This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File: evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier: fjgviO38jY8hI52BOjaYMBfXJmXFu7P1fLUSYQMY2H4=
Subject key identifier: A0:FC:67:4F:34:00:3E:EE:91:02:A1:8E:DB:07:43:FC:CB:F7:F1:41
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019AF9C308B4E093B77AEF3B60305AA2E837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number: 11
Signing time: Sun 07 Dec 2025 17:01:39 +0000
Manifest this update: Sun 07 Dec 2025 17:01:39 +0000
Manifest next update: Mon 08 Dec 2025 17:01:39 +0000
Files and hashes: 1: 1VKTU02OycyAYCpJZg4aLPvtRwQ.roa (hash: YG+UTvOUE4BmkeAXkImvscwUrz10BeacL7ioJPazzOQ=)
2: 5ii7PIOAQ8BZ5etxTtM4nbdO2AQ.roa (hash: 5NBOAUdxgxT7tr26H9VtH2yvuaRT2DU8y8+zL7Z3RBQ=)
3: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: 1ggvb13fSaY8nbKvjmBq3Bl7FcKGlfD1Ar03kubiW6M=)
4: ggiN19hON3fGMR1iyBOn5QHg5K0.roa (hash: +yIZfIWfHK3xTt3gd2tGqutsEXcMSM2ci7Is4Kr/vmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f9:c3:08:b4:e0:93:b7:7a:ef:3b:60:30:5a:a2:e8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Dec 7 17:01:39 2025 GMT
Not After : Dec 8 17:01:39 2025 GMT
Subject: CN=a0fc674f34003eee9102a18edb0743fccbf7f141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:a0:d3:70:de:d9:5e:de:48:33:83:24:c2:
87:fe:87:9d:c6:35:25:d4:af:33:ec:ab:db:f3:bb:
54:e7:15:36:b8:f1:24:e9:ea:c6:50:89:1c:84:83:
67:51:a8:5c:9b:aa:b2:d3:bb:90:d4:78:84:d6:b2:
a6:b4:57:db:9a:24:6d:06:d6:fd:2c:c8:70:2c:86:
a5:03:91:b9:33:db:a7:ac:b3:48:2f:bc:ce:91:fc:
ab:30:d0:25:e8:50:11:a9:da:d5:ca:86:33:f8:d0:
c8:47:88:4d:af:91:8d:8a:bc:9e:49:77:1b:bc:6f:
4c:2f:ac:32:6c:ee:14:9e:b5:9a:5b:c5:ba:09:ce:
93:97:34:27:0e:72:d8:7f:5f:db:c0:ae:04:7c:b9:
ae:32:39:f6:b5:c8:88:bb:06:91:90:ff:de:30:21:
d1:8a:82:89:4d:f0:5c:38:13:d4:a3:53:16:04:70:
17:3b:74:64:6e:9c:db:fb:b1:c2:87:f7:87:02:a9:
d6:c4:22:f9:bd:01:64:46:69:a6:ea:6f:9f:69:57:
41:bf:a7:15:d3:60:44:f3:33:5c:73:36:10:d4:85:
04:44:86:82:ce:0c:5c:d1:86:6f:77:fb:10:72:c7:
8b:57:34:29:13:d9:12:d7:55:59:33:20:e3:f9:00:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:67:4F:34:00:3E:EE:91:02:A1:8E:DB:07:43:FC:CB:F7:F1:41
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:f3:6c:65:2c:8f:39:35:7c:e0:bf:12:07:4f:8b:52:57:
a8:6d:ac:46:0a:1c:7e:af:f4:94:d7:81:5c:a3:89:4e:32:f4:
22:80:81:61:5a:41:19:a2:29:82:d9:27:a2:4b:c6:d6:17:50:
75:46:1a:af:87:f2:a9:f6:6d:bb:8b:d9:d3:0a:b0:f2:52:1b:
a9:2d:ee:47:3b:99:0c:72:c7:1f:5c:d2:b2:f7:a8:67:b7:e9:
89:ed:e3:a0:1a:95:18:a4:91:9f:1e:13:59:23:94:9e:d2:62:
2a:ab:2a:ad:ee:36:36:17:49:10:24:65:bf:4c:74:9a:57:59:
62:51:27:9b:8b:2e:d4:90:33:8b:12:a7:63:6c:e0:1c:bf:33:
fa:2e:2f:48:04:86:b5:78:95:fd:0a:b3:0d:8a:7c:41:aa:c9:
d1:06:79:d6:b3:b3:38:37:ed:06:eb:b8:8b:68:ee:b2:0e:34:
ac:21:23:b3:46:a1:85:4f:6a:b6:9f:a3:88:ac:04:47:69:fe:
75:6f:3e:29:09:44:20:68:00:56:8b:21:ea:44:6f:06:28:a1:
80:f5:6a:de:ab:7f:b0:a7:fa:f5:89:c7:df:d2:31:b2:f8:b9:
78:fd:e5:d7:4b:0e:03:30:5d:7c:1c:5c:51:61:7d:c6:9b:cf:
14:80:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 19:35:26 2025 by rpki-client