This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: zQjrIaJtgnQFTsCPdhzs6XLQXuwnZg4KsZhyKdmoOJQ=
Subject key identifier: A5:FA:80:EB:86:7D:F5:E6:E2:F4:50:2A:12:FA:C7:2C:6B:F2:43:23
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019AF208E9C5032651BFA56354C4747830D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 13D9
Signing time: Sat 06 Dec 2025 05:01:01 +0000
Manifest this update: Sat 06 Dec 2025 05:01:01 +0000
Manifest next update: Sun 07 Dec 2025 05:01:01 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: HXSaEGc3hDefiaQpaWjBsFtnTp6RF10l4wEKwvNAhxM=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:e9:c5:03:26:51:bf:a5:63:54:c4:74:78:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Dec 6 05:01:01 2025 GMT
Not After : Dec 7 05:01:01 2025 GMT
Subject: CN=a5fa80eb867df5e6e2f4502a12fac72c6bf24323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:96:4e:7f:f2:30:66:7b:de:64:28:96:49:
25:90:28:aa:a2:7c:cb:ee:05:c2:ea:96:a7:d0:37:
d4:39:10:68:14:2a:3b:29:88:30:b4:4f:63:28:b4:
08:85:4f:3b:42:85:e4:24:c0:31:ea:57:bb:77:c0:
89:22:dc:ea:71:d5:a3:d5:c9:f4:73:9b:d8:e5:ff:
4a:bb:75:84:f2:93:27:38:65:c7:04:5b:48:ef:90:
61:3f:a6:05:7f:74:f4:98:c2:84:76:23:84:e2:7a:
2f:2a:e8:b8:4d:cf:51:68:ca:67:a0:cc:7f:c2:d2:
ff:54:62:7e:1c:6b:5a:86:93:6d:9c:5a:a5:85:7f:
a2:7a:51:d3:f3:9d:e0:77:e1:69:51:21:5b:d9:31:
79:90:a4:ed:08:d8:b8:50:55:0c:ee:a9:46:92:f5:
07:61:e0:b1:69:5c:ea:a2:b2:c2:69:eb:d9:bd:b7:
6f:bb:ac:93:0c:89:10:5d:84:bb:47:d1:a0:ab:fd:
81:1d:55:a3:35:5f:51:5a:47:59:0f:b9:87:fc:33:
8b:01:5b:43:0d:9a:ed:1e:2d:93:21:a8:3c:a8:b2:
6d:8b:48:f5:57:ce:8d:c4:08:2e:50:41:53:f1:d2:
0e:04:93:62:3d:53:8e:e3:ac:a4:66:54:b1:82:33:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:80:EB:86:7D:F5:E6:E2:F4:50:2A:12:FA:C7:2C:6B:F2:43:23
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:4d:ff:a8:0c:ff:18:12:df:9d:44:aa:04:e7:25:41:d9:
b5:49:58:d6:ce:13:8b:83:50:b7:36:40:3b:7b:96:a3:ca:72:
bc:c2:c3:7d:fa:65:e1:d9:30:ab:1c:09:cd:63:a3:92:c9:65:
04:79:c9:b8:bd:75:98:2d:13:2a:53:25:01:24:4f:2a:cc:3d:
66:b5:f2:b4:fe:b7:32:55:fd:bb:54:c9:9c:db:c1:6a:6b:94:
dc:54:33:09:b5:5c:99:ce:4b:32:9f:eb:fa:45:32:1f:a2:7a:
50:4c:35:1d:86:af:f2:9b:e9:41:25:38:19:71:26:dc:08:1e:
6d:e3:29:aa:17:6c:59:3c:44:df:bc:73:51:f6:cb:20:55:46:
af:79:d6:ae:75:a3:56:76:33:a6:50:16:53:62:c6:fc:74:9b:
58:b0:1e:99:74:b5:b7:f9:80:a8:dd:88:2f:b8:55:b9:38:96:
b7:10:97:48:d0:1a:48:d6:7a:32:18:53:9b:55:0d:5c:ca:56:
cd:09:52:b8:bc:ca:29:8d:db:c9:ab:e6:cb:85:72:28:a2:18:
5d:33:17:98:7b:46:0d:7e:d3:ac:7e:86:ae:30:82:ba:8c:f7:
08:d4:97:11:28:36:e5:ad:df:a4:78:63:51:c3:dc:98:ce:0c:
4d:20:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:08 2025 by rpki-client