This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: cZmqQ2yGhL4CnPv2X6/BH6lYIr8EaA8vVi6CprNQqPI=
Subject key identifier: 3C:7C:FF:36:A5:08:91:7E:32:0F:3C:52:90:3F:53:E2:97:AC:88:79
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019AF1D1C751585C891F3B5BA86C483115FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 1472
Signing time: Sat 06 Dec 2025 04:00:48 +0000
Manifest this update: Sat 06 Dec 2025 04:00:48 +0000
Manifest next update: Sun 07 Dec 2025 04:00:48 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: gYeRZYMAP9YBoYohe2wZvCmFJZuV1Id7CR5LHBMkpqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:c7:51:58:5c:89:1f:3b:5b:a8:6c:48:31:15:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Dec 6 04:00:48 2025 GMT
Not After : Dec 7 04:00:48 2025 GMT
Subject: CN=3c7cff36a508917e320f3c52903f53e297ac8879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:ae:94:11:9b:ab:78:9a:f4:61:1f:61:53:
fe:ba:48:f8:a5:05:83:4b:9c:1d:a0:20:e7:43:6b:
9c:27:57:7b:dc:d2:98:40:69:41:3f:16:5a:28:d2:
40:72:c1:5b:87:7d:10:36:74:e4:60:e8:ef:da:76:
28:6e:65:ce:b5:2f:66:05:4b:19:22:bb:eb:5e:ea:
be:20:76:29:8f:88:f1:73:7d:30:f0:9f:bb:49:a9:
35:02:8d:13:31:70:69:ca:d0:db:7d:37:d7:82:99:
cb:3f:24:2b:b4:01:30:6e:4c:09:04:ba:02:26:50:
3e:82:83:60:26:3d:4d:18:19:5a:21:3c:62:de:e1:
58:6a:c3:14:10:b1:19:de:63:5a:50:da:13:de:c5:
17:a0:4d:ce:c9:f2:72:00:e3:68:7a:b0:2b:cd:a7:
95:20:b0:fd:1e:af:7a:95:87:ca:d6:1b:54:10:46:
e2:f1:f1:a0:51:2e:4f:01:00:2b:3e:93:95:65:ab:
1f:78:bb:0b:5a:6a:5f:aa:f5:62:64:52:45:8b:6e:
ae:f6:1d:7c:83:9c:7f:0a:f2:0d:71:b1:74:a0:79:
99:f4:04:2e:3f:32:13:c0:0c:c3:e6:96:b3:c1:f8:
37:da:15:f3:ce:db:24:55:ae:21:1e:b1:a5:5e:53:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:FF:36:A5:08:91:7E:32:0F:3C:52:90:3F:53:E2:97:AC:88:79
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:38:ab:c0:3f:68:4a:18:18:7b:c9:e4:dd:a2:7f:e4:e8:
55:e3:0c:1e:d4:32:66:da:5d:c9:11:b7:0f:7c:05:58:16:b3:
e3:26:a9:29:e1:c1:10:2d:14:81:e5:57:d2:02:bd:33:8d:95:
6e:5d:70:e7:51:10:e1:9a:b3:15:14:34:38:c1:cf:67:00:4a:
4d:fa:05:b5:d0:a9:35:ad:a2:95:71:c7:1f:6b:51:30:d8:f4:
eb:a4:e7:b1:9c:55:1c:3c:6e:ac:9a:65:05:5f:31:77:ba:f3:
86:f5:21:54:1f:8c:92:43:ce:1a:02:66:97:ae:76:1b:4f:49:
00:11:e2:f7:14:32:cb:3d:c8:bf:e9:be:dc:b6:0b:e4:35:ec:
b7:d2:af:6d:c2:de:1d:30:7d:be:7d:c7:b6:ca:88:b8:e6:6d:
1a:7e:51:ef:e7:e5:61:ed:fa:66:45:1f:48:6c:37:ae:21:5f:
94:66:98:b4:f1:07:ff:8b:5c:02:53:ca:f2:08:ef:f1:4a:a1:
3d:bd:a2:fa:6c:a9:94:d9:04:eb:e1:f4:3f:73:7a:e0:2e:14:
a1:ac:52:52:fb:c6:13:7e:15:2c:74:50:82:af:fd:74:4b:e4:
b7:48:f1:09:83:f4:ce:b9:cc:22:24:e3:99:d2:c7:39:39:8a:
d6:ba:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:10 2025 by rpki-client