This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: jXDVa03+gWokBsiABzeXPqfa83z+syoUaZu44lXrDUU=
Subject key identifier: 7B:32:81:D2:62:A1:A5:7B:AD:BD:2F:02:AA:AB:F3:9F:5A:26:9D:E9
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019B3FB64675B837BEF311380DA2B909BF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1791
Signing time: Sun 21 Dec 2025 07:01:08 +0000
Manifest this update: Sun 21 Dec 2025 07:01:08 +0000
Manifest next update: Mon 22 Dec 2025 07:01:08 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: RrsyOQ33mU5mUgshsQeKEl3dO2Uv/mv4zDEmPpIcBL0=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:b6:46:75:b8:37:be:f3:11:38:0d:a2:b9:09:bf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Dec 21 07:01:08 2025 GMT
Not After : Dec 22 07:01:08 2025 GMT
Subject: CN=7b3281d262a1a57badbd2f02aaabf39f5a269de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:15:39:a0:81:d8:ab:57:38:99:00:97:86:
60:d5:f9:2a:ef:a1:e6:17:33:6c:a3:9a:9c:70:9e:
d8:a2:25:e9:ad:6b:03:ea:1d:40:c6:5b:e1:9a:93:
6a:e7:12:74:44:5a:1a:02:95:f2:4a:98:45:20:cf:
70:cc:b9:ad:97:c2:53:52:28:cd:08:84:65:8e:20:
1e:b9:25:de:b2:a4:99:59:94:a9:4c:04:ae:c5:2f:
cf:30:c8:7c:a0:52:86:ff:91:82:8d:89:8d:59:50:
22:7a:45:68:26:fc:e2:8e:a7:4d:e5:76:26:13:c6:
2b:22:15:e2:eb:77:e0:6e:02:a2:a7:b4:fe:16:dc:
67:82:1b:e7:5f:34:18:8d:ec:1b:ad:09:d0:71:1f:
3c:80:08:7e:c3:4f:21:63:6c:3f:bd:f9:7d:a5:9c:
c0:f6:76:62:51:52:44:31:be:36:03:36:8b:cd:ec:
01:8d:41:ef:dd:cf:8d:0f:58:7c:90:c1:85:92:e1:
19:bf:e4:cc:b5:63:8e:c2:b6:33:6c:0f:6c:64:e3:
16:36:74:8f:9c:86:fd:2a:f6:85:63:5e:f9:c8:bd:
9a:ff:bd:ff:fd:2e:be:18:a8:e5:a6:c9:78:01:29:
55:97:bd:75:65:27:34:9c:6f:77:0d:e6:f9:eb:43:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:81:D2:62:A1:A5:7B:AD:BD:2F:02:AA:AB:F3:9F:5A:26:9D:E9
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b7:7e:5c:e1:f6:e2:52:84:61:76:9e:3a:bc:51:10:c8:f2:
9d:5e:c4:ab:e9:fb:ce:fe:ee:88:6b:72:45:00:cf:f3:1f:cb:
69:c6:65:7c:0f:6d:22:61:25:18:0c:b2:78:a5:6e:b0:68:02:
48:10:56:cc:94:37:5e:81:86:85:c8:ca:c8:41:fd:90:f5:50:
59:96:33:da:22:ba:c9:d4:17:57:14:87:1e:8b:21:b0:b1:7a:
f7:ad:e9:9d:98:dd:04:6c:f8:d7:62:1a:b5:2d:ac:63:27:95:
72:f9:a4:b8:ab:4b:7b:f7:08:5b:05:d5:e7:b7:b4:b4:99:4e:
58:28:60:4a:4a:78:4f:39:91:fb:e0:61:a8:2f:78:f8:14:f9:
6e:01:0d:8a:0e:68:6c:f7:bf:be:d7:7f:94:0b:bf:43:24:9b:
7e:fe:f9:46:a2:66:23:2c:ef:a4:32:29:f1:05:48:41:5d:8b:
c2:a0:47:4f:b0:46:34:68:74:eb:27:79:e2:20:1e:d4:d0:46:
6a:7c:06:51:9e:e3:a1:82:fc:16:14:f3:f9:65:4c:c8:28:66:
b0:46:d9:ae:a3:95:a2:3d:42:e9:85:f7:45:80:b9:77:e8:d3:
fe:c4:bf:d5:f8:e8:69:6d:ce:01:10:0f:04:79:7d:e5:d0:2f:
63:b2:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:13:02 2025 by rpki-client