This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier: duLaReHiIbz6fixPsmd0jj+PHMSx4IlLngM+yDgg3ak=
Subject key identifier: C5:C6:C2:26:49:32:99:75:7C:DE:D4:1A:C0:6B:AC:77:CC:66:9C:12
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer: /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial: 019AF208CF8852030C3D8749D752A26E9910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number: 1034
Signing time: Sat 06 Dec 2025 05:00:54 +0000
Manifest this update: Sat 06 Dec 2025 05:00:54 +0000
Manifest next update: Sun 07 Dec 2025 05:00:54 +0000
Files and hashes: 1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: msnaPsu8VfUwfKq2pFXCXONoLSXYfKSofvDq0CsIALY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:cf:88:52:03:0c:3d:87:49:d7:52:a2:6e:99:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Validity
Not Before: Dec 6 05:00:54 2025 GMT
Not After : Dec 7 05:00:54 2025 GMT
Subject: CN=c5c6c226493299757cded41ac06bac77cc669c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:f4:98:2f:67:41:7d:bb:7e:4c:97:66:d9:
26:47:23:54:93:ff:3e:c0:68:81:8b:4d:db:0e:da:
29:e0:e4:f6:69:32:19:c0:40:a8:a3:45:15:6a:6b:
fa:35:c8:11:6a:1c:4b:50:37:4a:c3:a3:02:7e:8c:
78:6a:dd:72:5d:4d:9b:21:ce:92:19:c3:a4:aa:19:
ef:1e:7f:41:e4:31:a6:e2:74:de:bf:c1:39:77:71:
24:e4:37:ee:91:43:c9:b6:a4:f2:14:dd:26:9f:e9:
f4:2e:64:4f:18:1c:3a:a5:69:b9:30:c0:df:89:a3:
99:d7:43:c5:f2:71:56:05:c0:e3:c1:b8:3d:35:c5:
8c:a1:98:ef:9f:7f:5e:32:f2:9b:a4:4c:b9:63:c2:
8d:4f:bf:85:b8:35:dd:27:1f:d0:f6:aa:70:fd:64:
a4:e9:fa:d4:47:1b:b3:52:bb:fa:a6:69:ea:c8:d9:
2e:aa:d0:04:b4:b9:ec:88:ed:64:9f:da:9a:96:9d:
8e:a3:7a:04:58:40:aa:d2:3d:15:fd:6e:57:4a:bb:
f6:ae:f6:b4:1a:c7:4e:18:bf:e9:8a:e4:6c:58:99:
a1:41:80:fb:fd:8b:ea:63:5f:58:f2:55:c4:09:97:
75:16:98:2b:cd:08:06:8b:49:3e:ca:12:e4:d6:f9:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:C2:26:49:32:99:75:7C:DE:D4:1A:C0:6B:AC:77:CC:66:9C:12
X509v3 Authority Key Identifier:
keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:31:8c:a7:69:b4:63:9f:18:61:73:5a:e8:9c:b5:6f:4e:3e:
89:d3:2d:93:3e:62:67:7b:ca:ca:31:3d:a4:ae:54:85:fa:62:
9e:54:44:40:04:b7:99:ab:88:af:bf:ff:e8:15:1c:07:07:2c:
21:de:1d:5d:8a:74:93:43:45:34:8f:9a:13:e5:97:df:47:8c:
7b:ab:1e:23:6b:de:1e:54:db:3e:fb:82:08:ca:de:66:65:01:
f5:1d:7d:04:1a:b2:e7:bb:d1:11:68:34:64:92:f2:1c:45:97:
b5:d3:67:af:68:65:8f:e7:df:19:a0:44:2f:1c:51:34:55:22:
27:a2:b1:af:77:16:66:c1:61:7c:73:46:89:57:c2:0e:eb:39:
b8:f3:07:63:6e:3d:3c:c7:ea:3b:a8:c2:f3:74:cc:a3:6f:c8:
d2:95:8c:57:fd:47:31:bd:15:4d:c8:5e:5d:16:86:2d:ef:b7:
fa:43:d2:00:85:72:6c:a6:71:61:11:4a:4b:6a:5b:da:bb:d2:
90:32:29:7f:cd:eb:76:9b:f5:d0:8a:2d:2a:c1:5c:e7:4c:c7:
27:a8:6c:03:d6:dd:6d:57:49:9b:10:4b:d0:4c:1d:53:a2:3e:
90:c2:4e:fa:4c:7d:ff:61:4f:91:e1:8c:0f:d8:fc:81:0c:7b:
fa:4a:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:48 2025 by rpki-client