This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: 5+EqE57tXMsF0SUmwhfXrmiQX54L4GsHFDa8blAVvXA=
Subject key identifier: 58:EA:2F:DB:89:A2:EE:61:C6:4C:C5:51:12:79:90:19:61:DC:72:E7
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019B522A6E1B174E34E981AA20D482B80F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 1798
Signing time: Wed 24 Dec 2025 21:01:10 +0000
Manifest this update: Wed 24 Dec 2025 21:01:10 +0000
Manifest next update: Thu 25 Dec 2025 21:01:10 +0000
Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=)
2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: T4TWBSl45W285tufUlF2G/vpEkRPF5z/2HllVg1M6qg=)
3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=)
4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:2a:6e:1b:17:4e:34:e9:81:aa:20:d4:82:b8:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Dec 24 21:01:10 2025 GMT
Not After : Dec 25 21:01:10 2025 GMT
Subject: CN=58ea2fdb89a2ee61c64cc5511279901961dc72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:3b:68:71:25:a9:32:b3:2a:43:fe:41:94:
fe:b3:92:f6:61:e3:97:55:d4:23:8f:c9:41:fc:da:
a0:38:af:8c:73:e4:08:fb:04:7e:62:8f:7c:af:57:
56:af:35:e6:52:23:4a:8e:7f:17:59:54:f8:64:5a:
63:90:a2:1d:50:21:d0:9f:de:13:61:ec:d5:da:d9:
f1:b9:dd:80:e6:40:cb:b6:9e:5d:a9:a0:b6:99:3b:
1e:48:fb:17:3e:89:72:32:bb:47:cc:a4:7b:56:6e:
e8:99:48:c1:6b:af:c9:f4:2f:e3:bc:01:c7:41:05:
20:3a:68:e7:4f:cb:12:2b:af:5c:3a:ac:bd:7f:1e:
ad:36:ef:52:81:e0:2d:34:15:55:6c:12:38:dd:b4:
e1:32:02:85:eb:ce:56:9f:69:c6:95:08:74:e3:b7:
a3:96:d0:3e:b2:68:f2:e4:82:bd:3f:81:aa:0f:48:
05:1a:0f:9c:9e:56:fe:c0:52:8b:5f:f9:f2:61:46:
af:87:1f:60:f1:81:58:23:3c:e0:87:df:2d:d4:c7:
98:68:b5:c9:4e:d6:69:28:76:e6:44:74:73:b3:46:
ac:93:a4:e1:ee:3a:16:d3:b0:f8:13:9f:76:2a:78:
72:63:05:f0:92:98:6b:18:e0:e5:0d:24:34:35:f0:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:2F:DB:89:A2:EE:61:C6:4C:C5:51:12:79:90:19:61:DC:72:E7
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:3d:f1:f0:69:46:72:77:67:eb:75:dd:f4:7f:dd:ef:ae:
97:65:8c:05:23:d1:e4:30:37:80:e4:04:13:dc:46:f9:d0:db:
28:a3:10:30:fc:26:0e:a4:50:2a:f0:b8:18:ea:af:fc:2a:fc:
96:14:7f:19:fd:5e:bf:36:39:17:4b:a0:51:2d:01:57:48:81:
47:19:f0:70:f3:bd:c3:20:5a:92:e7:0a:ca:78:38:7a:9a:7c:
68:08:c6:a4:a6:b2:27:e1:cb:9d:c8:43:cb:77:b3:3b:5f:2d:
2f:a4:42:83:82:b2:b2:e3:ba:ef:6f:3f:d0:de:6f:39:05:d7:
28:5a:af:d9:6e:e0:2c:72:97:49:2b:af:72:4f:3e:55:68:35:
8e:46:30:29:02:de:28:54:67:1b:52:72:55:64:7e:c3:2d:01:
9e:9d:ab:a4:97:2d:f4:22:f8:2d:bc:ee:95:2b:48:10:e4:b4:
be:c7:f9:39:83:cb:40:50:39:93:31:a3:5d:19:a6:e6:5c:b9:
09:b4:73:ad:cf:88:85:f2:18:29:0f:3e:e1:90:10:e5:d2:d4:
ba:94:cd:41:1c:63:80:71:b9:85:4d:3e:21:6b:60:e1:82:df:
21:f2:eb:3e:c6:01:24:03:a4:b8:75:f8:c9:e3:c5:7d:82:be:
db:88:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:16:35 2025 by rpki-client