This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier: oQCmptZkAfjv2G8xcwf9qJcuE+q0Ph6fe73EIYomf/c=
Subject key identifier: C0:3F:A9:D9:50:14:31:C2:23:A3:62:3B:F1:9D:FB:4E:8F:35:B1:6A
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019B3BD902100D4FA75D2234F49FE24A8ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number: 02BA
Signing time: Sat 20 Dec 2025 13:00:36 +0000
Manifest this update: Sat 20 Dec 2025 13:00:36 +0000
Manifest next update: Sun 21 Dec 2025 13:00:36 +0000
Files and hashes: 1: 36QCi9gQh9tE74apIP0AUk7-Sr8.roa (hash: bFg76n5+s3/DgXURQWdNC73y3/o3Eq9hbscTlV6BsZY=)
2: 3qMnzegnJFRMdqj9_RxrliQV9LM.roa (hash: irVxMyTLI0mdYOfT78wXitWNxqzDfC5hTPTHdWrdTqM=)
3: B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa (hash: aaAdtl6DDoVRo6SJjsYxRJmj8KdTthVqgWUA1J2mPj4=)
4: Bww04LBwxBB1y6rGH757C_xud3s.roa (hash: quqNEZs1nsjXNRnY683lQOPEfOLi5g4tury87348zBY=)
5: G_L9-k7kl5xJGnz4egCFDtxxaVg.roa (hash: JY4YV9TmnbicGUYv06ZMCkyc0EHzSeH2663bLnF/bYk=)
6: GztDcv1wOIshQxIOLwJqTJDSyGw.roa (hash: qFDHdyDAkwjk96ej9WLJA+3FYjQLPrqczmkb2Ix2yaY=)
7: HgNlDxtVI_FZHJ-yg5V2bGuq6V0.roa (hash: /mLah/dk5n4ZBua8a6QDuH7hNHn7+jWSIk14BHGnCao=)
8: JsojVSNGW_6MQsylEevXw37Un4I.roa (hash: uyp9vv7Icxi5xYgKVSefYCJmGLo/DyClRuzzUQ+0KJI=)
9: KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa (hash: 2iXYEdSOmwm3bODYrmY9cPs6umm1lNKA4+/nGQ/v4XA=)
10: NzHA_YldHM1AjXEdEx-U24OI_CU.roa (hash: uhp5UTG2CO0f9oiB5g6MPk1HvLgJdaZyTM5hgsLSVoM=)
11: S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa (hash: ZfGKjrYT3zpMcFluD61+mKTayU59cDNHTpqd96ROkBo=)
12: TTBErUL6vl3lSqjsByIpaDDgE6U.roa (hash: 4weVW558ecVuX1Zae4lOHzv/p4kGkETVv2eYyWWuW94=)
13: V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa (hash: Y9QvU3WPEkqlp1r7xScFCfD4/+c84H5zgBo5GTZPNnE=)
14: X9YZAIxPcs8Z6oidZTveLJBkHvw.roa (hash: VGs1xBJh0QfEsITLoj2YbluQOUz4PYPnk7zZRSZl2BY=)
15: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: WpaUOpvHhrjOLkovEqyc0o2gj9RkI8ms3r10XfY7ynQ=)
16: f-A38n-d5fyud_iYPeLHbx-sbUk.roa (hash: 2hwdLgzaTlm4Tton83Slz9wiJFdMuYjI3gUlE3qoav4=)
17: iiDcyFQb9cAke3RBNMr7qfXmkyM.roa (hash: kzpg6p53Rvmk3JRHQ44t9CSv2lHV19rFFQGgUo5Zijg=)
18: krfc0WNLUx6hJvboRiV5gk-WnVc.roa (hash: K3F7v7vct+kdtxcJdeS+2oWlYV9pZORsvbv2DJKsK9Q=)
19: m9PcA8-OwFepKS47hmN4AxlvQMY.roa (hash: Qpa25XlvI/sDlWgjx0yG7D6gCCao+tLoIa+GJUVplR8=)
20: oDclA6yqobvsaqJJT443zmBke-0.roa (hash: yZKlumYkdmAJnO3OghUN+CNhxfFsX0VhB+tnf4Y6t1E=)
21: p_sKryOv5jzqHsQkohs_QPsmrqk.roa (hash: 9GNjv6WXXhnS29imH4SS0PVJW8Ywrh+W/DxVrG7PAyU=)
22: rQtfM8PefL_hK-A8NPTHmlIKSLs.roa (hash: f2wwDmx2Wkc12eQdKNSHdJlIoMOj8WliCAuLil9HxNE=)
23: t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa (hash: eM+E0i9nzeMdj+coKh8ToZipyJgk/cpYwH4HOyuu2b0=)
24: zbIAsFwD5ePJdM-wyedaiDucJ4s.roa (hash: FD7BXNbP86/URBegfFq5gaF2zYtItcl8bvGrxblk8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:02:10:0d:4f:a7:5d:22:34:f4:9f:e2:4a:8e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Dec 20 13:00:36 2025 GMT
Not After : Dec 21 13:00:36 2025 GMT
