This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: RfTVlCr+lKdLB8y/pYPq5nZ6zyEWQUv0DbUaanwKR0Q=
Subject key identifier: 03:57:55:27:EB:F1:66:64:8A:F5:48:83:A3:73:15:C2:AC:13:04:81
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019B0D8022FFC93B0198AB80C51DE8719ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 10D5
Signing time: Thu 11 Dec 2025 13:00:59 +0000
Manifest this update: Thu 11 Dec 2025 13:00:59 +0000
Manifest next update: Fri 12 Dec 2025 13:00:59 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: npGrpTzm/6l/EDi9QXBSSpz//3yuuH+XtbLZ/avfoa0=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:80:22:ff:c9:3b:01:98:ab:80:c5:1d:e8:71:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Dec 11 13:00:59 2025 GMT
Not After : Dec 12 13:00:59 2025 GMT
Subject: CN=03575527ebf166648af54883a37315c2ac130481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:8a:24:8f:96:95:9d:5d:23:3f:41:72:7a:
f1:d1:96:4a:47:a5:a2:69:0d:60:61:ef:ed:ae:95:
c3:e1:a4:b7:91:05:32:bb:2b:84:37:e5:72:33:ee:
ba:33:cc:d9:04:8e:2b:e7:69:34:38:3b:7d:81:87:
dc:a0:f6:c0:51:24:bb:2e:75:1e:58:29:40:aa:56:
6e:1d:b1:88:0a:aa:b3:70:b2:45:c7:fe:a9:a7:90:
5b:53:d1:52:1a:48:db:38:cd:cf:22:0d:da:2e:3f:
17:05:3e:82:a5:2a:49:bd:cb:b5:e5:a4:07:d0:6d:
23:ad:58:85:16:59:67:71:2e:85:5f:a8:04:92:f9:
ce:40:b3:0a:cb:38:91:af:e1:5c:c4:3c:2d:e0:97:
8d:b7:8f:36:23:1a:67:cf:43:95:7c:f8:a6:39:de:
88:ce:6c:17:c5:01:0a:83:eb:a0:9b:c7:a1:b1:d6:
92:c0:53:2a:a1:84:d6:2f:d6:7f:7b:4e:f0:24:ae:
13:36:17:1f:8e:15:03:23:f9:14:29:33:2b:ba:d2:
91:f0:a4:28:40:ad:4f:ef:a8:de:a4:32:66:1d:53:
0e:b4:c3:7a:f3:27:ad:eb:00:f6:cc:31:59:1f:e2:
22:f9:3b:62:5f:95:0b:95:a9:e2:e8:69:31:fe:41:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:57:55:27:EB:F1:66:64:8A:F5:48:83:A3:73:15:C2:AC:13:04:81
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3a:d2:cf:77:54:3b:e5:c1:d0:8a:b9:7c:3d:6e:16:4e:95:
35:59:fa:e6:0d:05:ad:f0:f3:cd:3d:4e:61:77:b5:d6:5f:f9:
d1:f7:8c:4c:a4:dd:73:29:e6:15:fa:ee:da:36:5b:1b:24:6e:
17:fc:89:9a:af:6f:17:de:34:8f:ce:7a:31:9b:46:08:37:27:
4b:6a:07:31:c6:11:d3:f6:dc:73:7b:68:46:73:f0:19:40:b7:
95:31:ef:e9:f4:49:8f:1f:3d:81:7b:2c:e5:f5:eb:89:e5:53:
07:24:c7:f2:9d:1c:01:82:4e:55:27:26:9b:c1:12:53:80:7d:
bc:08:73:4f:f0:68:8e:b2:16:b7:a2:77:4d:55:5e:85:0c:ac:
1e:d8:65:58:c0:b6:97:39:80:3c:4f:68:ef:1d:60:9a:95:10:
9c:77:24:cb:15:72:1b:88:4f:66:47:fb:2e:91:18:92:2d:a8:
54:06:e2:c4:76:f8:77:d7:5d:62:91:b5:7d:06:e6:24:3f:8d:
c0:0f:86:bc:06:62:11:8b:ee:40:d4:12:90:66:6b:07:8a:92:
05:52:3e:73:69:50:0c:48:28:aa:fa:df:5b:46:60:3a:39:df:
9a:af:1b:50:3a:a8:50:e1:49:b6:9e:0c:98:de:14:9d:8a:7f:
23:79:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:07:45 2025 by rpki-client