This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: kiIRXTFEDFxZiH1fx70e8fiJxarsNSmFv3Ew+ipqX2M=
Subject key identifier: 60:A8:44:7C:D7:9B:32:F7:39:40:72:E4:6B:C2:33:E7:DD:30:4A:A0
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 019B0E92C1F170580AE34460465087F9A2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 13B0
Signing time: Thu 11 Dec 2025 18:00:57 +0000
Manifest this update: Thu 11 Dec 2025 18:00:57 +0000
Manifest next update: Fri 12 Dec 2025 18:00:57 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: 3gLWn1RfMbY7/IUp+45TS96I7EPfUpwhzkscifnWWd4=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:92:c1:f1:70:58:0a:e3:44:60:46:50:87:f9:a2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Dec 11 18:00:57 2025 GMT
Not After : Dec 12 18:00:57 2025 GMT
Subject: CN=60a8447cd79b32f7394072e46bc233e7dd304aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:41:d5:01:72:b1:71:3c:0e:83:23:52:c4:
be:b1:95:e8:f2:67:7f:dc:89:f7:88:34:94:86:37:
43:c5:60:51:6b:ac:61:1c:01:0b:be:fc:e8:8b:ef:
95:cd:58:49:33:f1:8a:91:61:ea:8f:fb:9f:e9:eb:
bc:0f:55:c1:2d:c8:1e:d1:3b:ae:07:9c:2e:ba:3c:
af:e3:f9:04:f6:91:00:e3:71:cd:63:73:73:51:d1:
c4:ab:cd:96:c1:bc:e6:03:f3:d4:d4:b3:bd:2d:ca:
3d:ad:61:fd:41:72:3e:2a:29:fb:75:c9:31:30:9e:
70:72:30:e3:35:a9:12:ee:1c:1f:29:e1:f8:c5:b1:
a3:91:c1:6d:cf:b3:6f:31:c7:e8:40:16:02:a9:67:
47:0c:57:40:d0:05:6c:96:c4:3b:ba:cb:3c:75:42:
77:cb:64:ff:39:6e:7e:4a:7c:13:40:46:81:97:00:
71:c5:43:31:f1:5c:a2:74:4b:27:c6:fb:72:bc:c8:
3b:c3:25:0f:e7:b0:4e:d7:8c:9d:38:d5:c3:96:12:
fb:71:e0:81:e2:0b:b6:db:95:13:d4:68:c3:d5:4d:
83:dd:fe:a2:71:1a:62:c4:b6:54:6e:c7:cd:f1:6e:
48:ab:4e:32:42:5f:96:6c:6c:80:76:89:4f:29:1e:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:44:7C:D7:9B:32:F7:39:40:72:E4:6B:C2:33:E7:DD:30:4A:A0
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:d1:15:9d:ed:f7:40:78:2b:cc:8f:74:3b:1c:7f:58:66:
b3:b4:35:e9:80:14:2a:ca:4e:c6:0e:5f:92:31:65:e5:4f:f8:
e5:55:52:8d:ee:a1:c2:5d:4e:a2:e4:6e:2d:05:c1:8d:01:de:
4b:15:8f:67:c4:86:fd:70:fb:cc:b2:71:03:06:03:be:05:ad:
21:85:e6:2f:41:c6:39:7c:e4:39:30:e5:4a:97:f9:ce:7e:a5:
77:83:85:5f:8a:98:4c:32:d0:11:6c:42:89:ad:9f:8e:9c:ec:
28:a2:c0:46:f5:aa:92:a8:36:b5:dd:2b:09:5b:70:8b:34:68:
14:e8:b0:b0:6a:04:3c:6c:0d:13:d0:ec:25:cc:0a:60:b4:39:
83:96:8e:9c:49:e1:8b:3b:7b:bb:de:c2:a8:43:31:e2:05:6e:
54:41:93:31:63:e6:f4:a3:77:8b:ae:6d:d0:7b:48:e9:bb:77:
c5:b3:ea:e0:aa:36:ce:d0:cb:8f:80:21:d5:d9:f7:64:3f:fc:
f7:10:1a:33:9c:73:a7:b6:bb:7f:f1:1f:6c:8b:e7:a9:4c:f6:
26:7e:fc:79:7b:e2:36:ce:77:2b:c2:83:af:3d:39:0d:07:c6:
c7:cf:87:e5:0f:4e:e4:a5:fe:13:d3:26:67:79:42:44:e7:25:
e6:16:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:56:50 2025 by rpki-client