This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File: E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier: Vgb7E6/14grhWQfqy4UPw0JYAuT87u7f0FYIYYLF7yA=
Subject key identifier: 7E:CA:9A:89:2F:A3:5F:F9:78:52:2D:21:26:A7:60:30:F7:CD:CB:13
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019B435B8E669ACFCBC990A2732538F372E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number: 1359
Signing time: Mon 22 Dec 2025 00:00:32 +0000
Manifest this update: Mon 22 Dec 2025 00:00:32 +0000
Manifest next update: Tue 23 Dec 2025 00:00:32 +0000
Files and hashes: 1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=)
2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: h+CtpfwdhmP/+UqZbxEycXL+oFtPwlJ6wOKmmkRzzUg=)
3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=)
4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=)
5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=)
6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:5b:8e:66:9a:cf:cb:c9:90:a2:73:25:38:f3:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Dec 22 00:00:32 2025 GMT
Not After : Dec 23 00:00:32 2025 GMT
Subject: CN=7eca9a892fa35ff978522d2126a76030f7cdcb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:7e:b7:f8:6f:d6:88:25:21:0a:3b:b5:90:
1f:94:b6:a0:48:84:60:cd:44:f0:8b:04:c1:16:00:
4c:04:de:0a:38:3c:6a:10:0c:48:f8:a1:c3:e0:d2:
a7:07:00:a5:4a:63:73:e8:05:e8:4c:c7:3e:69:5d:
d2:56:11:9a:1a:8e:a9:8e:d3:0c:d1:60:3e:6b:71:
f5:64:1a:67:42:bf:5a:54:a5:a0:18:d5:2d:2e:3a:
b8:69:50:75:1b:22:ee:03:2e:a3:57:0c:c0:99:e2:
f5:42:34:98:29:7e:b9:b0:ef:59:92:f1:d9:25:54:
26:eb:6e:38:c2:41:ae:86:bf:3f:13:53:ec:41:6c:
6b:35:38:78:0d:4c:22:6e:b9:ac:57:f0:9f:0f:44:
fd:f0:8b:02:92:c7:35:43:af:01:a7:56:12:64:77:
ca:ca:ec:31:db:8b:cf:27:6f:c2:3d:53:5f:ee:a4:
7c:c7:e3:56:65:de:67:97:06:cf:11:ec:ea:61:89:
3d:4c:46:e0:b3:78:65:ca:52:66:4b:2a:18:51:ec:
eb:1e:33:d9:51:4d:76:97:fa:bd:7d:56:a1:1f:2f:
4a:d4:04:91:5a:56:e3:71:c7:47:ba:25:01:93:3a:
b1:c5:5f:5d:71:02:41:26:96:3c:eb:52:ef:53:e7:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:9A:89:2F:A3:5F:F9:78:52:2D:21:26:A7:60:30:F7:CD:CB:13
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:f5:d6:23:1a:f7:5b:de:19:cf:7b:f4:20:14:5f:d8:b0:
0e:39:bf:89:fe:50:db:ee:0d:17:68:0c:fe:f5:07:0c:cc:4e:
a7:3e:f3:33:98:5e:4b:d8:ef:29:25:94:ca:ed:01:da:76:51:
14:c4:b6:cb:a5:09:04:b9:d0:62:db:9b:c1:72:84:4a:b5:7b:
60:72:15:27:bc:27:91:50:26:e9:60:28:8e:e9:66:f9:d9:9e:
9b:dd:49:cc:68:f8:03:35:b3:71:28:37:7b:14:57:76:fe:41:
bd:8b:5e:46:3b:a7:f5:d4:1f:e9:45:63:9e:e7:b4:37:54:3d:
96:80:37:27:08:76:c6:11:e2:bf:e7:fe:3c:88:7f:a9:66:98:
45:49:b0:74:0c:4d:32:e9:ea:c3:1c:30:5d:7c:3d:81:c0:ae:
b0:2b:3a:48:f7:3e:a3:29:dd:6c:77:dd:98:6a:1d:fe:53:6b:
ae:17:2b:21:39:00:0e:d8:5e:7f:77:fd:1e:78:56:97:76:67:
f5:24:5d:63:7f:60:14:47:31:bf:01:c8:09:66:8a:dd:b5:c9:
6c:3e:a6:ca:b8:7d:e5:65:52:07:21:5b:47:bb:17:de:e4:3b:
97:18:ee:55:08:b6:3a:4a:37:e1:a2:6a:69:67:33:78:9c:c9:
d2:a4:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:20:35 2025 by rpki-client