This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: NlHHwtLiJ2nsMlhbIBhV2XL4d1QuwSDm78VIjqzjHv4=
Subject key identifier: 05:2E:A7:04:72:97:97:33:02:F5:39:74:73:F6:93:2E:3E:A2:49:42
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019AF1D208426012C3F8C7041FBA6BE3BC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 175F
Signing time: Sat 06 Dec 2025 04:01:04 +0000
Manifest this update: Sat 06 Dec 2025 04:01:04 +0000
Manifest next update: Sun 07 Dec 2025 04:01:04 +0000
Files and hashes: 1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: /vLO5syandB+9ynBu/hATDUnzPWss9ZDU3/wCw1Nkxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:08:42:60:12:c3:f8:c7:04:1f:ba:6b:e3:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Dec 6 04:01:04 2025 GMT
Not After : Dec 7 04:01:04 2025 GMT
Subject: CN=052ea7047297973302f5397473f6932e3ea24942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:26:28:e0:e5:3e:4d:9c:16:16:56:81:e9:
8a:a9:e1:2a:3e:28:ef:9d:ae:c6:c8:6d:11:e9:2e:
f8:7f:2c:88:a8:c0:11:29:ff:28:ed:2a:b5:69:cc:
66:9a:78:24:58:6e:99:60:a5:e4:8d:6f:6b:3a:7e:
04:0c:f2:15:e7:ae:be:84:e1:77:90:11:c5:7a:f7:
e6:4c:b3:38:48:e4:c3:70:11:6b:3b:fb:ba:99:e2:
4a:b6:e5:aa:20:c9:68:31:60:8e:e8:26:7d:8a:60:
6e:ef:c1:3b:f0:ba:ed:bb:94:51:39:95:da:b5:2a:
30:06:67:11:4c:0b:a1:69:1f:76:0d:86:80:b3:78:
51:4a:eb:7e:54:44:b8:41:53:20:c0:a5:24:f9:fc:
9a:e5:93:a3:36:72:ea:43:e0:bc:f1:22:09:de:f2:
1d:a5:a1:2f:ec:26:ca:5d:fc:39:32:72:5f:00:e0:
3c:44:88:a0:a3:c8:fe:ab:0d:a7:50:52:d2:40:5e:
d1:45:a7:2c:43:de:f9:28:02:ce:f5:bc:b2:1f:5e:
de:a6:1c:13:04:fe:a9:6c:12:e4:27:03:cf:c1:da:
57:a0:dd:d3:03:ad:23:e3:39:ec:a8:86:ec:df:8f:
7b:a4:91:6d:8d:91:c3:d2:1c:70:f0:d2:17:aa:36:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:A7:04:72:97:97:33:02:F5:39:74:73:F6:93:2E:3E:A2:49:42
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f2:4a:e0:52:f9:64:f5:d4:37:6d:f4:66:70:97:00:e3:d4:
7a:8a:cb:48:e7:7f:cc:ad:db:ef:e1:43:e1:1f:6a:fc:23:2d:
30:93:7d:16:62:60:9f:40:40:49:3a:8a:1f:70:34:af:83:a2:
76:c1:73:a8:91:d9:e9:e7:32:c3:ed:44:05:49:38:5d:2d:fe:
89:eb:fa:bf:e8:e8:83:20:f8:70:94:1d:7b:b5:98:54:73:6e:
77:21:56:25:c2:fe:6c:4e:42:2c:28:b4:40:10:c7:1c:8c:e7:
7f:12:f4:79:5d:ba:35:af:a8:30:53:69:1a:a4:c4:88:67:2d:
55:f9:77:7e:57:04:31:2d:db:f0:03:c7:5e:8d:b5:6b:2d:c9:
db:d4:fb:21:0b:e9:68:5e:00:43:82:8b:e9:d4:12:ce:8a:72:
c2:32:f5:32:a9:4d:8d:9e:88:0f:64:c1:d4:03:f1:c8:0f:77:
80:30:53:1d:3e:c8:1b:64:6d:e9:77:bf:cb:0a:a6:f4:45:77:
be:09:28:22:3a:35:00:b8:70:9d:69:91:89:cb:3d:8a:d1:65:
0a:8f:18:10:80:d1:dd:a7:9a:9d:c3:e9:f3:08:1b:07:1b:f2:
fe:c4:a3:ca:a1:21:cd:e8:e3:56:f7:30:40:dd:db:c2:97:7a:
91:27:42:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0ghCYBLD+McEH7pr47w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw
ZTU4ZWIwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD
EygwNTJlYTcwNDcyOTc5NzMzMDJmNTM5NzQ3M2Y2OTMyZTNlYTI0OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ImKODlPk2cFhZWgemKqeEqPijv
na7GyG0R6S74fyyIqMARKf8o7Sq1acxmmngkWG6ZYKXkjW9rOn4EDPIV566+hOF3
kBHFevfmTLM4SOTDcBFrO/u6meJKtuWqIMloMWCO6CZ9imBu78E78Lrtu5RROZXa
tSowBmcRTAuhaR92DYaAs3hRSut+VES4QVMgwKUk+fya5ZOjNnLqQ+C88SIJ3vId
paEv7CbKXfw5MnJfAOA8RIigo8j+qw2nUFLSQF7RRacsQ975KALO9byyH17ephwT
BP6pbBLkJwPPwdpXoN3TA60j4znsqIbs3497pJFtjZHD0hxw8NIXqjYZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUupwRyl5czAvU5dHP2ky4+oklCMB8GA1UdIwQY
MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt
OWZlNDljYzRkZjJhLzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh
LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPJK4FL5
ZPXUN230ZnCXAOPUeorLSOd/zK3b7+FD4R9q/CMtMJN9FmJgn0BASTqKH3A0r4Oi
dsFzqJHZ6ecyw+1EBUk4XS3+iev6v+jogyD4cJQde7WYVHNudyFWJcL+bE5CLCi0
QBDHHIznfxL0eV26Na+oMFNpGqTEiGctVfl3flcEMS3b8APHXo21ay3J29T7IQvp
aF4AQ4KL6dQSzopywjL1MqlNjZ6ID2TB1APxyA93gDBTHT7IG2Rt6Xe/ywqm9EV3
vgkoIjo1ALhwnWmRics9itFlCo8YEIDR3aeancPp8wgbBxvy/sSjyqEhzejjVvcw
QN3bwpd6kSdCzg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:27 2025 by rpki-client