:c3:63:
63:eb:ca:9d:97:5f:53:28:73:33:68:6b:99:5d:d8:4a:98:7a:
70:37:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 07:31:28 2025 by rpki-client