This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: FXzsZG2SlChllQODiMo+ikOJIAu4usQ5kDVcOBQrXEo=
Subject key identifier: 29:07:1C:2E:20:C6:46:88:37:A4:7E:6E:3E:A2:FC:BA:87:21:35:E1
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 019B3A8F64DD699B1CA7E676479199B66289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 0AF9
Signing time: Sat 20 Dec 2025 07:00:34 +0000
Manifest this update: Sat 20 Dec 2025 07:00:34 +0000
Manifest next update: Sun 21 Dec 2025 07:00:34 +0000
Files and hashes: 1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: asQqeY9mA1WrRUoBGbLSxz4G5DITxTMmZ3h9ck0Y+o0=)
3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:8f:64:dd:69:9b:1c:a7:e6:76:47:91:99:b6:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Dec 20 07:00:34 2025 GMT
Not After : Dec 21 07:00:34 2025 GMT
Subject: CN=29071c2e20c6468837a47e6e3ea2fcba872135e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:60:47:ef:d3:7f:c8:95:ae:6d:9e:7a:ad:
3d:5c:9a:2e:c9:f1:80:8d:17:b2:b6:07:7c:1c:80:
d6:ac:ce:6e:52:27:8e:91:69:34:56:a7:69:1e:19:
2a:a0:5a:11:57:7a:7c:33:5f:4c:30:61:f9:ab:ed:
58:00:24:37:6d:87:10:c5:4f:50:9c:52:e3:e9:49:
ee:f6:da:2a:92:26:05:ed:9f:69:b4:19:06:5e:7b:
05:5a:10:33:e5:35:78:7f:ed:04:47:e2:9b:3f:b6:
6a:1e:cf:47:9f:a5:2e:16:48:9b:4e:1d:1b:d6:f6:
97:74:e6:60:66:87:c0:c0:aa:3d:83:19:19:14:4d:
d6:4f:0f:bf:d0:95:1a:69:81:95:cb:b0:f2:6c:b1:
fb:dd:f1:81:29:23:3a:69:59:bf:fc:df:32:f1:60:
90:9e:37:d0:83:db:b8:2b:0b:ee:a9:15:b8:b9:5c:
2c:da:c3:d8:bb:af:35:de:00:21:28:ea:f7:14:28:
9b:6c:0f:04:22:3d:81:37:f1:56:04:d5:b6:cd:b9:
da:fc:e0:15:0b:cd:88:61:56:8d:e0:61:1b:da:13:
9b:96:5c:a1:d5:df:82:80:a3:f8:9a:e0:94:cf:dc:
0b:15:03:9c:ca:71:0c:27:18:65:73:01:dc:0b:a9:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:1C:2E:20:C6:46:88:37:A4:7E:6E:3E:A2:FC:BA:87:21:35:E1
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a2:7b:18:03:27:d8:27:37:04:20:ac:e3:e4:b7:b6:48:28:
cc:55:d3:8a:78:5c:0f:cf:80:0d:5c:cf:f1:55:29:d9:0e:d1:
06:6e:3b:b2:f2:3d:fd:e0:16:24:5a:cd:b3:13:dd:a7:f7:53:
49:82:4b:47:50:e2:6e:e5:87:90:c0:9f:bc:5f:ba:21:e1:0d:
bf:ca:e6:60:39:4a:5e:bc:30:31:80:b5:17:ea:be:b6:fd:48:
63:03:16:de:2c:6e:56:19:03:e6:0a:be:3c:c0:dd:c9:74:89:
23:42:69:5e:d6:68:08:5d:8f:bc:c1:66:ce:df:73:1d:b2:f9:
e4:7d:eb:c9:90:31:38:e1:30:3f:72:95:15:1e:df:b8:c0:2c:
e4:cf:c1:8a:8d:36:07:80:d7:a0:dd:eb:d8:f8:01:fb:67:c6:
fb:af:d9:4c:26:ce:cc:9b:29:0e:b1:de:da:e0:1d:fc:8a:e6:
c1:bc:b2:97:51:5b:39:31:21:f8:6e:c6:e9:ae:db:a4:30:13:
36:f7:54:83:da:2a:22:bf:05:9a:e4:3c:53:81:3a:aa:07:ed:
a4:fe:7e:a6:40:5c:fc:43:e9:56:e3:87:f5:e2:f0:2e:00:a7:
71:a0:a0:41:7d:4e:ce:e4:03:b0:9e:66:21:c1:6f:39:37:e5:
a1:a0:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:02:38 2025 by rpki-client