This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: ClhDxsA6DpGY0NOP4tESaI4311if3QDpYVp3wtHjnx4=
Subject key identifier: BB:64:74:0E:CC:6F:09:11:E4:AD:9C:BB:BC:1E:4A:4C:58:45:68:09
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 019AF31BA34AA13F2387892BA1F565F932F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 175E
Signing time: Sat 06 Dec 2025 10:01:06 +0000
Manifest this update: Sat 06 Dec 2025 10:01:06 +0000
Manifest next update: Sun 07 Dec 2025 10:01:06 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: izRerw/Zbmahtq7Nu3lo9kgMdZ4SP/BEzkLN/oVy+ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:a3:4a:a1:3f:23:87:89:2b:a1:f5:65:f9:32:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Dec 6 10:01:06 2025 GMT
Not After : Dec 7 10:01:06 2025 GMT
Subject: CN=bb64740ecc6f0911e4ad9cbbbc1e4a4c58456809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:ae:59:77:0f:48:b0:38:e6:ef:4a:60:d0:
5f:6a:9f:bf:be:e2:70:16:6d:4b:71:0d:20:39:93:
dc:8f:34:0d:e2:32:55:2d:22:3a:a2:82:a2:77:6b:
48:53:8e:41:79:16:13:64:cd:c0:8b:26:83:d2:e0:
1a:6e:62:0c:ff:94:3a:04:7f:97:0d:9a:c0:2d:a6:
38:d1:c4:05:f1:09:89:13:75:5a:39:53:16:c7:3d:
ba:37:8e:96:0b:13:72:44:e2:5b:58:9d:12:a4:ae:
ec:7c:af:c9:86:97:ca:dc:2d:0d:5d:4b:57:36:81:
0d:c3:7a:ed:c5:9c:ed:53:60:83:54:f2:e8:2e:ae:
83:19:9c:06:10:00:65:6c:16:22:f7:b1:e0:89:c5:
c0:c8:e6:c5:7f:be:23:06:93:12:c0:bf:3e:ec:15:
dd:99:f1:6a:d8:9c:79:2f:b8:b2:9f:d2:ef:e0:b0:
2a:58:b9:a3:92:10:1f:b0:d4:9a:d7:65:be:fb:b8:
3b:5b:f1:08:66:d8:93:8a:23:8e:14:2c:0c:55:1e:
6f:19:6c:ea:e5:3e:01:1c:24:0d:58:14:04:8d:ea:
38:6c:32:40:e9:9a:73:f6:0a:b9:11:2c:70:b6:bc:
40:ff:4a:45:af:15:fd:fb:e8:4e:d8:58:1e:f6:c1:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:74:0E:CC:6F:09:11:E4:AD:9C:BB:BC:1E:4A:4C:58:45:68:09
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ca:c7:db:83:9d:15:a0:c4:4b:28:c4:0d:c4:1e:fc:91:e3:
70:ec:26:05:40:a3:5f:0d:6e:6e:3e:5a:a9:c4:01:08:11:3c:
a2:f3:ef:64:ea:73:32:f7:7c:e8:2e:85:b4:5b:61:df:44:f4:
dd:0d:43:4b:21:30:4c:83:be:ae:2f:e1:df:a1:ca:c7:17:29:
2f:9e:5e:27:3e:a5:e1:0d:9d:d5:86:f0:8f:85:a9:7f:33:f8:
91:8a:b4:3c:9d:8a:f2:bd:72:cd:06:2a:ff:69:5b:20:40:b7:
c6:d6:24:d6:49:60:b0:a4:a7:4b:5d:6c:65:95:de:1e:53:e2:
07:71:2b:24:27:56:13:e1:ce:6f:cc:e7:94:08:59:d7:2f:54:
59:c7:f7:4c:94:e4:18:6a:a8:52:37:db:a1:58:fa:dd:9a:04:
9f:4a:db:6c:a9:32:05:a1:83:22:14:a8:f2:d2:f5:2f:f2:a2:
18:0c:a9:cd:ce:8a:4d:60:eb:c2:45:19:18:03:a9:d1:cc:5f:
8f:c9:ec:e2:cc:24:9b:21:69:47:63:e9:64:62:47:2d:a6:18:
60:43:35:a0:e9:c4:e9:77:12:b9:9c:aa:c1:74:b3:19:6b:a7:
ca:51:3e:24:52:0c:f9:d4:81:3f:58:08:ca:70:42:15:82:1c:
d5:f4:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:12:16 2025 by rpki-client