This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: il6REYeAnR69Cq596q1Rqry+aG9YvJ7/B8V9zC1rKbg=
Subject key identifier: 80:45:88:8F:FF:57:1D:99:94:A0:DA:A0:24:B8:07:69:1E:76:6F:78
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019AF0F5E14A6099049C14E9C5B6FC96C432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0765
Signing time: Sat 06 Dec 2025 00:00:37 +0000
Manifest this update: Sat 06 Dec 2025 00:00:37 +0000
Manifest next update: Sun 07 Dec 2025 00:00:37 +0000
Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=)
2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: Y70XtCMGxUP6vkeLmgvNccun5kFM7oCl8uuCeddTqG4=)
4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=)
5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:f5:e1:4a:60:99:04:9c:14:e9:c5:b6:fc:96:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Dec 6 00:00:37 2025 GMT
Not After : Dec 7 00:00:37 2025 GMT
Subject: CN=8045888fff571d9994a0daa024b807691e766f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:db:f7:a1:e9:98:19:6e:27:ea:8b:f4:15:
d1:43:61:8a:33:82:37:d1:1e:b5:ac:06:45:84:b5:
e6:9e:33:1d:c2:e8:56:b1:f7:b6:b3:e5:d0:7c:d2:
b6:66:78:56:d1:75:84:bb:fe:5b:b2:6f:b2:b6:06:
42:ef:f6:ac:4a:b7:18:5a:1e:2a:05:98:c8:af:54:
88:df:e7:1f:96:3d:b1:1f:fc:85:60:f7:2d:0f:d6:
8b:fe:f2:70:27:c8:ac:cb:fe:d6:d3:e1:75:58:a0:
4e:5c:68:5d:62:41:c1:bf:4a:4b:b9:b7:1c:78:89:
a9:61:fd:9a:f3:b6:eb:45:a1:24:30:82:31:c7:9e:
d2:61:eb:83:49:cb:28:52:b4:30:cb:66:ff:1f:36:
66:f5:cd:96:f6:28:10:b6:a7:93:1b:4f:ce:5a:32:
ac:45:5e:53:12:b3:b0:80:21:34:fd:3b:4a:2b:8d:
91:a8:f0:c8:f2:0f:70:0e:8a:08:3c:a7:44:ab:e3:
c5:93:01:c8:c3:8c:83:a5:06:16:85:5d:7f:11:fe:
f3:3e:6d:37:20:35:11:6a:ee:7c:91:69:04:28:91:
30:11:19:0d:fd:8b:e5:67:6f:5e:54:9f:81:60:73:
12:dc:91:16:95:d1:78:4c:94:79:c2:64:b0:70:c0:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:88:8F:FF:57:1D:99:94:A0:DA:A0:24:B8:07:69:1E:76:6F:78
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9c:ca:dc:ef:34:ca:4b:de:7d:4d:d4:35:64:ba:36:0c:df:
32:9b:d7:5d:05:cf:82:23:d2:d5:f8:40:61:4a:40:7e:6e:ab:
46:f7:09:95:b6:eb:c1:dc:03:77:df:69:aa:69:2a:a2:ff:0f:
37:e3:01:08:31:2e:93:c7:2d:a6:ef:d7:bc:bb:41:72:fd:6f:
3f:8e:09:1a:c1:08:12:4b:45:f3:57:9e:90:93:06:92:89:b1:
c5:80:bf:4d:27:27:76:dd:fc:fe:b3:18:7d:9b:58:4b:92:58:
ca:b0:aa:19:46:c0:4e:e2:7f:97:3f:f9:4d:0d:2b:11:22:69:
d2:80:7c:17:1a:d8:04:80:f3:62:b3:13:73:b5:1e:b8:b1:e5:
86:21:62:66:ad:f7:b9:1c:c8:91:01:58:b2:44:62:6e:06:99:
02:a4:f5:7a:c9:2f:ea:ac:94:ff:25:f6:e9:b6:7f:7d:2c:68:
8b:c4:d3:18:f5:75:b5:de:6e:99:6a:51:48:33:47:bc:44:b4:
27:1e:5b:c9:cc:6d:6e:76:9e:f0:6a:95:2f:8a:24:af:6a:66:
2c:e7:75:84:5f:4b:66:55:12:38:b1:c3:d3:67:17:8a:29:6b:
d6:2c:3b:d8:86:51:e1:19:8b:e4:2e:e3:d9:37:c6:3d:9d:81:
61:32:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:19 2025 by rpki-client