This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File: EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier: 6pfVn9Reqdzqn+WmTFhSfh0Zw9xP3h/UgGRNON6V4Q0=
Subject key identifier: 83:9D:1D:21:F3:D4:DA:A8:99:E0:58:02:05:25:C8:CC:E1:71:CB:A9
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial: 019AF12D622B4B3BF637D3987A8BD8C21CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 01:01:14 +0000
Manifest this update: Sat 06 Dec 2025 01:01:14 +0000
Manifest next update: Sun 07 Dec 2025 01:01:14 +0000
Files and hashes: 1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: NqQ9Io2Mwj+e1qgnJgB1S3zsFQyNKbcUL9Q/gQQxj6k=)
2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:62:2b:4b:3b:f6:37:d3:98:7a:8b:d8:c2:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Validity
Not Before: Dec 6 01:01:14 2025 GMT
Not After : Dec 7 01:01:14 2025 GMT
Subject: CN=839d1d21f3d4daa899e058020525c8cce171cba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:24:07:da:90:f4:49:78:2e:01:26:61:ac:
31:89:a5:a4:17:4e:cf:d3:6d:e9:6c:13:02:5d:e8:
a7:44:a9:7a:e6:8c:42:93:68:3e:05:e1:bf:9a:c0:
3a:6a:33:13:78:01:5b:e7:67:3c:dc:07:86:b9:8e:
43:99:08:03:87:ca:e4:e3:95:a9:7f:03:48:2d:da:
0a:21:5e:bb:44:07:44:e2:09:17:fc:62:ff:59:18:
85:79:41:2f:39:70:42:c2:de:4e:7a:eb:4b:4e:a7:
02:77:a0:d7:52:6e:c1:c3:05:bd:72:ef:ab:ea:31:
d1:6c:51:0d:f9:14:c3:e4:15:00:f7:f7:19:d1:8b:
e0:88:42:51:10:f3:9e:dd:88:5f:2e:a5:8d:f2:12:
9b:b6:da:85:d3:6d:5b:49:58:74:d4:df:87:ee:58:
52:98:a5:bd:ca:d0:a1:f9:9a:db:22:12:77:44:4e:
95:54:60:b6:74:76:33:33:68:e6:d8:40:48:12:7a:
07:c2:6a:a7:c2:78:26:3e:0f:35:3b:fc:9f:a5:02:
17:aa:47:1e:b4:92:df:74:c6:17:1f:db:ff:d4:4c:
f3:a4:53:c0:7f:25:6e:0c:4a:98:f0:f7:8b:13:00:
b0:2b:51:31:e8:56:68:ad:f1:bb:6f:9a:ba:9a:68:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:1D:21:F3:D4:DA:A8:99:E0:58:02:05:25:C8:CC:E1:71:CB:A9
X509v3 Authority Key Identifier:
keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:da:6e:32:b7:d1:ee:15:e7:4a:09:c8:cf:4d:06:7d:e8:
a6:7a:43:2e:4a:1f:ec:a9:3d:13:e4:69:7e:3e:37:10:01:73:
16:66:c8:2d:36:d5:e6:64:75:79:0d:a9:19:bf:f7:3f:14:3f:
59:a7:6f:22:54:9b:bc:03:fc:42:81:ab:33:88:b0:d3:65:f8:
1c:20:a7:fe:7f:c5:35:48:62:ab:83:61:27:9f:a6:15:08:27:
31:9f:cc:0c:9f:a3:06:52:88:9b:8b:cd:ae:2c:3e:d5:c9:5f:
9a:1d:1e:b9:9f:7b:ca:4e:6d:78:72:de:06:a3:ad:a6:43:9a:
f6:06:ad:1b:e6:9f:e8:64:c5:91:ab:26:ab:a5:17:11:63:b8:
9a:80:34:0f:4e:fc:dd:0b:39:91:c2:00:08:60:42:e9:dd:7e:
6d:d6:7a:94:0f:90:c1:50:62:21:df:9b:ff:26:3a:e5:c4:ba:
39:40:c7:c0:e0:20:78:99:f4:d2:0f:a4:a7:74:06:59:ad:f1:
10:58:a8:65:81:0f:f5:38:0f:26:85:36:63:9a:80:fc:be:7f:
54:ed:17:86:84:9c:bf:a4:68:4b:02:39:23:ad:74:70:95:79:
b5:90:d1:f6:da:e9:16:f4:fa:d9:74:a1:b5:3c:dc:41:9e:58:
06:0f:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:01 2025 by rpki-client