Subject: CN=c03fa9d9501431c223a3623bf19dfb4e8f35b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:fc:4f:41:70:f9:1d:eb:00:ba:92:d7:6b:
2a:35:e7:95:47:9e:5c:af:a1:fd:75:83:e0:d2:95:
9b:d7:d5:44:60:4a:9a:03:20:e7:d0:d4:2c:dd:a1:
5a:88:11:57:a8:71:50:29:7c:a2:35:cb:89:f8:61:
a5:76:b7:d5:3b:94:65:8c:80:cb:34:74:ed:31:9b:
69:e4:3a:72:a1:39:d4:e9:04:3f:3a:29:61:14:2e:
20:63:0f:22:dc:75:da:21:29:dd:4f:a8:84:44:3e:
85:7b:28:83:d3:52:49:32:81:fb:68:a9:b5:69:ce:
e8:c8:59:1f:88:46:af:7b:fa:3d:13:42:cf:98:e3:
d9:22:4b:a5:00:60:e0:5b:5a:93:a1:be:c6:87:81:
1f:d2:ff:66:12:14:63:aa:6d:ae:89:4f:9b:6c:b6:
24:cc:f1:74:5c:71:c7:1f:c8:46:6b:d0:86:bd:25:
22:ed:6f:54:b9:9a:b0:a2:ca:28:60:9f:1a:b5:52:
7c:f0:1b:8e:60:1a:91:eb:2b:d1:ac:69:1b:ae:15:
8e:92:84:ea:4b:70:62:31:5f:2f:c4:02:f0:86:08:
ca:f3:6c:fb:4d:73:5e:16:1a:2b:0f:a5:19:3a:cb:
7a:e5:91:e5:3d:3c:76:5d:db:a1:60:f4:b8:ec:36:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:A9:D9:50:14:31:C2:23:A3:62:3B:F1:9D:FB:4E:8F:35:B1:6A
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:24:5d:ff:55:95:3d:a1:a2:66:4f:b4:4b:cb:a2:5e:56:95:
73:d8:bb:2a:5a:97:6c:bc:fe:57:29:8b:13:10:77:42:b7:35:
37:ef:62:9e:0a:de:d8:86:f5:ac:da:ed:dd:b1:c9:8e:d2:2c:
6b:ab:c5:ea:80:b9:33:87:53:58:9e:1c:d1:68:88:ef:3f:76:
40:ed:53:4a:c2:65:85:a4:e5:26:17:76:4c:96:c5:cb:c1:70:
71:af:30:e5:e6:27:5d:63:6e:9f:61:88:f4:3d:0e:66:aa:3a:
3b:a7:bb:81:37:21:df:cd:bf:5f:fa:73:e9:bc:9a:2d:19:85:
f9:44:f7:79:ca:cd:0c:8a:4b:71:93:67:f9:f6:80:58:9a:48:
6d:63:54:83:fb:fe:e2:86:f8:99:66:41:1e:a2:00:79:56:7b:
4a:3e:c4:4d:d6:19:32:8c:ff:ed:c1:9e:86:8f:71:ed:1c:62:
f4:3a:05:a9:e7:b5:38:58:31:71:4c:4c:1d:fa:8d:99:f1:3f:
c5:bd:f0:34:35:a5:4f:4d:37:f2:f7:25:32:5f:65:4d:93:49:
c9:d4:b2:00:2a:34:52:70:5e:f5:8b:ff:4c:0e:f7:6f:73:f6:
ea:f3:ec:99:24:e7:21:c5:b8:b3:e9:3d:43:fb:0e:22:5a:dd:
38:3d:eb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72QIQDU+nXSI09J/iSo7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUxMjIwMTMwMDM2WhcNMjUxMjIxMTMwMDM2WjAzMTEwLwYDVQQD
EyhjMDNmYTlkOTUwMTQzMWMyMjNhMzYyM2JmMTlkZmI0ZThmMzViMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s/8T0Fw+R3rALqS12sqNeeVR55c
r6H9dYPg0pWb19VEYEqaAyDn0NQs3aFaiBFXqHFQKXyiNcuJ+GGldrfVO5RljIDL
NHTtMZtp5DpyoTnU6QQ/OilhFC4gYw8i3HXaISndT6iERD6FeyiD01JJMoH7aKm1
ac7oyFkfiEave/o9E0LPmOPZIkulAGDgW1qTob7Gh4Ef0v9mEhRjqm2uiU+bbLYk
zPF0XHHHH8hGa9CGvSUi7W9UuZqwosooYJ8atVJ88BuOYBqR6yvRrGkbrhWOkoTq
S3BiMV8vxALwhgjK82z7TXNeFhorD6UZOst65ZHlPTx2XduhYPS47DZR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA/qdlQFDHCI6NiO/Gd+06PNbFqMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCRd/1WV
PaGiZk+0S8uiXlaVc9i7KlqXbLz+VymLExB3Qrc1N+9ingre2Ib1rNrt3bHJjtIs
a6vF6oC5M4dTWJ4c0WiI7z92QO1TSsJlhaTlJhd2TJbFy8Fwca8w5eYnXWNun2GI
9D0OZqo6O6e7gTch382/X/pz6byaLRmF+UT3ecrNDIpLcZNn+faAWJpIbWNUg/v+
4ob4mWZBHqIAeVZ7Sj7ETdYZMoz/7cGeho9x7Rxi9DoFqee1OFgxcUxMHfqNmfE/
xb3wNDWlT0038vclMl9lTZNJydSyACo0UnBe9Yv/TA73b3P26vPsmSTnIcW4s+k9
Q/sOIlrdOD3rYA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:29:04 2025 by rpki-client