This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File: e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier: Zc0K3UGh580atlBz8rwY99zcE8jYw9949rJF6bR73Sc=
Subject key identifier: 62:E4:F3:95:A7:A4:C3:7E:8B:2E:E5:38:CE:6E:60:86:95:57:14:E4
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 019B0D80DC0A7AB26BBA9607CBD65DF6815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number: 1777
Signing time: Thu 11 Dec 2025 13:01:47 +0000
Manifest this update: Thu 11 Dec 2025 13:01:47 +0000
Manifest next update: Fri 12 Dec 2025 13:01:47 +0000
Files and hashes: 1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
7: e71RJyBktjssZjwClroR216iOMA.crl (hash: kXygVoTGtZE32ig38FdrkyACzGaWztNH3TU6Mm32XLw=)
8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:80:dc:0a:7a:b2:6b:ba:96:07:cb:d6:5d:f6:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Dec 11 13:01:47 2025 GMT
Not After : Dec 12 13:01:47 2025 GMT
Subject: CN=62e4f395a7a4c37e8b2ee538ce6e6086955714e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:18:75:64:07:d7:de:9a:b7:f4:06:f8:e9:
7c:e7:59:d8:48:d2:29:52:58:5d:38:7e:01:e8:c3:
58:d2:19:95:0e:63:b8:14:39:b2:75:51:fe:a5:d2:
09:c2:30:54:8c:32:79:29:33:2d:4c:fb:ee:8e:56:
13:b7:04:97:4a:ef:91:3e:be:3f:92:37:68:c3:c4:
04:e0:0d:3b:ad:2f:8f:1d:c7:c3:9f:9c:86:dc:6b:
e0:76:e2:de:5f:be:e7:d9:06:cd:fb:09:dd:90:7a:
4f:85:1b:14:81:d2:fc:8a:c5:67:3d:c5:0f:98:7c:
26:c4:1b:bb:68:1a:bd:ac:3b:be:7e:f0:ef:68:ad:
16:46:dd:75:21:2c:42:f9:8a:ab:99:3d:35:7b:41:
45:b8:ef:12:33:6f:12:7a:fb:dc:e4:45:06:db:ee:
3d:ec:21:b2:c4:7b:56:4f:87:d1:4e:8d:6e:ec:9b:
11:dc:50:7a:cb:af:f9:17:bf:f3:1d:c2:d6:b7:1e:
5e:b8:4c:e2:5d:ef:91:0b:4d:fe:c5:ec:07:f7:c7:
9a:32:99:5e:68:da:47:19:91:d0:7d:07:87:0c:0c:
52:4e:fc:01:b2:88:aa:c1:87:94:9c:cc:f5:64:7f:
49:66:e8:26:c3:9a:a4:8e:c0:4e:9b:dc:27:86:48:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:F3:95:A7:A4:C3:7E:8B:2E:E5:38:CE:6E:60:86:95:57:14:E4
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:54:87:99:ec:24:78:48:01:72:69:e3:24:5f:e2:82:4f:
71:a6:8b:62:c9:70:e2:32:e9:d8:30:78:df:db:fd:ba:32:66:
1a:0f:fd:84:f6:2a:7e:cd:fa:11:a8:53:3e:51:37:8c:73:ef:
b7:d2:d2:da:77:d5:ec:99:9f:42:0e:4f:8d:ba:4c:cd:c4:f2:
60:ff:ba:d4:89:29:e7:4b:95:d7:b2:0a:35:bc:b9:ee:93:4c:
7a:08:26:c1:5a:d7:b5:34:92:d7:88:30:ee:43:5e:06:6e:10:
12:d8:d8:a2:7d:68:b9:b7:59:2b:a4:71:66:e2:22:65:3f:3b:
04:73:0e:0e:de:70:8c:b7:13:81:7f:1e:19:56:98:4f:03:dc:
bf:5a:91:4b:6e:35:19:45:c1:c9:5a:45:4d:36:d2:3c:3b:38:
9d:a1:c6:d7:63:2f:5a:3f:c8:5f:a9:fa:9c:12:5a:16:7c:3c:
9a:3a:3f:23:24:6a:8d:9a:7a:e7:a8:f5:00:f1:ee:f9:17:1f:
31:82:87:c7:b2:f6:1b:f8:b0:01:8c:c1:4d:7b:8a:cf:2a:1e:
4f:31:c8:7c:fa:38:f8:8b:e4:8a:3c:54:92:20:b9:62:e4:3a:
1d:38:93:bb:78:7d:43:69:98:e7:bf:95:c2:56:9c:ad:8b:25:
7f:90:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 17:32:42 2025 by rpki-client