This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File: pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier: wklza6Z7ktyTNYNdPw2Sm2l1CGWMFSrBGKGwPQBrfQs=
Subject key identifier: 9B:FE:94:85:7D:E3:AA:0D:80:52:65:1C:AE:A3:55:5B:38:24:AE:AB
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 019B2219883332B7544937E327CF8584C486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number: 0E61
Signing time: Mon 15 Dec 2025 13:00:57 +0000
Manifest this update: Mon 15 Dec 2025 13:00:57 +0000
Manifest next update: Tue 16 Dec 2025 13:00:57 +0000
Files and hashes: 1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: O6t/SQcJjkOu5d8si1qOhWB5FK1d5W8u/6Y87+9rUsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:19:88:33:32:b7:54:49:37:e3:27:cf:85:84:c4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Dec 15 13:00:57 2025 GMT
Not After : Dec 16 13:00:57 2025 GMT
Subject: CN=9bfe94857de3aa0d8052651caea3555b3824aeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:f3:3c:ce:f9:66:3c:f9:d9:3c:9c:b5:04:
4f:a9:88:d3:06:38:c0:ae:71:fc:27:de:5b:c1:8f:
dd:17:e5:54:ca:bc:cf:dc:db:c9:ea:d2:90:8f:5a:
24:d1:c4:92:c1:c7:ef:3f:f3:e2:5a:a8:14:1d:d7:
77:e5:7a:09:a4:36:26:e1:fd:2d:0c:f7:0e:f7:40:
66:b2:4f:ef:9c:89:85:68:8b:09:82:1d:b0:8b:4a:
ef:ad:3f:a2:0f:ea:2c:1b:8a:ce:41:18:e1:68:4d:
c0:ef:d4:d3:96:44:82:fd:f2:8e:92:76:e0:0d:0a:
7d:9c:20:df:d7:32:6b:17:14:65:0e:09:7e:b6:15:
4a:06:be:e1:a3:c6:86:66:db:48:25:35:e5:dc:ac:
fc:f1:99:57:0c:ac:02:ad:a6:db:42:0b:47:14:1d:
ac:ee:24:60:f8:e0:26:e6:a2:48:06:a7:8e:54:be:
92:68:40:5d:e7:f1:1c:fd:f2:c1:01:e1:92:00:92:
d9:71:91:19:0e:b0:fe:c8:46:09:dc:cc:9e:29:07:
da:2f:6c:dd:fd:24:96:17:76:51:41:2b:9e:8d:56:
c6:43:0e:95:cd:cd:c2:0e:93:c4:d0:46:93:da:86:
51:8a:6b:6a:b6:23:4a:48:16:0c:44:cd:8b:a9:49:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:94:85:7D:E3:AA:0D:80:52:65:1C:AE:A3:55:5B:38:24:AE:AB
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:56:a2:35:b3:69:f9:b2:02:06:50:38:ea:3f:d2:58:02:
9f:49:42:d2:ad:cd:f1:e3:db:93:de:8a:9a:e0:98:e4:9c:87:
b1:00:50:34:e5:06:ac:8e:01:4c:c5:68:7f:e3:d1:cb:5a:03:
b5:1d:96:e6:a5:b5:aa:7f:2a:88:15:1b:5a:12:82:03:ff:99:
9e:9b:87:4c:78:e9:f9:f1:e7:08:d0:22:80:ad:67:c5:ab:b9:
7b:e2:cf:b6:52:b4:0d:15:08:9a:6d:43:93:40:76:e4:d1:87:
30:f4:c4:fb:cd:90:99:c3:c5:db:21:e9:a9:a1:ff:f9:6a:1a:
a7:d3:3b:0b:6d:88:23:a0:03:23:e7:69:16:96:40:f1:bd:dc:
a0:d4:7a:94:a4:07:e3:03:b6:80:ad:f6:f6:7f:7f:92:cd:be:
dc:66:9d:2b:ad:ef:92:46:97:fd:9b:06:0a:32:05:74:f9:67:
cc:a0:fa:f9:b2:13:7b:2a:56:2b:62:70:2c:1d:44:03:30:e0:
fa:3d:a5:84:75:bd:6f:db:62:46:7f:46:ba:c2:8f:e6:2f:0e:
7e:a6:28:bc:37:c2:59:8a:ca:2b:01:37:bc:60:6a:aa:36:ee:
19:2a:30:d2:e1:f7:ce:72:cb:69:07:63:41:d9:df:06:fb:d0:
45:98:5f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsiGYgzMrdUSTfjJ8+FhMSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjEwODJjODBhYmFmOTVmYWQ3ZWE2MGYzYzVlYzBlMDVl
MjhlZGMwHhcNMjUxMjE1MTMwMDU3WhcNMjUxMjE2MTMwMDU3WjAzMTEwLwYDVQQD
Eyg5YmZlOTQ4NTdkZTNhYTBkODA1MjY1MWNhZWEzNTU1YjM4MjRhZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJvzPM75Zjz52TyctQRPqYjTBjjA
rnH8J95bwY/dF+VUyrzP3NvJ6tKQj1ok0cSSwcfvP/PiWqgUHdd35XoJpDYm4f0t
DPcO90Bmsk/vnImFaIsJgh2wi0rvrT+iD+osG4rOQRjhaE3A79TTlkSC/fKOknbg
DQp9nCDf1zJrFxRlDgl+thVKBr7ho8aGZttIJTXl3Kz88ZlXDKwCrabbQgtHFB2s
7iRg+OAm5qJIBqeOVL6SaEBd5/Ec/fLBAeGSAJLZcZEZDrD+yEYJ3MyeKQfaL2zd
/SSWF3ZRQSuejVbGQw6Vzc3CDpPE0EaT2oZRimtqtiNKSBYMRM2LqUllHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv+lIV946oNgFJlHK6jVVs4JK6rMB8GA1UdIwQY
MBaAFKchCCyAq6+V+tfqYPPF7A4F4o7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NDc4ZGMtYzk2ZC00YmU1LTgwODYt
MjUzYjhiNDFhNzVjLzEvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83NDc4ZGMtYzk2ZC00YmU1LTgwODYtMjUzYjhiNDFhNzVj
LzEvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHVWojWz
afmyAgZQOOo/0lgCn0lC0q3N8ePbk96KmuCY5JyHsQBQNOUGrI4BTMVof+PRy1oD
tR2W5qW1qn8qiBUbWhKCA/+ZnpuHTHjp+fHnCNAigK1nxau5e+LPtlK0DRUImm1D
k0B25NGHMPTE+82QmcPF2yHpqaH/+Woap9M7C22II6ADI+dpFpZA8b3coNR6lKQH
4wO2gK329n9/ks2+3GadK63vkkaX/ZsGCjIFdPlnzKD6+bITeypWK2JwLB1EAzDg
+j2lhHW9b9tiRn9GusKP5i8OfqYovDfCWYrKKwE3vGBqqjbuGSow0uH3znLLaQdj
QdnfBvvQRZhf9g==
-----END CERTIFICATE-----
Generated at Mon Dec 15 14:42:43 2025 by rpki-client