This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: dCLxS67DQyHEpfDAaQOC2z1/zv+pXRodSkgCd6KLedo=
Subject key identifier: EF:4D:73:A0:47:53:91:53:15:DD:5A:7B:F4:8E:56:02:AD:42:4D:F5
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 019AF61CE0E4A8835CDFAA598FCEE301A69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 1768
Signing time: Sun 07 Dec 2025 00:01:18 +0000
Manifest this update: Sun 07 Dec 2025 00:01:18 +0000
Manifest next update: Mon 08 Dec 2025 00:01:18 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: wIMSQl92XnVSdOnftG3llEnSbTnT/7Dn+PR3l80k8ac=)
2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:e0:e4:a8:83:5c:df:aa:59:8f:ce:e3:01:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Dec 7 00:01:18 2025 GMT
Not After : Dec 8 00:01:18 2025 GMT
Subject: CN=ef4d73a04753915315dd5a7bf48e5602ad424df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:7b:5e:a6:bf:65:72:46:d3:ef:3b:82:0b:
93:47:54:34:d9:4b:fc:dc:18:86:dd:9e:c9:f1:67:
a0:58:bb:d0:ce:01:00:81:8f:73:0a:82:c0:66:40:
db:be:36:c7:7a:19:9e:b2:2c:f3:5e:14:25:25:f7:
51:1e:66:2b:20:5a:ec:f9:ca:cb:58:23:51:f8:17:
5f:07:53:d6:48:db:38:1b:69:62:bf:6e:bb:c2:e0:
14:fb:ce:25:52:91:bf:7b:25:7e:72:82:78:93:83:
a8:1e:f1:59:94:a3:8c:42:1b:af:56:65:f2:aa:28:
8f:ea:9f:a2:bb:1f:20:be:3f:e6:e3:12:67:49:4d:
a3:bb:c1:64:d1:17:97:53:34:22:0e:72:4a:55:8a:
7b:5d:c7:f0:4d:0c:42:d5:ac:80:2e:3e:cf:ed:d4:
1a:25:3a:77:3c:84:ea:75:06:3e:70:e7:cb:3d:61:
c0:93:29:eb:6c:c8:a9:a0:84:3c:71:b0:bc:99:25:
08:11:72:e3:6d:6d:b9:6a:7f:0f:94:64:85:7c:41:
ed:c2:9b:d3:18:96:30:2b:ec:20:93:c7:2a:10:29:
50:74:81:f2:1c:90:5c:60:2f:98:d2:0b:eb:46:d6:
02:d9:3b:c4:3d:8d:a8:68:e3:73:f8:75:d0:36:bb:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:73:A0:47:53:91:53:15:DD:5A:7B:F4:8E:56:02:AD:42:4D:F5
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:fb:e5:b3:e7:a6:64:36:49:41:de:47:ab:32:88:5a:30:
9c:5b:f5:5c:4a:72:ab:46:97:ca:2e:f0:c0:2c:cb:6c:88:3b:
73:61:98:7b:08:85:20:46:54:f9:b8:eb:67:b4:eb:54:b7:5d:
af:3b:28:3e:32:65:92:b3:08:b6:54:e0:d8:61:e4:c5:c9:e6:
55:bc:11:fc:ac:2b:e9:ac:fb:97:86:2b:48:0b:d3:4d:11:d0:
af:44:db:89:5d:cd:72:a1:07:49:00:aa:b1:41:13:37:4b:f0:
20:c2:90:64:77:de:a2:fb:44:60:23:c2:5b:5b:39:d2:57:dd:
61:e0:c7:78:49:ce:09:3b:f0:19:6d:79:df:fd:c5:b1:5e:c0:
2a:cb:db:87:88:d4:41:d4:2d:dd:a9:26:03:9e:83:42:22:a2:
cd:02:69:64:bc:9e:78:83:15:60:34:de:3a:03:23:15:8d:3f:
7b:e0:f5:a7:71:66:2f:e5:bc:03:f8:2e:93:01:0f:0a:1d:9f:
eb:53:4a:50:45:4a:44:9c:f9:99:fd:79:79:0a:d6:09:ec:8c:
54:d4:0c:b3:7d:7f:c1:7f:ad:e7:64:4e:10:c5:82:2d:22:78:
ea:20:44:60:4b:8d:eb:2e:3e:45:68:ae:24:c2:ba:c9:fc:be:
07:62:1f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HODkqINc36pZj87jAaafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl
NDhlMzEwHhcNMjUxMjA3MDAwMTE4WhcNMjUxMjA4MDAwMTE4WjAzMTEwLwYDVQQD
EyhlZjRkNzNhMDQ3NTM5MTUzMTVkZDVhN2JmNDhlNTYwMmFkNDI0ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kd7Xqa/ZXJG0+87gguTR1Q02Uv8
3BiG3Z7J8WegWLvQzgEAgY9zCoLAZkDbvjbHehmesizzXhQlJfdRHmYrIFrs+crL
WCNR+BdfB1PWSNs4G2liv267wuAU+84lUpG/eyV+coJ4k4OoHvFZlKOMQhuvVmXy
qiiP6p+iux8gvj/m4xJnSU2ju8Fk0ReXUzQiDnJKVYp7XcfwTQxC1ayALj7P7dQa
JTp3PITqdQY+cOfLPWHAkynrbMipoIQ8cbC8mSUIEXLjbW25an8PlGSFfEHtwpvT
GJYwK+wgk8cqEClQdIHyHJBcYC+Y0gvrRtYC2TvEPY2oaONz+HXQNrvIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Nc6BHU5FTFd1ae/SOVgKtQk31MB8GA1UdIwQY
MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt
ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1
LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI/75bPn
pmQ2SUHeR6syiFownFv1XEpyq0aXyi7wwCzLbIg7c2GYewiFIEZU+bjrZ7TrVLdd
rzsoPjJlkrMItlTg2GHkxcnmVbwR/Kwr6az7l4YrSAvTTRHQr0TbiV3NcqEHSQCq
sUETN0vwIMKQZHfeovtEYCPCW1s50lfdYeDHeEnOCTvwGW153/3FsV7AKsvbh4jU
QdQt3akmA56DQiKizQJpZLyeeIMVYDTeOgMjFY0/e+D1p3FmL+W8A/gukwEPCh2f
61NKUEVKRJz5mf15eQrWCeyMVNQMs31/wX+t52ROEMWCLSJ46iBEYEuN6y4+RWiu
JMK6yfy+B2If+Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:45:03 2025 by rpki-client