This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: XGHRFVQ5CLxK/yVnm8e+Wl6ggHI3ITA/m57vYAz8Ch8=
Subject key identifier: 7E:26:71:A8:9B:26:62:2C:2D:D6:9D:9A:97:5B:F0:14:A1:9E:54:28
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019B2E54C7A8CA3872B5FA35AE72C5391C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1788
Signing time: Wed 17 Dec 2025 22:01:06 +0000
Manifest this update: Wed 17 Dec 2025 22:01:06 +0000
Manifest next update: Thu 18 Dec 2025 22:01:06 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: 9IfituCB7hHzUQJDwuCIrKMN14GxLoDjD65vzE00v04=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:54:c7:a8:ca:38:72:b5:fa:35:ae:72:c5:39:1c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Dec 17 22:01:06 2025 GMT
Not After : Dec 18 22:01:06 2025 GMT
Subject: CN=7e2671a89b26622c2dd69d9a975bf014a19e5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:dd:0d:3a:7a:65:dc:57:8c:df:8c:0d:a4:
6e:70:c0:94:01:05:ce:be:cc:35:b3:66:79:7f:97:
19:16:78:ba:eb:2c:fa:b7:b7:a7:35:94:0d:9a:4d:
73:67:59:ab:b0:f3:d6:cf:82:07:c5:19:8e:82:1c:
da:7f:8e:9b:db:2b:8f:92:7e:ba:c8:97:78:da:d9:
fa:42:10:65:78:11:4d:e0:19:2a:b2:4e:e9:45:ae:
1e:aa:52:cd:d5:21:ac:6d:82:8c:a0:b5:4e:b6:00:
c5:48:2c:91:d6:d9:0a:88:a1:56:80:d2:d4:a5:1c:
18:81:a2:fe:6e:8d:4e:bb:89:42:bd:1b:e1:34:f2:
e2:8c:34:f2:88:0f:43:b3:96:9c:08:fe:00:5b:7d:
91:da:8d:c6:6a:da:a2:0c:4d:5c:78:1c:ec:af:7b:
6f:fb:07:ad:fa:d9:19:60:4c:38:1c:17:a0:42:60:
b4:f3:6a:04:21:12:0d:97:19:2a:57:e9:08:eb:48:
56:f8:be:56:30:47:69:6f:e9:d5:70:2a:e2:b5:17:
43:14:c5:34:cf:5f:5b:75:ac:9a:69:51:77:a3:7a:
fe:75:d3:44:57:e9:a6:1d:75:df:2e:0a:52:c8:9b:
74:c8:27:68:0a:dd:06:38:bb:44:11:f8:bb:d5:11:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:71:A8:9B:26:62:2C:2D:D6:9D:9A:97:5B:F0:14:A1:9E:54:28
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:99:e4:78:1b:d2:b4:e6:7b:4d:24:b5:da:37:b4:03:20:8b:
e1:66:76:c1:a8:a9:03:3e:94:93:63:66:0a:bd:6d:2a:65:70:
c5:5f:99:78:7f:92:8f:b8:3d:c3:de:09:d6:2d:0a:db:46:09:
45:c1:e3:21:c5:e2:a9:23:33:6d:20:d8:87:cd:8f:18:53:83:
5e:86:cb:ab:66:18:71:35:e3:b3:e2:58:37:df:c0:84:37:b1:
51:ba:ca:49:27:7d:6c:d9:b8:30:5d:3d:84:99:5e:06:fb:4f:
98:94:42:3a:63:77:0e:f4:92:f2:92:5b:02:65:8e:e6:2b:7b:
70:f4:d9:a8:30:c5:0a:da:34:b8:2c:d8:e7:78:33:aa:4b:29:
87:dd:ea:3d:ad:7b:de:8f:ae:f5:60:1d:3b:df:c2:43:55:df:
fc:a4:35:e3:bd:cb:00:de:d2:63:61:64:c9:90:e6:0f:a6:2e:
98:56:ec:9b:01:c5:de:81:f1:51:eb:d8:cf:08:9a:d2:66:72:
a3:1f:62:75:5f:34:56:b4:4b:78:71:b9:68:ac:bf:10:c3:6d:
40:c7:fe:34:1c:1b:16:01:04:92:f9:9c:80:06:10:77:da:7a:
48:a3:a4:57:a8:bf:83:b9:d3:94:3b:b7:93:36:84:80:51:30:
c5:5b:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:59:04 2025 by rpki-client