This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File: mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier: YBUVk1feDOi2DUp5YekhAtrMYpa/yeMoHekxOOYcauY=
Subject key identifier: E1:28:5A:FD:9A:28:EC:3D:E4:7C:2C:3F:F3:CC:5C:A4:E9:DA:C8:A5
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer: /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial: 019B3DC76698F31A5611D3F515C761CFC0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number: 11E4
Signing time: Sat 20 Dec 2025 22:00:36 +0000
Manifest this update: Sat 20 Dec 2025 22:00:36 +0000
Manifest next update: Sun 21 Dec 2025 22:00:36 +0000
Files and hashes: 1: CtjT3jVnXWmD83KR_4TWffaI4JQ.roa (hash: flK9Ib6/h/dfOz32Mluz/WYLhTwywQZxRxjgsE0wek0=)
2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: 8tbTaQL8pw9Smi4KJwhI1Njzgu+KWM9xkNkwtDVjD9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:c7:66:98:f3:1a:56:11:d3:f5:15:c7:61:cf:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Validity
Not Before: Dec 20 22:00:36 2025 GMT
Not After : Dec 21 22:00:36 2025 GMT
Subject: CN=e1285afd9a28ec3de47c2c3ff3cc5ca4e9dac8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:6a:6e:ad:8e:2f:2b:60:86:e1:69:f4:65:
fb:75:58:ae:13:b5:e5:04:29:67:89:7d:78:50:30:
ac:22:10:67:ab:03:d6:d3:b1:3a:c0:f0:97:6e:44:
cb:1f:43:30:5a:f4:da:88:72:eb:2b:bf:55:3f:5b:
60:16:e8:d7:9f:1c:d1:77:c0:ab:b3:f7:ab:bf:3a:
66:59:08:44:99:bc:c0:91:12:31:ee:26:45:15:09:
c9:d5:37:6a:b5:3b:0c:4a:12:b1:de:35:31:ee:54:
07:57:c4:5e:6f:96:3b:43:83:75:f4:2c:45:38:e3:
26:66:1f:92:57:39:92:da:e9:39:64:c6:27:2a:43:
1c:4e:83:fb:da:48:5a:a6:c0:18:d2:ad:29:3c:af:
e5:5b:c9:1d:e8:4a:02:80:79:0a:61:f2:1e:0b:c2:
7a:80:38:13:78:b4:42:e0:24:8f:97:01:07:68:27:
3b:08:1c:b3:52:3b:39:f0:3b:9e:76:23:bd:19:51:
65:8c:b4:85:9b:3b:de:93:e4:8e:fb:d9:a8:a4:6d:
76:b7:9f:81:c2:49:bb:ec:74:e5:0b:cb:c0:9b:a6:
dc:c4:d7:21:f0:66:49:7c:10:83:d7:9b:03:7b:ca:
43:4b:31:24:83:2f:98:2a:28:d6:91:6f:49:8b:e2:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:5A:FD:9A:28:EC:3D:E4:7C:2C:3F:F3:CC:5C:A4:E9:DA:C8:A5
X509v3 Authority Key Identifier:
keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:02:dc:00:09:e3:ed:c3:82:24:21:97:88:c0:31:ff:83:
f9:88:1e:c8:34:a8:6a:3a:e9:65:69:70:ef:67:6d:d0:fc:05:
f7:28:e0:11:4b:b8:92:e6:ab:47:de:a4:8e:97:17:65:98:88:
f7:22:23:0e:37:5d:8e:54:0f:01:50:ba:a4:c0:f8:91:26:b2:
eb:61:07:6c:73:f7:24:27:6e:1c:0d:08:5a:33:1e:6b:4d:d9:
20:41:cb:29:fd:e3:c9:f1:de:65:c3:59:db:38:79:19:63:14:
33:d6:91:19:5a:52:38:9e:b1:3f:f0:9f:3b:1c:ad:1d:2a:5a:
d1:8d:d6:ff:eb:e5:06:f8:62:60:41:35:bb:75:b0:a9:d9:55:
7f:47:ab:49:1d:62:ba:00:31:55:57:2f:17:4a:ea:63:d8:db:
f4:14:59:62:ea:e8:de:33:fa:51:54:98:26:af:f6:c7:52:0c:
e8:d6:98:0c:14:4c:f3:fe:34:ba:65:0c:5a:a7:a0:b7:95:21:
36:9b:14:dd:22:2a:1f:71:b3:91:74:fc:c8:80:6a:5c:c5:f6:
0c:6d:bf:62:b5:7f:01:96:41:72:0a:f8:75:a9:64:fd:21:1d:
ff:e8:02:25:b9:50:9b:20:a9:95:88:4b:eb:63:3a:01:6e:ba:
e1:c1:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:26:47 2025 by rpki-client