This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier: di+jb3vhkL//+bYAkaHbELSHBXqNJr4NmNTKn9JwbIk=
Subject key identifier: 4B:DE:89:0B:A8:05:A6:00:A8:58:32:4F:8B:D6:4F:47:98:40:71:50
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 019AF5AF107A1BC56DF6BB5066EC2820E83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number: 1275
Signing time: Sat 06 Dec 2025 22:01:22 +0000
Manifest this update: Sat 06 Dec 2025 22:01:22 +0000
Manifest next update: Sun 07 Dec 2025 22:01:22 +0000
Files and hashes: 1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: S55WtDEHH2+zL+TpyG6xSEXpRg5/+IH7uWH+69xZgj0=)
2: GzhIxob9bA8Czihl63s_AVDH8xs.roa (hash: WxcqeaBj1wEhDd9uj+K5AOhKzURT0h/j4LhtZQ31WLU=)
3: RA-miC4KaEWvGjUqoItCz1hzspU.roa (hash: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=)
4: aAjiTGjBvK-qa1UvGqne8OL4KrA.roa (hash: BjZaYz009qatAltLmOSug4n6bf9uQdN4teDrrkkHNbw=)
5: fe1oOTHUFPkwFLaBhSJgtXk18K0.roa (hash: fkkgIxypjSY0trqrdH7vDswC8HMHlpDfymztaFU8S48=)
6: mNd-QPrt9oszAh3U8KZHdf_j18g.roa (hash: 20ycN2JcFX9bIn7zpteJmgzlDEk47i2nftsr8SH469o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:af:10:7a:1b:c5:6d:f6:bb:50:66:ec:28:20:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Dec 6 22:01:22 2025 GMT
Not After : Dec 7 22:01:22 2025 GMT
Subject: CN=4bde890ba805a600a858324f8bd64f4798407150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:d5:f2:d4:6c:8e:0e:2a:5b:37:df:c2:40:
f2:52:04:36:12:99:f2:1f:ea:cc:8b:45:dd:cf:e6:
4b:df:93:df:62:da:21:d6:e8:f4:62:7f:bb:83:6f:
45:f7:24:3d:59:d7:aa:31:ec:b5:a7:c4:0b:2b:bb:
58:c5:48:25:42:5c:16:ce:96:6c:3c:d5:4a:65:b4:
c6:77:7b:3a:52:87:50:ce:fa:7e:9c:3c:f0:f8:d9:
f7:af:83:91:44:61:9a:94:14:87:32:0a:94:81:ac:
2a:81:fa:32:3b:f4:93:99:e9:47:8f:1a:51:63:2c:
23:d5:76:01:f3:d3:b0:6a:30:ed:c0:3a:74:40:d5:
8a:c1:c5:5c:87:f5:39:47:84:25:ba:8f:80:03:6a:
f7:14:22:1f:a7:36:60:fe:fb:c4:11:bd:23:ef:53:
1b:aa:99:58:00:78:13:dd:1c:d0:bc:8b:d9:74:3d:
22:25:3d:6e:8e:0f:a4:d4:7f:c5:ae:33:42:ad:4b:
98:85:62:f8:6d:9b:3b:34:17:c7:d5:95:88:6e:19:
1f:35:21:85:a7:85:d2:30:87:9a:a6:32:6d:2f:cf:
26:33:f7:8d:8a:12:54:44:0d:37:29:73:70:e8:db:
69:85:0c:ac:36:14:a8:b8:25:52:ef:53:29:83:ee:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DE:89:0B:A8:05:A6:00:A8:58:32:4F:8B:D6:4F:47:98:40:71:50
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e6:d7:99:27:cc:83:74:0c:33:8e:a3:af:9b:ff:a8:e2:07:
f5:84:54:e2:c2:56:80:39:d0:9d:3c:fa:7f:07:25:82:61:29:
a9:18:dc:74:da:51:d4:94:e9:89:24:00:15:b2:7c:c3:75:05:
8c:d1:b6:e7:4b:6f:3c:04:83:a4:05:22:d8:53:b1:77:40:4b:
3c:24:41:f1:40:fe:7d:14:62:2f:86:e0:72:ae:c2:89:c1:d7:
1e:b2:6a:ef:a2:a2:45:b2:40:cb:09:80:a4:98:4b:24:18:52:
0a:43:13:ad:34:db:b9:9d:80:66:bb:2b:3b:bc:0d:a8:3f:16:
71:c6:ca:01:e0:15:17:1e:29:98:2b:ef:58:65:71:31:72:33:
28:b4:26:aa:52:f1:3a:a8:72:2c:bb:3c:75:06:fe:20:50:7d:
99:d8:71:4f:4c:23:d0:73:3d:85:f8:1b:21:81:16:22:11:10:
c9:cf:51:93:73:a5:a5:18:7a:1a:b5:6f:ee:29:cf:3f:35:06:
1f:89:ab:c6:76:46:02:b9:da:28:5e:27:16:89:d1:9c:ec:ab:
9f:00:fa:81:14:39:33:ec:76:08:ec:e4:f1:22:a4:fd:ef:e9:
07:7b:ae:75:ea:14:3a:26:75:ca:40:1b:82:51:ec:ff:be:2c:
9c:b4:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:34:27 2025 by rpki-client