This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: 1xgQeYgVqzxiUJyvlwUxGQaiDq+KMnvcsfCAexUKSjs=
Subject key identifier: 02:3E:46:EC:6A:78:D6:41:23:28:D0:BB:4F:FB:42:72:C1:24:42:70
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 019B43257FD64653D691086CA3A73795503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 178C
Signing time: Sun 21 Dec 2025 23:01:29 +0000
Manifest this update: Sun 21 Dec 2025 23:01:29 +0000
Manifest next update: Mon 22 Dec 2025 23:01:29 +0000
Files and hashes: 1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: YWndXRymPwO01SQCyeqzvE5VBCwjiPXOrS7EGYytAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:25:7f:d6:46:53:d6:91:08:6c:a3:a7:37:95:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Dec 21 23:01:29 2025 GMT
Not After : Dec 22 23:01:29 2025 GMT
Subject: CN=023e46ec6a78d6412328d0bb4ffb4272c1244270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:d4:00:33:e7:5c:c9:18:91:61:6a:b5:4f:
7d:a7:17:f2:6a:80:b6:91:43:5c:9f:c3:80:ed:1f:
c0:92:f1:c3:aa:20:59:5e:d0:1f:26:3c:d3:62:86:
70:92:a3:52:fa:ef:b0:f2:f9:89:bf:20:ff:15:bd:
a2:2e:5d:15:58:cc:a5:e9:a1:57:8b:d0:62:cf:30:
c4:19:a0:51:b7:a2:8f:2a:a8:14:06:d1:9b:f2:90:
5b:a4:a9:0c:a1:cc:48:94:fd:b0:f4:53:80:c4:80:
c5:39:bb:00:29:49:56:1f:c6:45:be:30:8e:f8:c9:
44:05:ef:aa:fc:40:1c:8a:70:8e:ae:d1:7d:e5:1a:
33:8e:9b:d6:73:4d:46:36:b7:8d:7c:38:17:37:09:
b1:58:78:f9:e9:58:b7:c5:35:29:06:8f:4b:4b:32:
33:0e:09:16:a5:ee:7e:20:f1:4d:5d:42:df:69:e7:
75:58:fa:ad:77:a8:04:44:b3:57:ae:e1:b7:a6:2f:
8b:5b:9f:12:40:31:6b:f3:73:ed:da:da:47:d6:aa:
15:18:49:d6:d6:ae:22:65:88:bc:5d:c8:e1:99:0e:
f2:5e:fd:60:b3:3b:c9:18:2c:de:58:00:21:72:47:
1e:c4:44:d0:cf:f7:cd:77:97:35:bb:7c:92:99:9d:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:46:EC:6A:78:D6:41:23:28:D0:BB:4F:FB:42:72:C1:24:42:70
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:16:02:6d:75:54:08:ae:8e:d3:5d:4f:5d:3e:ec:07:75:
11:85:60:48:8a:f7:d8:f4:0f:2b:bb:06:a4:f5:8c:f9:0f:a7:
64:e1:0c:76:f5:f4:98:7e:d3:2f:cc:4e:99:c7:5e:86:a5:fb:
00:11:c3:e7:55:59:eb:08:c8:2c:eb:f5:10:b9:04:96:42:d7:
6f:72:e3:f9:6a:90:83:dd:84:3f:48:01:b7:1b:15:cf:47:58:
82:45:e4:4d:80:06:7a:ce:68:31:65:47:9a:1f:2a:e5:4e:de:
18:f3:b2:a3:15:b1:86:95:b3:67:a5:2d:05:f9:04:af:75:d2:
04:6d:7b:14:fd:6b:c2:72:b2:4f:1f:2a:14:6b:32:b5:79:0d:
1f:8e:58:32:fa:2a:0b:35:ed:98:1d:95:14:71:c7:d3:28:2f:
0c:00:6d:ab:49:d7:a5:c0:ab:8e:09:5b:9f:8f:77:fb:2c:c1:
1d:8b:53:3d:9e:b3:d3:b9:69:a9:bb:67:a2:93:dc:b2:13:08:
39:d3:32:5b:57:ed:2d:b8:b0:d6:65:d6:62:d5:76:2b:31:ec:
80:31:82:75:c5:e2:2c:1c:bc:23:76:97:cb:bb:64:fd:c5:f9:
17:b3:cd:c3:fb:bd:f6:51:22:e3:28:23:e4:8e:e8:d0:65:bc:
a0:c1:44:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDJX/WRlPWkQhso6c3lVA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmE3N2VlNTJkY2VkNTI3Mzg5M2E3MWI5ZGJjYTNjNmU5
NjQ5NWYwHhcNMjUxMjIxMjMwMTI5WhcNMjUxMjIyMjMwMTI5WjAzMTEwLwYDVQQD
EygwMjNlNDZlYzZhNzhkNjQxMjMyOGQwYmI0ZmZiNDI3MmMxMjQ0MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLUADPnXMkYkWFqtU99pxfyaoC2
kUNcn8OA7R/AkvHDqiBZXtAfJjzTYoZwkqNS+u+w8vmJvyD/Fb2iLl0VWMyl6aFX
i9BizzDEGaBRt6KPKqgUBtGb8pBbpKkMocxIlP2w9FOAxIDFObsAKUlWH8ZFvjCO
+MlEBe+q/EAcinCOrtF95RozjpvWc01GNreNfDgXNwmxWHj56Vi3xTUpBo9LSzIz
DgkWpe5+IPFNXULfaed1WPqtd6gERLNXruG3pi+LW58SQDFr83Pt2tpH1qoVGEnW
1q4iZYi8XcjhmQ7yXv1gszvJGCzeWAAhckcexETQz/fNd5c1u3ySmZ2FmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI+RuxqeNZBIyjQu0/7QnLBJEJwMB8GA1UdIwQY
MBaAFHlqd+5S3O1Sc4k6cbnbyjxulklfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgt
M2YzMGNhMDg2ODcyLzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgtM2YzMGNhMDg2ODcy
LzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3UWAm11
VAiujtNdT10+7Ad1EYVgSIr32PQPK7sGpPWM+Q+nZOEMdvX0mH7TL8xOmcdehqX7
ABHD51VZ6wjILOv1ELkElkLXb3Lj+WqQg92EP0gBtxsVz0dYgkXkTYAGes5oMWVH
mh8q5U7eGPOyoxWxhpWzZ6UtBfkEr3XSBG17FP1rwnKyTx8qFGsytXkNH45YMvoq
CzXtmB2VFHHH0ygvDABtq0nXpcCrjglbn493+yzBHYtTPZ6z07lpqbtnopPcshMI
OdMyW1ftLbiw1mXWYtV2KzHsgDGCdcXiLBy8I3aXy7tk/cX5F7PNw/u99lEi4ygj
5I7o0GW8oMFEvw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:17:25 2025 by rpki-client