This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
File: eBZ92WA7n7evUBVZyzc31HotVDc.mft (raw, json)
Hash identifier: vzOcwMCdVq6/sXwG3DCTVDpnc3KBViJ5St/VRBQxJZw=
Subject key identifier: 3B:38:B9:1D:DD:D1:4A:CC:98:3B:9D:99:E6:15:A8:F9:11:BC:25:EB
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial: 019B0FA5C66DE92344297F00A9BEA074F164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
Manifest number: 0A7C
Signing time: Thu 11 Dec 2025 23:01:20 +0000
Manifest this update: Thu 11 Dec 2025 23:01:20 +0000
Manifest next update: Fri 12 Dec 2025 23:01:20 +0000
Files and hashes: 1: 2Gebd9LuUSgIFGazk2B8jeGpGzM.roa (hash: lhcVXwCnPTOWkOSNYveyHZ5XywyRvkxiUOosibMUqpo=)
2: eBZ92WA7n7evUBVZyzc31HotVDc.crl (hash: aZgGQv2VEMrEhw7QTBK6O2Mf1dB8YGl0KdAQ16TPbVY=)
3: j37HTrC_dTklyNn2udlv5Naq8yI.roa (hash: RkYOgGdqm1JwmKN+7UnvKpJgw018AubpOXcPMP02ZOE=)
4: kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa (hash: 98fchG6ajtruPmSu1iHEitLSbFn7hxKxul3DfeyFstg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:a5:c6:6d:e9:23:44:29:7f:00:a9:be:a0:74:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Validity
Not Before: Dec 11 23:01:20 2025 GMT
Not After : Dec 12 23:01:20 2025 GMT
Subject: CN=3b38b91dddd14acc983b9d99e615a8f911bc25eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:a4:d8:49:c0:6a:94:a4:62:84:5b:46:d8:
1d:e9:e2:18:7e:11:e6:77:87:bd:db:83:f1:04:b7:
46:91:4a:4f:cb:70:1b:95:a4:7d:16:cc:72:72:ee:
0b:ae:45:cc:85:03:7f:d6:3b:3d:e7:9a:b2:3a:4e:
a2:53:70:26:89:fc:3b:39:ed:3f:e4:9f:5e:c2:6d:
37:c9:f0:f7:53:2f:01:57:23:98:c4:fb:af:ea:07:
e8:3e:8a:e9:48:c5:12:23:9e:c7:28:93:72:79:8a:
c0:4c:a8:e9:71:55:f8:a8:30:bd:fc:d1:1d:1d:12:
2a:49:18:d9:06:3d:f6:d4:09:cf:6c:da:21:93:26:
d0:aa:2c:35:26:e3:0f:d1:53:ba:82:d3:99:4c:af:
2e:6c:45:01:3e:1c:70:fc:73:55:c0:19:89:38:76:
ea:4b:2b:d9:d3:2c:05:a0:79:47:7e:e4:4d:07:1b:
14:92:ff:ec:ab:5c:5d:1a:87:fe:82:b4:7d:70:65:
88:18:ba:4f:f2:ae:a7:e8:37:d4:98:7f:f8:cd:da:
9f:f6:ed:64:62:79:98:ae:96:51:87:2d:67:97:c0:
ec:39:cf:22:2b:4f:92:b8:01:ed:6b:c0:cb:9f:ef:
67:6b:90:53:b5:49:d1:68:79:78:80:15:b8:45:be:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:B9:1D:DD:D1:4A:CC:98:3B:9D:99:E6:15:A8:F9:11:BC:25:EB
X509v3 Authority Key Identifier:
keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ac:b3:45:4f:fc:90:03:8a:68:81:2d:87:41:0c:93:6b:57:
ed:e6:d2:2c:0f:13:bd:d3:71:81:bd:fc:80:7e:7e:e0:52:51:
4f:44:9e:27:8d:4f:d9:45:dd:23:f3:9d:53:86:5d:f8:af:e7:
56:3f:72:aa:a5:4c:c5:60:31:87:2d:33:7c:38:fc:98:41:30:
9e:87:d3:c9:62:6e:ee:b7:4e:66:db:b7:29:1b:ab:3f:16:37:
e1:07:b6:8c:c1:7e:c8:c9:e2:e8:0a:34:6a:1a:91:6d:99:16:
b7:8e:8c:8d:9e:b0:13:99:30:4f:f0:4c:7a:22:e3:3f:2f:f0:
e2:da:18:77:2d:4f:78:9e:8a:d1:3c:99:7d:cd:86:57:f2:f8:
e0:bf:26:f4:a7:18:46:f5:9a:1e:a7:4a:7c:3d:e4:66:ab:a7:
4d:8d:e6:08:4f:62:bb:15:37:49:39:40:ac:97:7f:51:26:32:
c2:9b:d2:8c:c3:9e:e4:42:9d:5d:30:ae:2e:1b:ce:db:86:2f:
79:a8:c7:22:58:b3:2c:5c:3f:92:ff:fd:85:42:eb:ac:07:2f:
01:51:28:48:aa:62:88:0a:ab:7f:9d:91:04:c3:c6:95:85:56:
07:ea:5e:71:6f:e9:e7:1f:0d:47:e7:03:0d:84:0d:f1:f6:fd:
7c:52:7a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPpcZt6SNEKX8Aqb6gdPFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY3ZGQ5NjAzYjlmYjdhZjUwMTU1OWNiMzczN2Q0N2Ey
ZDU0MzcwHhcNMjUxMjExMjMwMTIwWhcNMjUxMjEyMjMwMTIwWjAzMTEwLwYDVQQD
EygzYjM4YjkxZGRkZDE0YWNjOTgzYjlkOTllNjE1YThmOTExYmMyNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tuk2EnAapSkYoRbRtgd6eIYfhHm
d4e924PxBLdGkUpPy3AblaR9Fsxycu4LrkXMhQN/1js955qyOk6iU3Amifw7Oe0/
5J9ewm03yfD3Uy8BVyOYxPuv6gfoPorpSMUSI57HKJNyeYrATKjpcVX4qDC9/NEd
HRIqSRjZBj321AnPbNohkybQqiw1JuMP0VO6gtOZTK8ubEUBPhxw/HNVwBmJOHbq
SyvZ0ywFoHlHfuRNBxsUkv/sq1xdGof+grR9cGWIGLpP8q6n6DfUmH/4zdqf9u1k
YnmYrpZRhy1nl8DsOc8iK0+SuAHta8DLn+9na5BTtUnRaHl4gBW4Rb4yeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs4uR3d0UrMmDudmeYVqPkRvCXrMB8GA1UdIwQY
MBaAFHgWfdlgO5+3r1AVWcs3N9R6LVQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGIt
ZmY4NjU4ZTEzNTZjLzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGItZmY4NjU4ZTEzNTZj
LzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKyzRU/8
kAOKaIEth0EMk2tX7ebSLA8TvdNxgb38gH5+4FJRT0SeJ41P2UXdI/OdU4Zd+K/n
Vj9yqqVMxWAxhy0zfDj8mEEwnofTyWJu7rdOZtu3KRurPxY34Qe2jMF+yMni6Ao0
ahqRbZkWt46MjZ6wE5kwT/BMeiLjPy/w4toYdy1PeJ6K0TyZfc2GV/L44L8m9KcY
RvWaHqdKfD3kZqunTY3mCE9iuxU3STlArJd/USYywpvSjMOe5EKdXTCuLhvO24Yv
eajHIlizLFw/kv/9hULrrAcvAVEoSKpiiAqrf52RBMPGlYVWB+pecW/p5x8NR+cD
DYQN8fb9fFJ6IA==
-----END CERTIFICATE-----
Generated at Fri Dec 12 02:54:53 2025 by rpki-client