This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File: EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier: j8MMWOMxr2cnPTFCOvNn4zw5D080w1U0nmG2QZcX+1I=
Subject key identifier: D3:50:A3:FC:04:F8:B4:E5:E7:B9:C3:50:F2:1D:24:AD:66:14:90:FE
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial: 019B3C7DF55CF146C6E6B5BB7D2817669862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number: 178D
Signing time: Sat 20 Dec 2025 16:00:46 +0000
Manifest this update: Sat 20 Dec 2025 16:00:46 +0000
Manifest next update: Sun 21 Dec 2025 16:00:46 +0000
Files and hashes: 1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: XBf6T/OlAA6WvV5laMyzq094yGuQ+DyQbjEqnRt+yO0=)
2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7d:f5:5c:f1:46:c6:e6:b5:bb:7d:28:17:66:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Validity
Not Before: Dec 20 16:00:46 2025 GMT
Not After : Dec 21 16:00:46 2025 GMT
Subject: CN=d350a3fc04f8b4e5e7b9c350f21d24ad661490fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:cd:59:a1:d8:10:33:62:37:1f:9a:96:d0:
9e:71:0c:7c:93:15:a4:a5:cc:af:cb:90:45:36:92:
fa:7c:b7:eb:33:8e:d5:2e:cb:94:01:49:00:3b:02:
b4:26:91:42:9f:c4:4e:d9:c3:d4:51:82:93:d5:a0:
6e:61:3f:07:e3:8c:76:d5:35:ea:3e:6e:9c:bc:65:
e0:bc:ea:6d:5f:2b:de:e6:88:42:2f:f4:1f:1b:4c:
74:57:00:47:52:f2:29:17:0f:cb:a1:fd:95:43:b3:
5b:a9:c0:68:aa:34:2e:82:54:9f:41:52:fc:8e:f8:
12:0b:36:fe:d3:eb:70:d5:3f:5e:f9:f9:e8:7c:c2:
a0:ab:07:be:a4:60:df:ae:75:ac:a3:d9:4f:8b:ef:
58:8e:aa:e9:b9:f5:48:ac:09:45:b5:e6:68:69:b8:
a0:7f:75:bb:38:09:7c:d4:5b:17:fc:29:39:d6:9c:
e2:14:99:15:83:46:96:80:dd:7a:af:1a:6d:b3:1e:
b2:e7:c3:4a:75:4e:51:2e:4b:d1:64:2c:47:88:f8:
d7:54:56:f6:9d:97:65:32:fd:a0:f3:5b:7b:5a:b5:
62:d9:18:45:2b:fe:07:ff:34:7c:d8:06:6b:30:7c:
e5:50:25:f4:63:a8:71:b6:9b:0c:97:67:aa:1a:da:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:A3:FC:04:F8:B4:E5:E7:B9:C3:50:F2:1D:24:AD:66:14:90:FE
X509v3 Authority Key Identifier:
keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c2:a5:b1:1f:58:f3:4a:f5:cb:cc:c3:d7:4d:17:5c:7c:2c:
96:46:8c:95:aa:1c:c3:44:cb:6d:8c:67:a0:a6:22:bd:e6:aa:
57:75:31:ef:bf:5f:c2:6d:ff:1d:18:de:5f:b3:dd:b6:29:74:
4e:70:97:4a:28:96:af:04:74:3c:f6:62:2b:8e:7d:23:d7:c8:
27:62:30:6a:71:56:6b:29:bb:be:68:85:f3:e5:c5:27:96:e1:
ac:56:c2:0f:c6:a9:85:50:46:01:df:1d:fa:d8:10:29:1c:0b:
8c:dc:13:db:95:29:9f:81:61:04:9e:01:7a:79:e6:4f:de:76:
b8:8d:85:34:07:d5:1a:a6:fe:c3:3b:cf:b2:cb:a7:93:ba:71:
58:4f:40:34:c2:e4:b5:8b:80:d0:a7:d7:8c:4d:77:64:de:9a:
b8:fc:b5:ea:cf:41:d8:9e:bb:de:ea:63:f8:61:59:8c:cf:5b:
dd:d7:bb:f1:8f:5d:f5:e5:87:a8:2d:47:56:61:02:68:ed:04:
79:0e:81:f8:0b:e8:a9:01:e8:18:ab:2d:75:e6:f2:7d:42:f4:
c6:d2:6f:40:2e:d7:04:49:fb:39:eb:00:01:ea:b5:c9:5b:c7:
ac:75:a7:0e:31:7e:b8:5e:e4:cc:f9:63:b8:6f:8c:46:80:8f:
4e:39:45:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8ffVc8UbG5rW7fSgXZphiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzBjZDhlMTNjODZkOGVmODM1YzFhYWM3ZDVmOTUzNDU1
YzAzNWMwHhcNMjUxMjIwMTYwMDQ2WhcNMjUxMjIxMTYwMDQ2WjAzMTEwLwYDVQQD
EyhkMzUwYTNmYzA0ZjhiNGU1ZTdiOWMzNTBmMjFkMjRhZDY2MTQ5MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19rNWaHYEDNiNx+altCecQx8kxWk
pcyvy5BFNpL6fLfrM47VLsuUAUkAOwK0JpFCn8RO2cPUUYKT1aBuYT8H44x21TXq
Pm6cvGXgvOptXyve5ohCL/QfG0x0VwBHUvIpFw/Lof2VQ7NbqcBoqjQuglSfQVL8
jvgSCzb+0+tw1T9e+fnofMKgqwe+pGDfrnWso9lPi+9YjqrpufVIrAlFteZoabig
f3W7OAl81FsX/Ck51pziFJkVg0aWgN16rxptsx6y58NKdU5RLkvRZCxHiPjXVFb2
nZdlMv2g81t7WrVi2RhFK/4H/zR82AZrMHzlUCX0Y6hxtpsMl2eqGtoHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNQo/wE+LTl57nDUPIdJK1mFJD+MB8GA1UdIwQY
MBaAFBIwzY4TyG2O+DXBqsfV+VNFXANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQt
MDFmYjQ2YTQzM2UxLzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQtMDFmYjQ2YTQzM2Ux
LzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMKlsR9Y
80r1y8zD100XXHwslkaMlaocw0TLbYxnoKYiveaqV3Ux779fwm3/HRjeX7Pdtil0
TnCXSiiWrwR0PPZiK459I9fIJ2IwanFWaym7vmiF8+XFJ5bhrFbCD8aphVBGAd8d
+tgQKRwLjNwT25Upn4FhBJ4BennmT952uI2FNAfVGqb+wzvPssunk7pxWE9ANMLk
tYuA0KfXjE13ZN6auPy16s9B2J673upj+GFZjM9b3de78Y9d9eWHqC1HVmECaO0E
eQ6B+AvoqQHoGKstdebyfUL0xtJvQC7XBEn7OesAAeq1yVvHrHWnDjF+uF7kzPlj
uG+MRoCPTjlFMQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:33:16 2025 by rpki-client