This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier: yszz+os/erFKPjo4KFy33J4yY6/u4yray2AtVOjrs8w=
Subject key identifier: 74:F7:BB:93:93:09:BD:E9:D7:9C:11:99:0B:BC:A6:A6:48:52:EF:FD
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial: 019B51F3567C423C3B0D084576DE079EDB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number: 1793
Signing time: Wed 24 Dec 2025 20:01:00 +0000
Manifest this update: Wed 24 Dec 2025 20:01:00 +0000
Manifest next update: Thu 25 Dec 2025 20:01:00 +0000
Files and hashes: 1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: 6qsve8Seb7zLxU/m2/z4I7ido+nqMg+ubQHOIdHvNUc=)
2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:f3:56:7c:42:3c:3b:0d:08:45:76:de:07:9e:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Validity
Not Before: Dec 24 20:01:00 2025 GMT
Not After : Dec 25 20:01:00 2025 GMT
Subject: CN=74f7bb939309bde9d79c11990bbca6a64852effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:6f:de:7a:b4:bb:29:d2:90:58:a6:55:26:
91:91:8c:6a:76:b4:4f:46:c6:ec:f2:76:9c:70:1f:
8b:17:14:ce:17:cf:13:a2:c5:e5:ec:3a:c5:71:e4:
3b:1f:74:cd:f9:71:69:87:51:67:94:5e:97:cb:d1:
18:c9:85:96:47:15:c5:98:3b:0c:e1:77:f1:2f:7d:
23:11:cf:22:b8:b5:8c:c1:18:5b:ce:2b:97:e6:83:
5d:b9:ee:92:f6:dd:ca:e6:78:7b:e1:a6:a6:fd:03:
61:58:3b:96:f7:d5:0a:41:11:71:b9:26:11:1c:8d:
6a:32:b6:64:28:48:23:32:ac:b1:d2:41:73:6d:16:
73:5f:89:bc:14:39:a4:d8:5f:1b:4e:13:3b:0d:57:
5f:c9:b2:6e:a8:25:d1:cf:5c:cf:91:26:cb:4f:5c:
98:35:38:36:90:c7:cb:b7:b9:30:b6:89:fd:85:46:
d4:cb:63:03:5b:3f:74:37:be:95:79:d4:09:1b:a6:
cd:b5:09:d5:ed:2e:6d:19:1c:a0:c8:52:60:68:10:
74:a9:5c:75:b9:d3:7e:c2:27:ea:bc:69:15:82:a0:
ff:1e:bf:13:00:66:64:cf:f3:87:6d:90:cd:3d:45:
7f:41:c3:f5:7e:e5:2b:40:72:f5:1f:dc:35:a4:f9:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:BB:93:93:09:BD:E9:D7:9C:11:99:0B:BC:A6:A6:48:52:EF:FD
X509v3 Authority Key Identifier:
keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:e5:18:a3:81:ae:c5:54:de:66:3d:29:4a:37:22:a2:e7:
78:60:1a:ec:65:bc:cd:e5:c8:ac:20:ee:2d:1f:56:ba:41:84:
f7:a3:20:71:27:b2:a0:3d:3f:46:ab:c9:57:77:29:bd:2f:1e:
82:cd:f0:c2:cc:fb:15:7e:69:65:8f:a0:61:81:e4:09:86:57:
ef:bd:26:67:67:f0:87:fb:4a:ef:71:27:0b:3a:c4:7d:e1:1b:
93:f4:39:77:ff:7b:c5:02:56:81:18:3e:0e:8b:ff:a5:39:ac:
2c:e8:44:1d:7d:19:ad:eb:9b:dc:1d:91:bd:61:57:bb:6a:00:
e1:9e:e4:26:2a:2e:3c:83:38:35:82:ee:38:7c:48:a5:49:6a:
a9:23:6a:3c:b8:c7:58:5e:44:73:08:40:79:03:1c:ad:20:73:
75:69:35:db:37:47:be:15:93:a5:ff:ba:86:9f:09:4f:bb:93:
49:d4:e7:b3:f7:7d:5a:50:c2:8f:85:af:5a:cf:00:e4:8f:c9:
21:1f:e7:00:a1:50:dd:45:87:5b:73:a1:eb:22:9f:ac:c0:e2:
7e:d5:d5:5a:f6:0d:18:9b:04:2c:3d:76:f0:53:37:05:3c:a9:
6e:92:4d:27:45:4c:86:99:5c:fe:3f:95:36:ae:1b:57:72:eb:
e8:19:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:35:37 2025 by rpki-client