This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier: /nGnEm8HrtcAhTH80cXOqaDwOFx0g9JpNq24DurriS0=
Subject key identifier: 11:40:B0:4F:7A:8E:F1:A4:1E:7D:91:3B:D7:93:09:61:78:0C:97:4A
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial: 019AF38A10EA8F1E484FE422E0A634EC068A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number: 175D
Signing time: Sat 06 Dec 2025 12:01:42 +0000
Manifest this update: Sat 06 Dec 2025 12:01:42 +0000
Manifest next update: Sun 07 Dec 2025 12:01:42 +0000
Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: RKOZ4LVvggK7mruKI7pKgSXaSwpaGXHTKjlAMShvbfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:8a:10:ea:8f:1e:48:4f:e4:22:e0:a6:34:ec:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Validity
Not Before: Dec 6 12:01:42 2025 GMT
Not After : Dec 7 12:01:42 2025 GMT
Subject: CN=1140b04f7a8ef1a41e7d913bd7930961780c974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:1c:f0:ce:61:86:20:95:77:5a:83:73:f4:
06:73:52:dc:a9:d1:0a:6a:8f:da:44:90:23:b6:78:
9d:97:39:ac:3b:87:46:f2:30:01:9b:a0:2f:aa:71:
dd:21:34:24:f0:16:66:32:40:a1:4c:5f:0d:44:8a:
e1:ec:e4:d3:4b:c1:0c:9b:d1:aa:00:cb:d2:72:a1:
34:fd:fb:ac:0e:dc:bf:e5:02:cc:84:1f:9d:03:39:
ae:ff:15:32:47:c4:11:b6:08:f6:3a:62:b9:03:aa:
76:ac:bd:80:94:ef:0b:1d:89:10:0f:41:0e:e5:35:
1b:32:dd:84:c0:08:88:f9:8c:3f:c0:8c:10:f7:47:
40:b1:ef:8b:55:07:81:63:64:19:60:76:cc:b8:34:
ef:71:a2:69:b1:32:56:2b:4b:47:aa:db:06:7a:6a:
7b:4d:0b:58:1e:91:00:cc:21:79:8a:b6:14:1d:93:
c7:59:d7:fc:2a:21:81:d7:64:a1:85:39:fc:9a:e3:
57:5b:88:43:71:74:48:a5:e8:5f:a2:ec:b1:26:ca:
2a:d7:fd:9c:eb:a4:16:25:71:7d:d0:e5:6b:7e:7f:
f4:94:f9:0e:f6:25:bc:24:8a:71:1d:2e:27:07:b5:
dc:7a:de:4a:a5:77:8f:1a:2d:6c:76:b9:12:40:2c:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:B0:4F:7A:8E:F1:A4:1E:7D:91:3B:D7:93:09:61:78:0C:97:4A
X509v3 Authority Key Identifier:
keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:ea:1a:ca:12:16:09:1b:e9:fe:08:22:c7:71:51:26:12:
b9:4a:04:4f:56:df:90:e3:dc:cf:16:c9:0c:05:45:c4:59:7d:
ab:c6:2c:4d:e8:ce:43:2a:4d:f9:9e:01:94:ed:42:5a:39:20:
34:cd:03:6b:b1:d5:05:2d:44:5f:29:7a:8a:7f:61:9b:2c:71:
09:4a:c2:a5:8b:17:f5:27:0b:a2:bd:e0:6d:b5:2b:06:26:7c:
18:17:5d:6c:e1:cf:dc:7c:ed:4b:27:29:11:2c:9a:90:d8:e0:
c2:6e:ac:eb:8d:cf:0e:11:a2:36:43:f0:1c:66:bd:d6:a1:09:
a4:59:de:15:53:2f:56:6a:88:0a:b3:04:33:59:e0:6b:c8:aa:
0d:d8:5d:e1:60:62:76:91:d9:56:8d:31:4c:0b:9c:b0:ba:97:
f3:86:2e:3c:9d:2a:cc:2b:2c:af:ab:3a:a4:c1:b3:0f:2f:89:
72:10:a0:25:db:ec:92:99:39:11:6f:2a:0f:ab:bc:06:53:4e:
9e:15:ba:02:fd:35:75:66:ef:8d:26:ba:e6:c6:4a:95:a0:86:
0c:31:93:a0:8e:c0:a8:3d:0f:8d:28:9f:21:3e:1f:93:26:88:
33:68:b7:1f:f1:61:b0:07:9b:6e:47:f6:bb:2a:5d:eb:81:bc:
e5:c5:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:45:45 2025 by rpki-client