This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier: 3kUZIo55rC4K+03MADw2ou+qvdiX/UtvBlbbmWbWEfY=
Subject key identifier: 14:9B:A9:86:A2:5D:2D:3B:4E:76:A0:BC:23:62:4C:75:96:4E:C3:5D
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 019B3946020548F44F6A02882FEEA27AB04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number: 0974
Signing time: Sat 20 Dec 2025 01:00:47 +0000
Manifest this update: Sat 20 Dec 2025 01:00:47 +0000
Manifest next update: Sun 21 Dec 2025 01:00:47 +0000
Files and hashes: 1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: C+EaooPz1lNFJayx4aw2rtdpGFsmgiTPaoq3FabTj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:46:02:05:48:f4:4f:6a:02:88:2f:ee:a2:7a:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Dec 20 01:00:47 2025 GMT
Not After : Dec 21 01:00:47 2025 GMT
Subject: CN=149ba986a25d2d3b4e76a0bc23624c75964ec35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:c1:18:96:b3:03:4f:89:40:eb:8a:6b:0a:
0f:fc:cb:d7:3c:eb:74:81:c6:1c:35:a3:a4:e4:35:
69:8a:e4:3f:1b:7e:a4:1c:fe:f3:1d:96:74:f6:39:
76:8f:4c:24:46:d6:2b:39:f4:9a:43:bc:06:6e:68:
2d:ab:dd:5d:4e:f4:9a:3b:df:b3:bf:16:3f:5b:6e:
20:8d:c4:65:a7:52:ae:5c:54:3c:b6:e2:c9:ec:48:
9b:7c:08:7c:e2:bc:fa:ce:63:56:fa:b3:f0:98:ff:
97:98:e9:0c:f5:e7:e7:96:e7:20:d3:48:57:0c:3c:
7b:60:86:18:06:33:40:29:d9:a7:a7:0e:91:f4:d0:
88:9c:c2:d9:9e:55:77:27:f5:a7:84:49:53:dd:b5:
52:40:60:12:13:50:5d:da:39:d7:f3:b5:f3:e6:ed:
e2:57:3c:35:aa:be:39:30:82:89:71:a1:cd:be:b4:
a4:dc:ee:76:51:35:e4:a2:42:d8:0b:e1:c0:62:2f:
ad:48:ce:34:20:71:ce:af:c7:84:f7:d4:42:2e:8a:
9d:3c:76:a3:7a:ce:9c:fb:f7:d3:b4:90:0c:92:46:
c9:e3:15:d1:8d:d8:f3:63:75:90:0f:fd:e8:48:ee:
57:d4:df:a5:c5:4a:96:dc:d0:13:b5:d6:4f:1c:6a:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:A9:86:A2:5D:2D:3B:4E:76:A0:BC:23:62:4C:75:96:4E:C3:5D
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:57:64:50:9d:44:59:d9:10:19:72:31:ad:b7:24:8a:06:
87:29:74:5a:04:3d:a6:d7:4c:a3:fa:ac:55:86:56:be:87:2d:
f4:58:4a:e0:27:b3:51:38:84:bd:ad:73:26:99:13:f8:65:48:
a1:4b:55:89:21:90:43:95:d0:b0:19:78:e3:50:6d:05:9d:07:
43:52:fa:16:8f:a7:b1:6f:ba:c3:84:92:5f:f6:5a:9f:46:97:
ea:f7:6c:cf:2b:45:f3:85:99:f4:60:36:a8:cf:6a:33:76:eb:
17:2a:b9:0f:a2:aa:10:f6:05:26:c8:14:6b:3f:4e:73:90:ae:
ad:1a:f4:03:b0:e7:7c:42:9c:b7:43:07:b5:5d:fc:96:22:ae:
b2:09:c0:ec:e9:40:5f:d1:3a:1b:e5:57:b1:c4:6e:dc:97:16:
25:8d:6b:69:ba:9b:8b:35:3c:28:7f:1b:98:f8:36:a3:c0:f1:
e4:db:96:87:45:9d:af:e9:4b:ed:2b:68:81:34:5e:fd:76:88:
1b:e2:a8:73:25:db:01:ae:eb:0a:9f:f5:24:94:9f:f0:32:44:
4a:b0:34:6c:90:a8:43:8c:fa:be:c8:d1:54:ab:b0:f0:a1:e3:
6c:16:e9:a6:c8:41:9b:f0:6d:e6:56:2e:df:ce:3d:72:a2:d9:
5a:99:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:40:22 2025 by rpki-client