This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: Vk241H7EkdRX5Fdrz5yMarkQzsmO+ddFieX3bFOGoB8=
Subject key identifier: E3:DD:4E:33:75:8F:D2:57:32:16:1A:9C:26:C7:3D:C2:F4:1E:79:B1
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019AF578139AD3A57FB61185D6D82A4E0986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 09F8
Signing time: Sat 06 Dec 2025 21:01:18 +0000
Manifest this update: Sat 06 Dec 2025 21:01:18 +0000
Manifest next update: Sun 07 Dec 2025 21:01:18 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 3OF8gEX3FPyi51pWCgtOf37TQ9v7T4bGKmwbUzmYT5Y=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:78:13:9a:d3:a5:7f:b6:11:85:d6:d8:2a:4e:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Dec 6 21:01:18 2025 GMT
Not After : Dec 7 21:01:18 2025 GMT
Subject: CN=e3dd4e33758fd25732161a9c26c73dc2f41e79b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:1c:8d:23:4b:8a:2b:1b:a6:cb:3e:5f:20:
66:6d:aa:ea:d0:f4:85:0e:3d:7c:6e:16:ae:6f:b2:
eb:15:76:9e:e1:74:87:41:20:38:69:df:97:e6:44:
b8:96:49:ed:d9:a4:36:ea:2a:85:0d:37:7f:2d:1c:
08:7d:75:c1:06:3a:aa:f4:4e:db:50:38:80:bd:30:
e6:7c:3d:d4:33:b3:5c:d0:04:c6:3d:53:2c:01:3e:
fe:55:30:18:06:7a:a9:63:59:3a:2f:f5:10:87:89:
49:b9:d2:ca:b9:ac:07:cb:40:c2:d4:27:73:a9:b1:
fb:b1:93:5b:11:06:9a:99:97:10:6f:01:36:37:01:
11:15:9c:b8:5b:b7:c2:06:b6:9b:b0:4f:e0:08:3b:
e7:ea:78:f1:ed:ab:4c:f9:06:a7:c1:10:e5:59:e8:
f5:06:f1:66:d9:c3:3a:44:02:b5:63:18:bd:ee:29:
a4:2e:28:6f:0b:bb:23:3e:5d:79:21:c7:1a:a5:5b:
99:f6:f7:c8:04:79:03:b9:74:b5:ce:75:c1:6e:25:
f5:6f:40:5c:69:e5:08:32:16:1d:14:8e:27:bb:58:
8d:37:92:9c:69:0d:5d:ad:76:64:a1:64:bb:70:e0:
c2:47:c5:ae:84:d5:2a:f9:dd:13:b2:17:b7:15:1a:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:4E:33:75:8F:D2:57:32:16:1A:9C:26:C7:3D:C2:F4:1E:79:B1
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:04:32:3a:e9:5d:d2:a8:2c:ab:77:b5:7d:a9:6a:93:56:50:
61:6e:60:76:e5:4a:a9:db:fb:b5:64:dc:46:32:c3:cf:13:2c:
82:08:90:69:0a:11:ff:a9:bf:fb:99:7a:29:23:9d:d2:f5:38:
ad:d1:7d:6d:4f:0b:d0:98:bb:16:03:bd:c2:8e:34:a3:d8:eb:
bf:97:1f:7e:57:fe:cd:74:5b:a7:a3:3d:f2:cd:4b:8c:11:9f:
14:fc:6b:51:3b:32:25:3e:90:ad:8a:64:8d:64:6d:1f:3f:22:
aa:31:10:22:4e:51:c9:d3:fd:43:96:11:8d:60:fb:ba:5b:d2:
bd:cb:a8:ea:86:ba:4d:be:db:19:15:86:96:85:e1:e0:51:b5:
38:d6:70:a1:17:c9:a6:c9:c1:d7:91:43:dc:b0:b4:ba:3e:b0:
61:11:67:a6:b1:10:5a:25:62:ae:ac:44:8c:6c:1f:50:71:d7:
51:b3:0d:65:09:01:cd:09:b1:fd:f4:5a:12:a7:8d:ec:d7:7d:
33:cf:5f:84:2a:a8:a9:fc:a1:82:c8:5c:ad:3d:09:e0:b6:39:
34:b1:50:db:d1:be:26:4d:35:38:92:bf:58:af:90:25:43:a0:
19:0c:56:ca:7b:20:8a:5f:55:37:86:ee:4e:9d:a0:11:92:4c:
1e:a7:ab:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1eBOa06V/thGF1tgqTgmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjUxMjA2MjEwMTE4WhcNMjUxMjA3MjEwMTE4WjAzMTEwLwYDVQQD
EyhlM2RkNGUzMzc1OGZkMjU3MzIxNjFhOWMyNmM3M2RjMmY0MWU3OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypYcjSNLiisbpss+XyBmbarq0PSF
Dj18bhaub7LrFXae4XSHQSA4ad+X5kS4lknt2aQ26iqFDTd/LRwIfXXBBjqq9E7b
UDiAvTDmfD3UM7Nc0ATGPVMsAT7+VTAYBnqpY1k6L/UQh4lJudLKuawHy0DC1Cdz
qbH7sZNbEQaamZcQbwE2NwERFZy4W7fCBrabsE/gCDvn6njx7atM+QanwRDlWej1
BvFm2cM6RAK1Yxi97imkLihvC7sjPl15IccapVuZ9vfIBHkDuXS1znXBbiX1b0Bc
aeUIMhYdFI4nu1iNN5KcaQ1drXZkoWS7cODCR8WuhNUq+d0Tshe3FRrQ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPdTjN1j9JXMhYanCbHPcL0HnmxMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAQyOuld
0qgsq3e1falqk1ZQYW5gduVKqdv7tWTcRjLDzxMsggiQaQoR/6m/+5l6KSOd0vU4
rdF9bU8L0Ji7FgO9wo40o9jrv5cfflf+zXRbp6M98s1LjBGfFPxrUTsyJT6QrYpk
jWRtHz8iqjEQIk5RydP9Q5YRjWD7ulvSvcuo6oa6Tb7bGRWGloXh4FG1ONZwoRfJ
psnB15FD3LC0uj6wYRFnprEQWiVirqxEjGwfUHHXUbMNZQkBzQmx/fRaEqeN7Nd9
M89fhCqoqfyhgshcrT0J4LY5NLFQ29G+Jk01OJK/WK+QJUOgGQxWynsgil9VN4bu
Tp2gEZJMHqer2A==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:28:19 2025 by rpki-client