This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: CWilSqwSHYU7Df1ueTJuTQtYEtay3VH0zYE+wrTibhk=
Subject key identifier: 6F:68:FA:6F:B7:4D:FC:07:22:B1:91:58:CF:E5:7E:17:A8:94:BD:EA
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019B397CEB4B4A3B61A7E1EFD94F9532DFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0F19
Signing time: Sat 20 Dec 2025 02:00:46 +0000
Manifest this update: Sat 20 Dec 2025 02:00:46 +0000
Manifest next update: Sun 21 Dec 2025 02:00:46 +0000
Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: yCUAzOgT4ZdxQw5/EHTu4uEJQjBLSHrulAb8Xl4GJQ0=)
3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:7c:eb:4b:4a:3b:61:a7:e1:ef:d9:4f:95:32:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Dec 20 02:00:46 2025 GMT
Not After : Dec 21 02:00:46 2025 GMT
Subject: CN=6f68fa6fb74dfc0722b19158cfe57e17a894bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:85:d5:4f:d5:b0:d1:06:1a:3c:76:49:78:
d2:f4:d2:48:6e:7c:00:11:25:db:eb:c0:1d:c5:32:
0f:e5:ce:46:f3:d1:a8:22:0c:6d:1d:5e:be:10:d2:
5f:e6:4e:35:d7:7d:98:fb:03:d6:2a:ba:f2:c4:d7:
33:51:44:ac:05:33:42:41:f1:b9:38:d3:8a:88:25:
d0:ed:7b:87:eb:40:34:87:9f:00:60:4f:6e:a7:8f:
80:c4:82:8e:c0:a4:1b:63:02:9a:af:ff:80:e3:e2:
fa:9e:f2:28:88:b8:fb:36:15:cb:a4:74:d1:37:c1:
fc:05:74:2e:b7:5a:22:03:64:ae:7f:fd:de:02:f1:
b1:d4:47:9c:f8:0f:4e:9f:4b:47:18:a1:f6:ca:d3:
b1:ab:d5:15:d9:58:40:2f:d0:da:3a:8f:b6:67:23:
72:88:ad:02:94:f9:e9:31:d7:a1:64:da:e7:dc:4d:
e6:1f:04:03:9e:fc:fb:b2:55:89:99:ac:1c:c4:83:
90:da:41:22:08:7f:56:16:ec:5e:78:a6:82:ac:f9:
0b:93:58:f2:a2:76:96:18:0b:f7:9e:09:b1:c0:1d:
5f:77:18:5c:79:83:3d:c6:7e:11:89:a0:11:c5:ff:
db:80:eb:1a:81:8e:f1:f3:8f:2f:89:6e:e5:34:68:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:FA:6F:B7:4D:FC:07:22:B1:91:58:CF:E5:7E:17:A8:94:BD:EA
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:55:13:4b:1c:14:8c:11:c1:f8:c5:7b:9d:1d:1d:8c:16:59:
cd:10:78:a1:4f:e6:bc:d8:a6:d6:24:25:b3:87:9b:20:38:5c:
cc:62:02:a2:8e:5b:fd:f8:7b:b4:f1:ae:55:64:77:19:e2:4a:
d6:e6:6b:20:87:a5:40:6a:38:1b:a8:67:dc:b7:00:f2:ad:e6:
1b:93:25:98:1e:e9:c2:4f:5d:5b:3a:6a:19:2a:1e:30:d5:a0:
d8:20:4e:31:f5:36:d7:df:e9:f5:bb:e0:80:98:ef:47:cc:05:
90:d9:de:4d:41:04:5e:04:56:4b:e3:55:74:3c:e8:87:cf:25:
12:53:7f:25:43:18:44:98:52:e4:5f:0c:fd:5a:5c:8e:4f:d1:
e8:7d:ac:c7:0b:d1:49:71:d5:df:4b:2c:7b:fd:e9:74:fa:a5:
a7:ab:83:11:87:49:2c:09:b2:82:43:32:85:7f:52:65:7b:d3:
98:ee:83:34:e8:88:80:62:6b:67:03:1c:9a:2f:0c:9e:d8:cb:
f5:0b:2e:23:c9:22:9f:73:ee:20:03:f2:2d:a6:48:a5:c3:1c:
f4:67:7b:36:a2:3f:ab:7f:42:8a:6c:93:23:45:3c:1c:15:76:
0f:72:da:05:63:ed:cf:50:da:58:9a:c5:0b:4a:d9:c5:0c:fc:
8b:cd:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:53:15 2025 by rpki-client