This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier: aKRtWAH0rwqM8s6dTEIWuffqpHms4c1avrlivxRPRrY=
Subject key identifier: 40:0F:51:E3:5A:B8:D9:CA:BE:1A:C5:1B:27:1C:A5:3A:78:BF:44:8E
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019AF31C36664AFAABF4D82213473DA7C818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number: 1767
Signing time: Sat 06 Dec 2025 10:01:43 +0000
Manifest this update: Sat 06 Dec 2025 10:01:43 +0000
Manifest next update: Sun 07 Dec 2025 10:01:43 +0000
Files and hashes: 1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=)
2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: wh8lbzFQefsMXjV2xcUd8iI9cUUjdGu6NXIw+svq+Bw=)
3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=)
4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=)
5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=)
6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=)
7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=)
8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=)
9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=)
10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:36:66:4a:fa:ab:f4:d8:22:13:47:3d:a7:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Dec 6 10:01:43 2025 GMT
Not After : Dec 7 10:01:43 2025 GMT
Subject: CN=400f51e35ab8d9cabe1ac51b271ca53a78bf448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:d2:6a:4b:30:86:62:0b:37:05:a4:a9:85:
dc:43:07:4d:dd:e9:81:d2:00:4f:9b:f1:5e:d7:ec:
bc:83:67:06:76:1d:73:76:f6:d0:6c:0b:4b:51:26:
bd:07:f5:be:f8:dc:e6:1e:98:f7:44:60:e6:9c:ca:
ed:23:d4:ad:ec:41:d5:2f:e5:30:76:7a:6a:e6:f9:
8e:dd:bc:8a:86:8e:f5:41:fb:27:a7:47:79:41:7b:
a6:8b:62:ec:d2:7e:99:82:c5:61:3e:93:8d:27:b3:
ed:53:32:07:d8:52:a4:89:4d:eb:ae:56:43:74:84:
c1:72:78:d0:04:19:e7:a0:a3:b6:c5:b8:d9:53:97:
73:a1:9f:11:eb:cf:51:51:60:73:cb:a2:be:d4:64:
e8:e1:bc:6f:38:9d:9d:69:67:ee:7c:ae:a8:8d:d0:
99:c2:e9:4a:62:0b:f7:35:2d:47:dc:02:60:e1:3a:
86:cc:63:0b:f6:f5:f5:4b:b4:85:ad:83:07:c5:f7:
77:07:69:87:27:80:b0:65:e1:85:10:e5:be:d6:1c:
bb:07:60:5c:dc:f8:f6:cc:77:b5:d0:e1:5d:8b:22:
77:e6:9c:f3:da:77:44:12:2d:ee:95:a3:5f:44:be:
4a:06:63:d8:04:23:7a:28:f6:46:17:25:cf:8f:02:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:51:E3:5A:B8:D9:CA:BE:1A:C5:1B:27:1C:A5:3A:78:BF:44:8E
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:e6:15:08:0d:a2:ef:3a:a8:5f:fc:ad:35:4b:ad:4e:3b:
ff:6f:72:8d:6f:b4:24:75:e2:ee:de:dc:55:82:16:a3:38:cd:
21:b9:9e:4e:1b:eb:2d:19:20:bc:5f:85:67:eb:e9:81:fa:12:
1e:e0:d5:9c:26:99:ff:41:17:56:d9:f5:0c:8e:97:ef:a0:4f:
2b:4c:64:11:f2:c8:2c:eb:65:4e:e2:ee:39:a0:ba:90:c0:ff:
dd:d1:10:26:9b:93:31:45:a2:33:2d:64:87:bf:f4:4c:59:fe:
f8:5f:43:87:59:5c:e1:2c:52:e4:8b:92:8a:79:e4:fd:e0:e6:
50:83:da:3d:ee:6a:77:2d:08:73:5f:6d:a0:3d:d0:9e:37:cf:
60:1d:24:66:e6:42:18:e1:34:4e:11:0d:49:78:42:f0:76:dc:
35:22:f8:d2:b5:7e:37:f4:95:ed:60:e9:ee:81:98:bc:7b:0f:
6d:1a:29:1c:82:94:1f:e1:bb:c6:4c:9c:32:66:6e:e0:44:fa:
1a:79:70:41:bf:ae:f6:8f:5f:c3:ab:7c:45:f2:4d:5c:e7:1a:
ea:c3:7a:04:13:19:18:91:ba:5b:1b:b4:aa:6f:21:18:b1:cd:
3d:31:82:61:e0:10:b0:0d:2e:f9:0b:63:d6:01:66:d7:d3:de:
36:94:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:08:35 2025 by rpki-client