This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: gBiRt0jHM44lKatMHSZwCqnUjGLMJekZnXPoPbq2mtg=
Subject key identifier: DC:ED:B2:C2:60:6C:EA:9F:91:32:6D:32:F0:DA:79:F3:11:21:71:CB
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 019B2EFA44EFAC0E76E84A20FAF32495A0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 1780
Signing time: Thu 18 Dec 2025 01:01:51 +0000
Manifest this update: Thu 18 Dec 2025 01:01:51 +0000
Manifest next update: Fri 19 Dec 2025 01:01:51 +0000
Files and hashes: 1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: gMDon59IERIUDorcxyFF1iTJbYhQohH/o9q67vOmc2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:fa:44:ef:ac:0e:76:e8:4a:20:fa:f3:24:95:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Dec 18 01:01:51 2025 GMT
Not After : Dec 19 01:01:51 2025 GMT
Subject: CN=dcedb2c2606cea9f91326d32f0da79f3112171cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:ef:41:42:65:b4:5c:ad:95:0b:c2:79:9a:
a9:e5:f1:50:f3:05:ae:fd:bf:47:5a:97:98:c6:12:
87:51:f4:d0:dd:5f:3f:96:b1:a5:d5:7d:a1:ef:50:
24:4f:d5:8e:2f:1a:e1:a3:98:31:64:fa:50:84:9a:
19:26:20:39:50:7b:ac:ce:38:d1:21:f6:2d:31:08:
8f:94:70:e9:c4:53:ba:1e:17:e0:81:da:5b:26:d1:
c8:35:e4:10:dc:f6:8a:78:35:75:9a:9d:e6:ee:d7:
e0:1d:84:a5:a9:c6:e4:a5:d1:81:22:99:18:03:5a:
7d:5a:f8:de:7f:c5:ff:1a:69:c2:00:fe:13:cd:9f:
2c:92:c8:57:73:e7:ca:6d:ed:56:1c:c5:fd:11:c0:
09:94:bb:28:7c:a1:9b:08:64:bd:f5:9e:ff:ad:ac:
ce:fd:41:cc:a9:04:7b:ee:12:a0:e3:4d:b8:f2:00:
39:17:78:ce:4d:33:68:d9:47:7b:21:fa:d6:80:d6:
c8:f4:eb:b0:98:85:df:09:e8:2c:46:2d:13:88:cc:
bc:b0:ba:49:13:e2:cb:25:7a:1e:25:15:73:c4:33:
7d:1d:62:dd:83:1d:5e:5f:ef:ed:8f:05:94:21:85:
78:4b:3f:a1:9e:e3:50:19:01:fe:71:88:3f:d4:19:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:B2:C2:60:6C:EA:9F:91:32:6D:32:F0:DA:79:F3:11:21:71:CB
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:13:b1:74:ce:c8:74:ca:f6:01:9a:16:7a:a0:9c:0e:c9:
e8:a9:1e:df:25:da:2b:7d:22:39:40:7a:ff:39:5a:09:f1:fb:
03:28:b7:e2:60:fc:49:ea:8d:ed:66:cb:06:f1:96:03:49:cf:
82:fa:a3:63:3e:5e:07:9f:6c:6b:79:e0:e8:de:58:3a:50:c0:
17:6d:3b:36:bc:48:ac:c7:54:7d:cb:d2:73:a0:3a:25:43:88:
cc:8d:0a:fd:e4:7f:83:a6:fc:b8:00:a8:4e:2e:5d:0d:ad:be:
89:55:5d:ab:e4:d7:f9:d8:01:cc:da:10:33:18:e2:13:c0:d7:
79:a1:50:98:df:c2:ba:1f:b8:70:1a:2c:df:1a:a1:fc:08:d7:
74:eb:9a:bf:ae:91:76:d7:e7:76:25:04:72:c9:d9:a3:a4:f7:
8d:9b:b0:20:11:69:41:b4:67:9e:c1:5a:76:0c:11:c9:63:54:
de:d0:f3:51:bd:88:ba:ba:bf:a7:7f:2c:22:d7:8b:e6:64:af:
87:c1:ed:32:b1:ad:13:4f:5f:2a:c5:61:49:00:c6:5f:50:1a:
53:2b:3b:4d:81:22:48:63:23:a9:e4:e5:26:0b:1f:65:8f:04:
e7:6b:22:3e:16:c0:c5:5c:d5:d2:ca:cb:3e:15:03:83:7f:a4:
e1:78:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:55:54 2025 by rpki-client