This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: M94zbj6lwTENIG9waw02fqhfkyY22lDz/3CcG0su+zg=
Subject key identifier: 6E:D0:2E:19:75:23:2F:CB:F0:0D:B0:FD:E6:45:2C:CC:D4:41:35:B2
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 019AF31B4CDC422557FAB05333F0619E1DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0DCD
Signing time: Sat 06 Dec 2025 10:00:43 +0000
Manifest this update: Sat 06 Dec 2025 10:00:43 +0000
Manifest next update: Sun 07 Dec 2025 10:00:43 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: NwC/YsrEcPahYBS6iNpvdmNBUq9Fq/RSlUl8OWETVvA=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:4c:dc:42:25:57:fa:b0:53:33:f0:61:9e:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Dec 6 10:00:43 2025 GMT
Not After : Dec 7 10:00:43 2025 GMT
Subject: CN=6ed02e1975232fcbf00db0fde6452cccd44135b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:8e:3b:2f:91:7c:de:eb:5d:75:9b:9c:47:
77:b2:e5:31:1f:e9:49:b1:1c:3d:65:1e:67:95:9f:
ec:9b:66:63:03:06:3e:3f:68:81:a4:09:24:2a:2b:
a0:f4:01:df:28:98:4e:9d:6c:35:fc:23:35:c2:39:
e6:3f:52:cf:7a:a4:97:9b:64:27:df:00:ef:9b:0c:
f5:c7:57:b2:20:fc:ed:6f:cf:94:fb:a3:06:12:3c:
69:15:27:38:66:4b:c8:7d:26:2c:09:08:0b:ef:85:
95:1d:f2:36:54:97:9f:9e:fc:5b:5b:65:ef:d2:7e:
2e:c6:7f:91:59:1c:32:da:80:63:96:0e:ee:a0:c1:
a3:d6:fd:ab:fe:b9:25:62:cb:95:7c:fb:f4:cd:43:
c8:d0:8a:84:d4:cc:e1:16:9c:6d:2c:58:93:e7:b3:
cd:d2:b1:15:9a:77:82:49:3f:7c:34:92:06:a9:e2:
91:24:3b:77:00:06:58:ce:ac:9a:bf:f2:e1:af:c8:
42:ab:df:ec:f1:49:48:32:e1:d3:62:44:bb:32:c7:
16:e1:35:78:0f:f5:07:cc:d0:e1:37:02:e0:8e:c0:
51:4d:d8:44:f0:da:fb:84:8c:2f:ed:75:47:1f:31:
39:13:b8:4e:17:ca:eb:d1:7f:9c:ac:2a:42:76:0f:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D0:2E:19:75:23:2F:CB:F0:0D:B0:FD:E6:45:2C:CC:D4:41:35:B2
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a9:15:0d:df:c0:83:12:ed:53:c8:6e:99:66:a0:52:7f:67:
00:30:9d:03:5d:83:a1:1d:24:b5:c0:0f:30:15:2d:9d:53:f4:
6c:ae:c8:22:c3:06:9e:dc:5b:b7:a4:d5:08:e7:f1:9e:68:71:
29:46:13:bf:74:20:5f:6d:e8:ad:59:fa:07:c5:6f:32:b2:df:
ed:67:35:e5:c4:a5:7c:a6:26:71:e7:7a:5b:3e:c6:44:c8:cd:
f2:d9:3a:0a:9c:e3:c1:25:5d:03:8d:5b:6f:01:e9:4d:70:14:
43:bd:c8:a1:ef:5e:ee:fc:cb:85:d7:0d:b6:21:52:fa:b1:08:
e9:d6:21:dc:d4:f5:ee:c8:88:a0:e1:97:76:92:02:e1:d1:b5:
d2:42:f2:ad:6b:b6:99:e9:48:51:d4:6d:e4:69:ab:a6:e9:16:
48:7c:fe:42:cb:26:15:a2:4e:11:56:6e:79:0c:65:db:95:08:
a2:aa:af:bd:93:e2:8e:a1:b2:71:d4:ad:36:78:24:7b:ef:96:
d3:23:aa:72:e4:fb:59:90:e5:44:fd:fe:65:78:f9:51:ea:95:
df:e2:2f:71:81:d1:58:51:d4:c0:e3:91:b0:76:ae:3c:20:80:
80:57:04:b0:9c:18:f5:37:a5:02:a1:0c:d8:54:e8:37:e1:20:
f3:7b:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:05 2025 by rpki-client