This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: HfATOYpdaDraLgjuov2dLLZAO5doAOUc/ES6a3uGMlk=
Subject key identifier: 45:3A:C0:D8:BA:32:36:FA:6F:90:B3:D1:A3:0C:7C:6D:FE:96:D9:45
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 019B0E25E5D297FEF8AE0DC17C7B8689426B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 0AE2
Signing time: Thu 11 Dec 2025 16:02:03 +0000
Manifest this update: Thu 11 Dec 2025 16:02:03 +0000
Manifest next update: Fri 12 Dec 2025 16:02:03 +0000
Files and hashes: 1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: D6SOJHSqF5Q0M/O0oi1k7Dx8Uht3PAAv9yQUog6bN0E=)
3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:25:e5:d2:97:fe:f8:ae:0d:c1:7c:7b:86:89:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Dec 11 16:02:03 2025 GMT
Not After : Dec 12 16:02:03 2025 GMT
Subject: CN=453ac0d8ba3236fa6f90b3d1a30c7c6dfe96d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:f5:1a:33:d8:b0:cc:1e:ce:4d:ee:c3:35:
2f:95:c5:e8:a7:60:1f:b8:a8:ef:ea:7f:80:0e:b7:
cf:85:d1:fe:01:93:a3:ef:13:56:48:54:d0:33:99:
b6:ed:d5:52:44:d4:11:25:30:be:f8:b6:2f:3d:65:
46:45:d8:86:9e:50:ea:04:b3:92:94:88:c7:39:7a:
47:71:8a:9b:64:f1:f9:55:28:c0:c0:d1:9d:62:f1:
8d:67:cc:d4:df:0d:8b:5a:b4:d4:d0:ba:e4:44:3c:
a3:80:df:e5:fe:9c:31:a3:7d:78:49:b0:9e:8a:9e:
5b:fd:f5:00:60:64:82:8a:20:a2:18:70:95:51:8d:
1f:68:85:df:41:b2:31:95:b9:0c:b9:bf:4b:f0:ae:
38:01:d4:67:37:6b:0a:f9:a5:b1:0e:47:50:ee:73:
09:a5:d2:db:d5:a5:35:7d:df:e7:32:83:d8:2b:16:
07:c0:04:f8:42:99:a6:85:8c:4f:48:89:fb:55:0e:
c2:06:4a:fc:ac:2b:ad:6e:f7:5f:da:c7:49:22:2b:
b4:c6:2c:a7:80:6f:26:53:46:98:f9:f8:54:b8:a5:
e9:80:40:ce:f6:79:24:d1:50:e6:79:98:99:72:80:
79:b2:bc:9f:56:19:07:21:5c:6c:d8:83:2a:d7:01:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:C0:D8:BA:32:36:FA:6F:90:B3:D1:A3:0C:7C:6D:FE:96:D9:45
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9c:9e:3f:82:c5:ec:59:21:63:ac:3a:f0:56:b2:a4:8c:ab:
70:19:27:26:2c:21:f2:84:28:6e:e7:35:2a:ae:12:45:34:b1:
24:08:28:32:cb:3b:12:fa:29:68:c2:63:96:5f:e3:27:15:81:
7e:20:38:dc:4e:5f:69:d0:3b:be:2f:c5:2a:27:62:1c:ca:be:
32:7b:68:8b:5b:2f:24:12:e8:8e:0c:a9:87:fa:3f:f0:41:cc:
95:2a:09:dc:ce:2d:f8:e8:e4:7e:98:86:7b:2c:66:eb:02:51:
72:0f:01:82:43:bc:40:6c:91:3f:a1:7b:e9:f5:9f:6f:73:91:
bd:0c:d3:09:36:37:cb:c8:ea:d5:f8:70:bf:9a:1e:bc:ad:92:
c4:96:09:ae:bb:ad:42:57:2f:5b:6e:40:8f:89:87:cd:4b:05:
a9:07:f8:57:85:92:aa:38:d9:67:41:da:9d:8f:28:98:ba:45:
2c:cb:ba:24:fe:81:e1:11:04:03:f6:07:5d:3a:73:33:20:df:
29:29:3b:79:f6:27:f5:a4:01:6f:49:30:49:b6:70:44:be:06:
6d:a0:ea:9c:5c:37:b8:5e:62:77:7e:c5:5e:5b:de:48:e8:6c:
de:7f:cc:ec:a8:87:ee:74:34:2b:db:1b:0a:fc:b1:0d:0e:37:
a5:09:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:58:52 2025 by rpki-client