This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: TrfIaVoRL6uF3l9wr3H9xCm0iQaBM+RRC9BMFjfanQM=
Subject key identifier: A7:BA:F8:68:37:38:C8:9F:59:89:EC:C2:AC:C6:12:09:F0:44:8A:BC
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019AF540FD0A2D8583FE37260F73C949DB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 20:01:08 +0000
Manifest this update: Sat 06 Dec 2025 20:01:08 +0000
Manifest next update: Sun 07 Dec 2025 20:01:08 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: jra1VcJ4lY12Nnz4vZcH5Z4+0hfw4Kx+1uRTrWmhCBQ=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:fd:0a:2d:85:83:fe:37:26:0f:73:c9:49:db:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Dec 6 20:01:08 2025 GMT
Not After : Dec 7 20:01:08 2025 GMT
Subject: CN=a7baf8683738c89f5989ecc2acc61209f0448abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:77:1b:a7:a0:35:52:75:ea:fb:23:9c:23:
d5:cb:a5:b0:9c:29:51:09:b2:0d:d9:7f:fc:f1:71:
5c:81:f5:9a:f8:5c:96:46:13:ed:92:f6:90:83:26:
74:b9:85:10:2c:6b:f6:85:08:73:f4:90:cc:4a:04:
9a:cd:75:33:54:6b:28:cb:86:98:79:fb:57:bd:ae:
b7:cb:72:98:31:e0:9a:88:5a:39:30:7f:43:00:80:
f5:6d:79:da:bf:46:50:60:6d:9f:17:76:e9:18:44:
ee:21:22:23:a7:73:4a:67:7d:1d:5c:46:44:d7:a8:
8d:f6:4c:2f:3f:f7:15:ca:1d:ee:d2:7c:3d:0d:94:
79:b5:f9:4a:22:78:80:df:8d:47:2f:fc:6d:cc:4a:
6a:da:5e:60:a0:a8:3a:10:2b:75:61:97:62:40:e4:
37:92:55:94:09:2c:34:2b:76:03:05:b6:d6:81:06:
b2:09:a1:e7:28:e2:84:f3:c3:20:f5:8e:e9:66:1f:
b7:63:07:17:0b:d7:50:7c:56:60:5b:a0:10:ac:17:
49:90:34:e9:15:41:77:1a:b9:aa:c5:c5:49:c7:a6:
df:59:1f:ee:ff:67:14:55:1a:f1:7a:62:3b:8a:d7:
8c:ad:30:7f:78:90:a9:4e:e9:03:5c:df:e7:96:44:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:F8:68:37:38:C8:9F:59:89:EC:C2:AC:C6:12:09:F0:44:8A:BC
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dd:bf:56:74:b8:95:ef:4c:2d:1c:38:c3:a3:a6:fc:c1:5f:
4f:8a:33:b8:0e:0b:68:48:87:6a:56:45:df:3d:a2:58:87:10:
8a:f3:5d:b4:00:a4:f3:f6:6c:23:f4:bf:b3:c1:f5:f5:ed:3f:
61:ff:d4:7d:ba:14:35:ef:cc:bb:d7:b5:f0:d4:b5:7b:95:a2:
dd:3f:35:43:5d:27:fc:64:b0:16:44:d7:0e:de:91:32:2e:fe:
f5:3e:43:ec:f8:29:2b:34:a8:a8:34:b2:4e:12:d0:6c:d8:8c:
f6:d2:7c:99:63:ce:45:27:58:59:89:05:1e:38:48:8c:e9:a4:
6b:40:8c:92:ea:fb:24:e5:a6:8c:99:91:f7:d3:ca:32:65:c0:
8e:65:3b:1c:0a:e1:79:43:fa:3c:32:3d:39:49:63:70:31:c7:
6b:85:c0:8e:7f:78:3c:d1:5e:16:10:df:9d:d0:19:7a:84:0f:
67:70:7c:f8:d9:43:78:04:d1:d9:1c:5d:f5:a6:a2:18:be:2d:
a8:78:0c:dd:f9:95:de:cd:6f:76:88:37:29:b2:ce:a7:48:c3:
bc:81:fa:59:79:59:5c:ae:3d:47:11:01:ae:d4:f2:04:4e:93:
09:67:9b:72:3a:5c:3f:d9:15:03:5b:7b:1c:1a:ef:9e:19:d5:
aa:77:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:56:19 2025 by rpki-client