This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: dgLmfJP4SSmTkrS7xIOnazlgJ8ZfKZbBhqVidH/KEuc=
Subject key identifier: 04:F4:BC:F9:A5:2F:54:78:8B:FB:B7:73:29:40:3A:46:49:8E:58:F6
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019B53E179B2449F08DCCC18928378A7CA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 13DE
Signing time: Thu 25 Dec 2025 05:00:44 +0000
Manifest this update: Thu 25 Dec 2025 05:00:44 +0000
Manifest next update: Fri 26 Dec 2025 05:00:44 +0000
Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: /mbcpFCKCBt7Zx5cUF3f5PpYl9mrCQE03Kn4cKFOpXA=)
2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:53:e1:79:b2:44:9f:08:dc:cc:18:92:83:78:a7:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Dec 25 05:00:44 2025 GMT
Not After : Dec 26 05:00:44 2025 GMT
Subject: CN=04f4bcf9a52f54788bfbb77329403a46498e58f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:bd:2b:03:d7:83:f3:6a:cb:1b:97:fb:00:
bf:e1:04:f4:4a:05:af:7e:b9:c4:f4:6e:0d:b2:08:
42:79:17:03:9e:9a:20:6c:11:cd:f0:8d:1d:66:3e:
6d:34:4f:5a:e6:9d:5b:89:eb:5d:2a:55:59:f4:62:
2c:1e:0f:04:fa:0b:61:a2:73:8b:eb:45:dc:66:72:
af:3e:88:9a:db:27:ab:a0:18:27:ff:fa:a2:d3:de:
c4:95:53:41:c2:b9:be:1c:90:5c:f0:48:53:0e:f5:
c2:c3:97:70:62:e3:fe:d2:65:ea:16:58:f2:39:b4:
b5:83:e9:65:57:d7:4e:11:d8:56:e2:0d:95:9f:a3:
1d:42:56:2e:35:6c:33:52:60:b1:cc:40:c1:61:a1:
44:c3:63:c1:aa:3c:c4:4f:2d:cd:1b:b9:43:cf:34:
7e:c1:14:3a:3d:72:ee:99:f8:1d:61:c9:ee:59:b5:
e2:ba:69:cd:92:d8:da:29:2e:4c:ab:77:7a:b9:34:
75:70:7b:f7:f5:9e:b2:37:1c:db:c6:78:20:07:77:
33:28:f4:16:5a:78:4c:12:de:e3:d6:83:15:4b:f2:
ad:bc:82:a1:6d:9c:4e:43:85:5e:1c:54:11:4c:b9:
1b:1c:a7:2b:9f:fc:34:8d:15:ee:5c:18:c2:ac:bf:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:BC:F9:A5:2F:54:78:8B:FB:B7:73:29:40:3A:46:49:8E:58:F6
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:34:0f:96:28:1a:31:9b:dd:5a:65:da:f3:a7:fb:a4:cf:
9f:f8:f2:f4:88:d6:79:ec:d2:f6:36:5c:7e:96:97:bf:18:d0:
63:23:80:99:bd:9b:52:49:27:70:7d:2a:f7:b4:dc:a3:37:b5:
df:19:26:90:9e:92:c3:e4:f7:86:37:5d:01:a5:5e:35:2d:aa:
87:b9:60:b6:c0:18:11:a7:d0:93:48:71:28:31:cd:61:3e:85:
c7:b2:c0:e9:f9:60:ab:ae:a9:f0:9e:4c:db:cd:10:78:db:96:
d7:e4:5a:be:46:b6:c5:1b:4f:49:0c:42:d3:6f:c5:dc:10:8c:
32:17:14:c4:9b:85:e6:26:05:f6:40:f2:89:23:de:71:79:c9:
04:05:54:b7:0a:c7:d9:0f:b9:ce:66:3d:7a:88:9a:6c:e9:eb:
34:b5:24:dc:5b:20:04:50:0f:f1:a7:ca:92:61:d0:c5:fe:0f:
ff:3c:3b:f0:42:19:83:e5:4d:98:07:4b:73:ad:7a:84:fd:09:
8d:de:39:61:bb:77:dc:0f:25:93:82:eb:e0:8e:93:9a:68:72:
72:27:0d:04:5c:ca:17:bc:c8:a2:c0:87:96:7c:da:ad:b9:4f:
24:4d:ea:c5:15:91:bd:ca:bd:fa:c6:e4:ac:15:0d:08:fb:49:
e4:e6:ba:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtT4XmyRJ8I3MwYkoN4p8qMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx
MTdjZDIwHhcNMjUxMjI1MDUwMDQ0WhcNMjUxMjI2MDUwMDQ0WjAzMTEwLwYDVQQD
EygwNGY0YmNmOWE1MmY1NDc4OGJmYmI3NzMyOTQwM2E0NjQ5OGU1OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7C9KwPXg/NqyxuX+wC/4QT0SgWv
frnE9G4NsghCeRcDnpogbBHN8I0dZj5tNE9a5p1bietdKlVZ9GIsHg8E+gthonOL
60XcZnKvPoia2yeroBgn//qi097ElVNBwrm+HJBc8EhTDvXCw5dwYuP+0mXqFljy
ObS1g+llV9dOEdhW4g2Vn6MdQlYuNWwzUmCxzEDBYaFEw2PBqjzETy3NG7lDzzR+
wRQ6PXLumfgdYcnuWbXiumnNktjaKS5Mq3d6uTR1cHv39Z6yNxzbxnggB3czKPQW
WnhMEt7j1oMVS/KtvIKhbZxOQ4VeHFQRTLkbHKcrn/w0jRXuXBjCrL9vAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT0vPmlL1R4i/u3cylAOkZJjlj2MB8GA1UdIwQY
MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt
ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi
LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMs0D5Yo
GjGb3Vpl2vOn+6TPn/jy9IjWeezS9jZcfpaXvxjQYyOAmb2bUkkncH0q97Tcoze1
3xkmkJ6Sw+T3hjddAaVeNS2qh7lgtsAYEafQk0hxKDHNYT6Fx7LA6flgq66p8J5M
280QeNuW1+Ravka2xRtPSQxC02/F3BCMMhcUxJuF5iYF9kDyiSPecXnJBAVUtwrH
2Q+5zmY9eoiabOnrNLUk3FsgBFAP8afKkmHQxf4P/zw78EIZg+VNmAdLc616hP0J
jd45Ybt33A8lk4Lr4I6TmmhycicNBFzKF7zIosCHlnzarblPJE3qxRWRvcq9+sbk
rBUNCPtJ5Oa6+w==
-----END CERTIFICATE-----
Generated at Thu Dec 25 11:00:33 2025 by rpki-client