This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier: 0uirvLZWgkd1mie54B9j41mCj6Lw4CYoiGPXfboakGA=
Subject key identifier: 17:78:1B:EA:BF:BF:A7:C4:D7:41:81:A7:FD:80:8B:B0:0B:AD:3C:35
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 019AF23F895C06466EE306DCCB20D7F773BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number: 0E2C
Signing time: Sat 06 Dec 2025 06:00:41 +0000
Manifest this update: Sat 06 Dec 2025 06:00:41 +0000
Manifest next update: Sun 07 Dec 2025 06:00:41 +0000
Files and hashes: 1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: xzdP9yzVwTew8LTNV7OLvhoJGJQaHf25qQQNfxkOdwY=)
2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:89:5c:06:46:6e:e3:06:dc:cb:20:d7:f7:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Dec 6 06:00:41 2025 GMT
Not After : Dec 7 06:00:41 2025 GMT
Subject: CN=17781beabfbfa7c4d74181a7fd808bb00bad3c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:bb:65:d2:23:4c:99:a6:0b:64:30:b6:82:
b7:1a:a9:d4:26:ca:c2:6d:1b:ca:33:2a:78:c2:31:
38:9c:1d:3e:b6:47:d2:8e:d9:8f:89:3a:b8:20:51:
ea:8f:06:9f:bc:47:ff:79:cf:e2:1c:15:67:de:d7:
86:d1:c0:6c:ea:88:61:92:53:b8:a4:cd:de:2c:d8:
b5:d5:91:17:0b:3a:e6:0f:0d:13:63:86:ae:ef:a3:
44:be:81:40:28:5c:93:c4:4b:56:05:5d:e4:58:64:
3f:9e:aa:5f:bb:c1:2d:e4:de:00:a5:b8:56:3f:d3:
a0:fe:3c:d6:54:61:66:29:06:41:d4:57:10:04:c4:
75:eb:93:55:21:07:97:9c:8b:45:f1:53:66:61:dc:
f0:5e:7a:ac:6c:63:d8:0a:f4:d4:18:4f:47:a0:ae:
0d:d2:95:25:06:55:80:e9:e1:4f:58:1f:32:8e:76:
a5:21:7d:53:46:f4:20:39:4e:db:8b:46:96:95:ba:
85:00:fb:e8:aa:86:4d:32:dd:63:fc:e9:19:bf:06:
a3:ac:61:f7:af:1b:e4:73:71:27:a8:40:d0:87:f9:
8c:f0:46:78:ab:d9:0d:53:47:6e:13:e6:00:44:08:
2b:e4:02:eb:1d:79:1f:a7:16:31:b5:d8:f8:a9:98:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:1B:EA:BF:BF:A7:C4:D7:41:81:A7:FD:80:8B:B0:0B:AD:3C:35
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:2a:7d:9c:d1:0d:9d:b6:88:17:c1:a7:c3:02:2f:e6:51:
c0:1e:e0:ae:61:29:ef:54:a4:2d:77:62:ea:33:f8:bc:a5:02:
2b:77:c5:42:19:f1:ba:e2:fc:f0:83:bf:12:9e:5b:40:7f:35:
44:9a:76:ab:b5:8f:35:64:52:39:8e:9f:40:cb:98:1d:fc:46:
e6:de:b6:36:bf:b0:2e:4b:fc:85:36:ff:5f:c3:5b:f1:00:fa:
ff:23:af:96:f5:7c:b8:91:7a:1c:a3:8d:66:3b:0a:9c:c0:5b:
02:47:b8:eb:81:40:7b:89:ee:33:36:f2:b8:bf:b5:48:bb:d7:
bd:0e:71:05:01:70:3f:56:0b:ae:e3:89:5a:e5:72:a2:c0:cf:
ae:a5:c4:92:09:7a:97:d2:82:1f:d9:4b:b0:fb:f2:9d:c0:12:
7b:1d:91:5a:4c:ad:97:2a:67:2b:1e:40:fd:b6:f3:f7:c7:ca:
50:99:96:d4:77:c9:84:a3:e3:28:47:3e:aa:1a:ed:48:fa:f3:
9e:77:5d:86:1c:b7:c6:1a:4c:ba:89:5c:f6:93:eb:cb:95:6e:
e6:b1:44:36:96:a7:c9:e9:18:32:20:16:b5:e7:63:8a:ab:2b:
df:63:a4:3e:dd:b8:c6:45:4f:72:ae:62:aa:c5:d0:f0:78:8d:
d3:1b:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:38 2025 by rpki-client