This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: FyMQssv4BH6lwPbsY4jPWw1HMB3k6ZBx0gkCaphZLfE=
Subject key identifier: 47:7D:2F:29:95:54:D3:0C:68:C8:4F:2F:2D:A6:79:55:6E:EA:86:83
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019B3C7FC7E240A27D8EAE9193A5D96780A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 1484
Signing time: Sat 20 Dec 2025 16:02:45 +0000
Manifest this update: Sat 20 Dec 2025 16:02:45 +0000
Manifest next update: Sun 21 Dec 2025 16:02:45 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: XBKWl1vcYpPEYeYtWfavmqThW7w1yGqubBUuPvEusCw=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7f:c7:e2:40:a2:7d:8e:ae:91:93:a5:d9:67:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Dec 20 16:02:45 2025 GMT
Not After : Dec 21 16:02:45 2025 GMT
Subject: CN=477d2f299554d30c68c84f2f2da679556eea8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:26:23:23:ed:62:56:0b:16:42:4a:ee:c9:
da:7f:b2:9c:27:8b:8c:40:fa:b4:ff:83:85:fe:5e:
cf:e6:de:b4:0e:04:b3:ec:ca:03:7e:3f:d6:82:c1:
52:a9:57:46:b6:70:29:e1:57:70:2a:68:c2:c5:36:
a8:92:cd:c9:80:33:cb:d6:43:c0:dd:e9:37:ca:8b:
a0:a2:6e:89:32:2a:c0:da:e8:9d:3a:b9:27:4a:e2:
e7:28:eb:8d:4b:10:70:6a:d9:d9:90:ef:9f:53:77:
f4:81:91:8e:25:11:45:bc:fd:0e:74:6e:56:5b:02:
41:9b:60:29:ec:40:92:8e:df:d8:77:33:84:07:ec:
b5:c8:2a:e4:64:11:59:de:cb:e7:d2:6a:dc:d8:c6:
6d:2b:19:52:5e:c6:8e:89:36:a7:01:cc:85:1e:ee:
14:36:7a:cc:5a:d1:30:80:63:3f:56:ac:82:42:57:
0b:6f:2a:8e:90:1e:47:e4:5d:18:f6:a7:8b:13:e1:
62:a6:ff:a7:b6:66:f0:1c:01:c3:a0:8d:da:eb:f6:
e1:3e:20:29:e6:1d:b3:f8:d7:ca:79:87:7e:3d:d7:
2a:a6:0d:4f:b1:30:9b:fe:1c:5a:37:39:82:2e:7f:
a7:68:59:2a:a0:19:01:b0:69:90:b6:ba:96:56:88:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7D:2F:29:95:54:D3:0C:68:C8:4F:2F:2D:A6:79:55:6E:EA:86:83
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:49:96:07:73:d5:83:96:34:ea:57:d2:27:f8:56:8d:15:
35:63:80:f7:de:40:2b:6b:b0:39:27:84:dc:0c:fc:69:16:23:
85:c4:6e:79:c6:71:b4:69:7c:93:a9:83:2c:5c:12:65:33:91:
b4:ed:45:2d:3a:88:05:a5:2d:f5:fd:f4:8a:c0:30:43:8e:f0:
ba:5e:e6:31:79:00:27:92:9a:26:4f:3b:77:63:09:fa:3b:8e:
d6:d9:eb:12:bc:52:51:c2:a0:19:3d:b5:af:7e:41:c2:17:18:
d5:4d:97:ec:00:ec:95:38:f9:c3:b6:36:d7:22:ed:67:85:e4:
30:3f:1d:24:5c:02:b3:69:d9:35:8c:57:92:41:7b:f8:c8:63:
3d:22:ae:8c:3b:a4:b1:14:ad:2a:5d:aa:f7:fc:9a:31:d1:b7:
0f:2f:22:f0:8e:e3:76:fa:35:a3:84:82:b5:6f:18:41:bf:77:
28:b7:c6:10:5c:89:58:ac:e5:76:1f:d1:b7:59:47:bc:7e:d0:
b1:c9:5e:55:41:5a:fe:59:fe:20:53:8e:8d:bd:8a:15:d4:81:
4b:cf:f9:de:2d:bf:26:15:cd:16:08:d4:73:9c:9d:b9:60:f5:
c2:7c:ab:9a:96:ea:93:00:f4:b3:1d:0d:04:0c:2f:07:64:4b:
52:1c:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:16:33 2025 by rpki-client