This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: JVGRomZP5o0PR9relOQqvnC3oi9d6MDCZKU/BtIQyfA=
Subject key identifier: 6D:84:12:7E:10:C9:A6:99:2C:B1:B5:B0:8C:94:19:94:23:B4:C5:F0
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019AF6F7E24F3B48BB565D265B6F3E4B0640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1766
Signing time: Sun 07 Dec 2025 04:00:31 +0000
Manifest this update: Sun 07 Dec 2025 04:00:31 +0000
Manifest next update: Mon 08 Dec 2025 04:00:31 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 77THlYf9v/x5rizy26QW2j4knknth1BdQ9+DHxrN9kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:f7:e2:4f:3b:48:bb:56:5d:26:5b:6f:3e:4b:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Dec 7 04:00:31 2025 GMT
Not After : Dec 8 04:00:31 2025 GMT
Subject: CN=6d84127e10c9a6992cb1b5b08c94199423b4c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:3f:ab:09:34:87:b8:cc:09:f8:59:9a:ad:
b6:fa:31:ac:fd:5f:e0:30:8a:17:d8:38:2d:5c:ec:
0b:1b:95:1b:81:d3:a7:fd:1d:f0:39:29:01:a3:e8:
f2:b4:ed:c2:9a:7e:ba:39:64:ad:87:f7:3b:fe:68:
63:ed:03:3a:16:4f:c0:49:22:c1:57:48:b5:91:a5:
d1:70:fe:43:fa:54:f4:3c:38:95:67:66:0e:39:05:
85:8b:b4:cf:41:1f:78:69:8c:2b:02:0c:76:2a:f8:
97:07:5e:ed:78:90:05:be:b0:c5:bb:37:16:ed:3a:
dc:d6:d0:3c:13:4c:b8:59:11:a7:29:34:5e:4d:4f:
fc:28:19:f3:b1:0e:a8:89:30:9f:16:4e:6b:6f:eb:
eb:63:20:70:73:0b:30:5d:4c:0e:f2:91:31:67:90:
91:3d:f5:01:17:29:74:bf:a1:e9:f9:2c:c4:71:f2:
80:fb:ca:ca:99:51:ef:de:c6:3f:50:ee:fa:3b:77:
11:7a:f6:a5:88:bc:ac:46:f5:0e:2e:59:2f:fc:42:
aa:ab:9e:2f:67:db:57:1d:3b:54:32:0a:78:f5:78:
e1:1b:5a:9d:11:4f:de:2b:b0:80:25:e8:41:4d:1d:
3c:50:c5:92:71:df:76:d6:08:b6:26:8a:6a:59:94:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:12:7E:10:C9:A6:99:2C:B1:B5:B0:8C:94:19:94:23:B4:C5:F0
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:7a:94:83:2f:0c:78:2e:94:8f:96:b0:aa:5e:bb:db:38:
5d:19:c0:25:5a:2f:3e:65:1d:b5:f5:a0:a4:7c:c0:c3:2c:f0:
13:01:89:69:bb:12:50:02:b6:0a:0d:e0:d6:e2:b7:c9:26:5b:
f9:06:51:a3:1d:c1:85:84:cc:73:dd:b7:76:90:43:7a:9c:76:
75:a8:2f:f4:c6:c5:88:ff:c4:e3:ba:0b:4d:4f:50:d3:42:58:
82:d3:19:19:b8:9f:34:ca:10:73:c4:bd:6b:2d:97:24:16:24:
8a:6a:42:61:e3:62:ff:c4:3e:86:9f:11:94:c9:37:6c:53:c9:
cd:1f:ff:e9:cc:51:f0:87:d8:1b:c0:8f:ac:5a:da:2e:c9:04:
1a:6d:c3:46:0c:e2:5b:ce:dd:22:a4:a0:ce:9f:11:d1:dd:f5:
09:af:e9:ba:11:e0:22:4a:f5:9e:0f:84:20:1e:fe:bb:27:7e:
1a:17:98:11:f6:aa:d2:ac:08:8a:f5:cd:99:a6:b7:7f:66:c8:
fa:2e:e5:8d:45:be:9b:ed:f2:6f:80:f3:e1:15:ff:f5:28:36:
7c:71:6c:ad:72:55:f2:b8:22:d6:3e:eb:b2:cc:5c:92:4c:9e:
e8:d0:89:4f:ed:bc:e5:2f:92:36:25:78:78:98:68:1f:97:71:
93:55:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:43:25 2025 by rpki-client