This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: G4IAcRcTCLn9kTqoE9PJAXOHTXbtjObhcgRZgaftBg8=
Subject key identifier: BA:52:9A:AA:CB:5C:AC:75:3D:B0:F4:03:94:74:0F:12:95:9B:C5:A6
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019B24081617A910E7FDAC2DFB46DA1CC8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 179A
Signing time: Mon 15 Dec 2025 22:01:08 +0000
Manifest this update: Mon 15 Dec 2025 22:01:08 +0000
Manifest next update: Tue 16 Dec 2025 22:01:08 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: ZsXR9UaYSnJTuMFRw+eXve6hAHs2V7ik69wr9ISxzaE=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: RtFkcQWnyl0eaibrPpjcyJQVmQ8.roa (hash: YgjUDnpDx+gs6FXBtdlBFjgKFgPz6ZlzO+NWFvR2njc=)
4: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
5: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:08:16:17:a9:10:e7:fd:ac:2d:fb:46:da:1c:c8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Dec 15 22:01:08 2025 GMT
Not After : Dec 16 22:01:08 2025 GMT
Subject: CN=ba529aaacb5cac753db0f40394740f12959bc5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:00:ee:88:86:36:c6:86:eb:6b:e2:3b:e6:
39:91:9c:fa:f0:18:3d:26:f1:17:30:82:85:b6:df:
04:6a:6c:64:62:e1:67:09:c2:96:ef:ef:e4:57:60:
4d:bb:e9:19:93:de:f6:18:8f:29:d2:af:d7:4d:33:
9d:85:50:d7:80:1b:6e:6e:70:ea:00:a8:0e:47:05:
14:76:c5:f2:8a:1c:a3:22:26:d1:19:2b:61:bc:c1:
a8:b3:26:4c:2a:f0:c3:cd:4e:fd:b7:64:91:fb:e5:
ca:fd:b2:a2:5e:31:e4:b8:29:4c:bb:87:0f:0b:d5:
bf:0b:9e:09:02:11:49:8d:ff:eb:90:bb:bd:ab:56:
03:f6:a0:32:4a:f5:8f:77:9f:ce:bd:46:e2:2b:f3:
36:5d:16:cc:ff:3e:5f:97:49:d3:17:05:da:33:7c:
f5:92:34:0f:ad:5d:d1:04:de:e3:29:a5:b2:2e:31:
31:eb:cc:73:34:4c:22:da:22:21:60:a3:f2:9e:a8:
15:3d:81:61:2d:8d:1d:32:ac:53:98:2a:25:1b:f4:
26:4a:20:3f:bb:ce:4d:bb:7f:2b:db:b2:1d:9d:fb:
13:83:23:d2:f5:35:07:b7:2f:0b:f7:78:7d:d1:94:
ca:cd:c3:1b:17:7b:9d:f5:e3:eb:33:b9:c9:1d:b8:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:9A:AA:CB:5C:AC:75:3D:B0:F4:03:94:74:0F:12:95:9B:C5:A6
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:57:67:24:7c:1b:1a:6c:8f:20:35:30:ef:32:0d:88:2f:45:
4b:93:28:ca:e0:56:fd:3f:11:e2:a2:be:c9:09:67:4a:c9:40:
f7:ed:a7:e0:97:17:32:1a:a4:18:0c:70:db:85:58:d4:79:5a:
b5:62:a3:f5:cb:ca:81:69:e2:8d:b7:10:97:56:72:36:d1:05:
2e:6d:6d:cb:38:62:6d:9d:b8:99:88:fd:23:78:c7:a8:78:44:
95:97:66:c5:31:31:0f:61:79:45:23:37:cb:76:98:42:d5:ad:
68:eb:fa:d7:e1:cf:e6:5d:3d:12:8f:99:71:52:bf:02:02:8a:
75:7e:76:af:7f:6b:5d:45:8b:6a:07:dd:3e:b0:47:4f:1a:ad:
99:17:49:26:43:f8:2d:07:f4:96:07:66:da:78:ab:a7:eb:30:
98:2c:07:a8:06:68:e8:4b:f1:58:0c:dc:c8:0b:4f:fd:0c:f7:
a9:79:d2:8f:51:6a:0a:6d:26:40:fb:39:7a:47:dd:d9:0a:67:
36:e1:10:aa:90:f9:97:96:c4:5f:38:4a:07:f6:2f:6e:ef:e4:
ce:2d:20:ee:e4:94:ad:86:c8:02:1b:51:68:0c:f7:49:ec:f3:
07:12:45:e7:61:7a:0d:05:5e:c9:3a:36:67:26:b1:59:64:2d:
35:1d:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 02:35:41 2025 by rpki-client