This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: Uuw1cdd178C17h4FO+ptoifGWY5y3hIlsEv1Tzs9fwQ=
Subject key identifier: A9:CC:D0:8A:8F:D9:B5:01:71:DC:1A:09:5D:D0:D2:38:40:23:7A:0B
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019AF3C07D382CFE801C97FF3C1BDB6D92E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 1781
Signing time: Sat 06 Dec 2025 13:01:09 +0000
Manifest this update: Sat 06 Dec 2025 13:01:09 +0000
Manifest next update: Sun 07 Dec 2025 13:01:09 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: FdEJO8IhK4IEYs98fZOmR44JF7Q5iSsWL49MMy0K6VY=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: RtFkcQWnyl0eaibrPpjcyJQVmQ8.roa (hash: YgjUDnpDx+gs6FXBtdlBFjgKFgPz6ZlzO+NWFvR2njc=)
4: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
5: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:7d:38:2c:fe:80:1c:97:ff:3c:1b:db:6d:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Dec 6 13:01:09 2025 GMT
Not After : Dec 7 13:01:09 2025 GMT
Subject: CN=a9ccd08a8fd9b50171dc1a095dd0d23840237a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:71:36:c5:25:74:7c:ff:d9:95:7d:7c:b1:
10:33:01:1e:b9:70:2f:f6:c2:79:cc:78:8c:95:ff:
15:96:1e:3d:a9:07:5e:9b:81:72:e2:96:a7:ff:87:
31:13:90:73:31:2a:d2:93:c4:c7:cb:08:65:cb:08:
3b:9e:83:b7:1d:ef:71:7d:c3:a5:56:be:f8:09:be:
3f:33:d6:3b:14:ca:18:4c:35:e3:09:40:0b:2e:c6:
4f:fc:ab:d4:b1:e8:8b:00:ea:b1:b3:9a:15:ab:5f:
75:e1:f1:ed:d1:2f:d1:06:c1:72:fe:40:69:61:51:
3b:55:d2:60:f5:b9:b0:1b:4e:89:4e:3b:4f:1b:39:
21:af:f6:2a:ce:e4:71:0e:61:00:4c:53:28:6a:5d:
c9:f4:d5:64:11:36:6f:d9:ac:86:dc:05:8a:51:1a:
b0:dc:7c:dd:fe:ab:fa:e7:a6:12:f0:d8:52:d8:71:
8a:f7:0d:67:64:89:cf:10:ac:cf:4a:26:2a:d7:20:
8c:3b:30:0a:65:34:47:90:93:fd:c6:1e:7a:6a:27:
23:d0:4e:b0:4c:7b:f4:cd:54:a2:1e:2a:20:df:95:
46:2c:02:8a:65:77:03:f3:cf:fa:02:f1:59:f6:df:
f1:24:08:bf:3f:00:77:80:1c:fc:94:7d:36:bf:d7:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CC:D0:8A:8F:D9:B5:01:71:DC:1A:09:5D:D0:D2:38:40:23:7A:0B
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:5b:f7:c0:69:24:77:28:4b:b3:b6:72:27:11:99:ce:1d:
c1:92:51:54:0d:23:c2:57:4b:4a:78:c1:02:be:8c:0c:64:ce:
ed:23:72:ba:cb:92:7d:e1:8c:6a:1d:34:8e:08:7e:bb:4e:42:
8e:5e:d9:96:21:53:d9:7f:b7:1e:c8:2d:db:e6:56:7d:18:76:
88:ec:00:15:79:78:3d:36:1e:ce:4b:0d:7c:ce:e1:3b:bf:96:
e7:14:04:6c:d4:ae:62:d9:d0:f9:f4:12:10:c9:db:fc:7b:f9:
7e:f2:74:1e:13:f7:83:50:d6:e9:b2:2d:ca:83:c1:40:82:41:
54:7c:7d:b6:91:74:2a:d5:8e:77:d9:19:58:a7:7e:1e:6b:da:
88:d5:7c:e6:96:78:7f:e4:00:9b:10:ec:67:e3:14:76:28:d4:
0c:ce:c9:d0:11:97:71:74:f4:e6:8a:49:d0:31:48:5c:bb:b6:
4e:c9:63:da:19:8b:c2:08:6c:d2:1a:a7:01:12:4a:a7:cd:6d:
26:24:0a:d3:a5:95:9b:58:78:39:09:e3:b8:ee:0a:20:46:f1:
df:f7:bb:80:a2:dd:f4:a4:2c:d2:08:53:62:ea:49:10:91:c3:
c4:ac:aa:19:d3:cf:01:31:1b:77:60:88:30:9e:60:48:f2:a7:
40:f5:48:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwH04LP6AHJf/PBvbbZLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD
EyhhOWNjZDA4YThmZDliNTAxNzFkYzFhMDk1ZGQwZDIzODQwMjM3YTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hZxNsUldHz/2ZV9fLEQMwEeuXAv
9sJ5zHiMlf8Vlh49qQdem4Fy4pan/4cxE5BzMSrSk8THywhlywg7noO3He9xfcOl
Vr74Cb4/M9Y7FMoYTDXjCUALLsZP/KvUseiLAOqxs5oVq1914fHt0S/RBsFy/kBp
YVE7VdJg9bmwG06JTjtPGzkhr/YqzuRxDmEATFMoal3J9NVkETZv2ayG3AWKURqw
3Hzd/qv656YS8NhS2HGK9w1nZInPEKzPSiYq1yCMOzAKZTRHkJP9xh56aicj0E6w
THv0zVSiHiog35VGLAKKZXcD88/6AvFZ9t/xJAi/PwB3gBz8lH02v9ez6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnM0IqP2bUBcdwaCV3Q0jhAI3oLMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoRb98Bp
JHcoS7O2cicRmc4dwZJRVA0jwldLSnjBAr6MDGTO7SNyusuSfeGMah00jgh+u05C
jl7ZliFT2X+3Hsgt2+ZWfRh2iOwAFXl4PTYezksNfM7hO7+W5xQEbNSuYtnQ+fQS
EMnb/Hv5fvJ0HhP3g1DW6bItyoPBQIJBVHx9tpF0KtWOd9kZWKd+HmvaiNV85pZ4
f+QAmxDsZ+MUdijUDM7J0BGXcXT05opJ0DFIXLu2Tslj2hmLwghs0hqnARJKp81t
JiQK06WVm1h4OQnjuO4KIEbx3/e7gKLd9KQs0ghTYupJEJHDxKyqGdPPATEbd2CI
MJ5gSPKnQPVIPw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:59 2025 by rpki-client