This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: nPzfNk+/NcTpESwkQHQ6tXDGmzKYP+97DwQ0PuPtAng=
Subject key identifier: CB:39:F9:C1:93:0D:14:BC:A2:C9:17:FE:14:BE:F4:1E:42:60:17:01
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019B30436041FFC4127F54B65DB0113CB8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1789
Signing time: Thu 18 Dec 2025 07:01:20 +0000
Manifest this update: Thu 18 Dec 2025 07:01:20 +0000
Manifest next update: Fri 19 Dec 2025 07:01:20 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: c9xFSLGK+KAshZUDGujhF3xU+H/LZ2kJ8nwPxd8zgrM=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:43:60:41:ff:c4:12:7f:54:b6:5d:b0:11:3c:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Dec 18 07:01:20 2025 GMT
Not After : Dec 19 07:01:20 2025 GMT
Subject: CN=cb39f9c1930d14bca2c917fe14bef41e42601701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:46:28:37:71:27:94:05:cb:15:f1:51:1b:
c4:ab:62:16:90:5c:fb:34:cc:da:25:83:ed:07:ec:
9e:dc:86:f7:f9:ac:62:cd:29:b5:96:01:3c:4f:d3:
e8:7f:78:a4:b9:29:1e:97:8a:30:d2:85:c1:55:e3:
1b:83:e3:b6:28:03:8e:7c:5a:dd:5a:e3:25:6a:b8:
ca:0d:08:3f:3e:57:8e:19:d6:b3:98:ed:83:b3:11:
aa:ef:cd:6c:e0:9b:4c:9e:75:a6:1b:f1:51:5d:e3:
52:c9:18:d0:09:85:78:b7:99:5f:02:98:dd:19:5f:
62:19:5f:55:f3:10:a2:20:bd:2a:1e:80:80:3e:ca:
d0:a7:2f:04:df:94:54:aa:8d:c1:6b:04:d2:fc:e4:
5d:c9:26:85:73:fb:3a:a4:35:43:7c:f8:e4:fc:30:
f7:b5:e7:bf:6b:01:38:57:a1:84:63:23:7d:a7:c0:
8b:db:20:ae:19:46:6a:ee:87:a6:a4:fe:3f:e8:d8:
42:dd:57:de:c7:ab:f3:df:66:29:51:99:48:ca:ad:
6b:d6:0e:c6:89:cb:05:d9:de:60:14:0a:c6:1f:ae:
b8:35:f7:57:59:8f:38:89:25:4b:7f:81:5c:28:fa:
b9:e6:39:10:e8:3b:57:db:42:96:25:d1:19:bc:d1:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:F9:C1:93:0D:14:BC:A2:C9:17:FE:14:BE:F4:1E:42:60:17:01
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:57:4f:3b:60:b0:90:7e:e2:9b:3a:0d:45:76:95:c7:62:
00:f0:cb:35:b6:a5:1d:9d:1e:53:75:37:bd:c1:fb:89:e2:f3:
19:6a:b1:b7:10:00:24:69:6e:8e:c6:af:d5:8c:ed:b3:05:88:
84:77:15:36:6f:32:9e:f4:18:0a:88:ab:07:37:4e:97:53:5d:
8b:20:64:89:68:da:b1:e9:5d:5f:49:83:a2:59:0d:eb:e4:22:
ed:f3:3e:17:36:71:73:cf:ed:24:ef:81:92:5e:42:2f:bf:1e:
79:f2:69:7a:66:59:c4:21:06:30:b2:0f:09:32:ed:5b:8c:46:
81:51:61:37:a6:c2:3c:ab:b3:41:02:3a:2a:54:4a:af:99:f5:
45:c5:f7:2d:e0:d2:ae:30:77:39:4a:6a:bb:dc:be:47:7a:a4:
28:f0:7f:33:f2:e2:1e:f4:f4:e7:f3:6a:28:92:59:1b:63:5f:
48:b3:3a:c4:fa:b3:c6:89:1f:f7:2f:bf:5b:1c:e6:21:7a:49:
0a:91:4c:3b:a5:29:9a:e4:79:3f:6d:ea:22:e5:80:6b:a5:28:
69:a6:ed:d7:a1:0f:b5:48:9f:48:b0:ff:d7:39:18:71:c8:2d:
c7:02:85:00:ee:4a:ed:20:de:23:56:47:6a:0b:d6:60:5a:b0:
27:83:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 13:00:08 2025 by rpki-client