This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier: flW2SGsPR6UZ6tz8wcXdQriGfrxqW0fJdty9EoQnjhA=
Subject key identifier: D6:1B:C7:38:C2:FB:32:04:B6:1B:E0:5F:83:0E:81:37:88:2F:85:4E
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial: 019B1BA9D37A1AD6DBE941E065148BC15388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number: 14AA
Signing time: Sun 14 Dec 2025 07:01:13 +0000
Manifest this update: Sun 14 Dec 2025 07:01:13 +0000
Manifest next update: Mon 15 Dec 2025 07:01:13 +0000
Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: 5HO9xAAcKJQPrebRul/DsDdxDFCBSEW4tMxEFX2WFWY=)
2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:a9:d3:7a:1a:d6:db:e9:41:e0:65:14:8b:c1:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
Validity
Not Before: Dec 14 07:01:13 2025 GMT
Not After : Dec 15 07:01:13 2025 GMT
Subject: CN=d61bc738c2fb3204b61be05f830e8137882f854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:68:1f:22:97:48:c1:98:b3:d1:9a:e5:38:
55:e2:81:09:c1:cd:2b:0e:52:2c:d2:60:2e:8b:af:
de:7b:11:4b:24:76:0d:b7:31:66:62:d8:50:76:3d:
ce:2a:4b:f1:6e:51:3a:8f:a2:3c:64:1d:08:98:00:
36:b7:cb:e2:3f:02:16:7f:a8:92:5d:af:ea:25:69:
79:97:b5:c3:20:39:a7:25:03:97:f5:91:3f:ae:4e:
ab:42:07:75:db:1e:00:a0:6a:8a:c9:1c:29:5f:c6:
62:64:1e:a3:91:a0:49:c9:78:7b:af:85:cb:0c:b0:
bd:11:f2:e1:45:c2:60:35:e4:3d:63:b8:05:59:02:
9f:b0:ab:b0:84:35:c3:79:eb:58:91:8c:9b:06:82:
bb:ac:a9:10:03:45:02:b6:fe:66:66:2b:f2:05:3c:
67:54:07:8d:8b:28:d9:e1:d1:e0:e8:45:ed:8c:a2:
88:96:3d:81:2b:8e:de:75:fd:0e:34:71:83:06:55:
a9:07:75:92:8a:63:3f:85:d4:75:28:3c:5f:5e:09:
f2:94:e7:41:15:5b:4b:ac:38:d1:5f:ae:e5:08:98:
ea:d9:6f:14:c3:1f:c4:a5:cd:9e:93:96:38:f7:6f:
35:99:3d:cc:61:bd:63:dd:8c:c4:3a:8d:a9:a8:a3:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:C7:38:C2:FB:32:04:B6:1B:E0:5F:83:0E:81:37:88:2F:85:4E
X509v3 Authority Key Identifier:
keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:a0:ab:af:2a:65:0c:08:f9:69:6e:40:5b:93:b3:da:5f:
45:20:fa:b4:e5:ef:82:a8:cb:ce:38:75:84:28:8b:ba:a3:48:
e2:19:80:d1:9d:e7:7f:37:60:6f:4a:de:ba:ba:92:a7:cc:da:
c4:67:70:45:17:02:06:f1:45:88:34:fb:17:40:ff:41:e5:7e:
55:da:e4:f6:30:46:8d:0e:e5:c9:e5:9d:ec:4c:4b:e0:09:92:
ae:de:fc:7c:a0:47:46:b4:46:b1:45:6d:a4:4a:03:07:5c:1c:
7a:b5:9d:57:47:3e:2e:ea:4f:71:1a:ba:3b:cd:26:72:a3:06:
35:54:44:7a:b0:3f:94:1a:a4:f1:1a:0c:97:7e:c3:17:36:0c:
f5:da:c1:d8:17:4b:54:56:a1:35:c3:2c:c0:db:33:6d:eb:93:
27:12:38:7c:ff:d7:a0:7a:15:42:46:e5:fb:87:97:98:a4:d0:
1f:66:f9:a0:67:27:ab:94:f1:7c:04:31:eb:88:cb:b4:f9:f4:
d3:b5:18:8d:c4:ff:e9:79:6a:22:15:59:e6:28:65:1a:fe:51:
d1:73:e0:50:4f:c8:27:2a:95:7d:02:99:f3:a0:6a:60:5b:1f:
18:e3:bd:1d:29:f5:55:ce:d5:b8:07:71:68:40:89:13:b3:b2:
29:c7:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:10:56 2025 by rpki-client