This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: z4IZ1E+hCa5P/F4PCVGlUEhu7IMY8qwgGd5sA/9juMk=
Subject key identifier: 78:DA:DE:5B:E3:59:B1:46:9D:32:AD:26:EF:1A:8D:83:81:D4:8A:CB
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 019B413709B89D067EFCE7EEC9ED3C0A6AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 14:01:24 +0000
Manifest this update: Sun 21 Dec 2025 14:01:24 +0000
Manifest next update: Mon 22 Dec 2025 14:01:24 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: 8U8m8Jlbw1LvsFdzBC5jXyHcI9XvtPw039q9JnrA78Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:37:09:b8:9d:06:7e:fc:e7:ee:c9:ed:3c:0a:6a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Dec 21 14:01:24 2025 GMT
Not After : Dec 22 14:01:24 2025 GMT
Subject: CN=78dade5be359b1469d32ad26ef1a8d8381d48acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:f1:3b:ef:0a:72:04:c6:62:c9:19:6c:33:
7a:b0:ce:8a:5c:46:e9:f3:2a:d4:bc:e2:9b:e5:da:
f2:74:79:22:11:93:fd:1e:80:c7:d3:2a:71:28:32:
5f:c9:19:16:c0:f2:6a:23:e1:46:c5:93:a1:ae:00:
8e:b4:b6:87:d4:00:43:54:a0:c9:5b:0f:d2:f3:4a:
ea:42:92:4d:86:db:b2:8b:d8:48:94:42:47:6b:9f:
aa:e8:e4:ea:71:8b:f4:05:e5:51:ed:52:97:38:59:
c8:8f:de:d7:c9:5e:b9:8d:d0:ac:eb:4c:8b:38:d7:
1a:ad:88:42:cd:0e:6f:47:dd:30:a2:04:41:f3:1a:
cc:eb:c9:83:3a:bf:02:20:cc:f2:30:9e:ac:2b:c8:
35:b5:ca:1c:16:57:b6:0c:d5:ac:5b:88:3f:11:56:
f0:35:53:9a:2b:6a:f0:ea:a3:5f:11:b6:19:b7:dd:
10:73:4a:8b:2f:8d:3d:87:ed:fe:89:a9:14:5b:4f:
22:bb:d1:bd:73:09:d3:3e:d7:ba:b2:a9:a5:eb:b6:
1f:7e:a7:76:1c:b7:d1:7c:1f:50:26:38:40:38:fb:
3a:60:9a:47:b1:b8:bb:be:23:c5:4e:00:71:0f:98:
08:19:a5:50:cf:c3:b3:2c:98:ab:04:e3:28:95:c8:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:DE:5B:E3:59:B1:46:9D:32:AD:26:EF:1A:8D:83:81:D4:8A:CB
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:87:36:62:89:e6:97:df:52:16:9d:4c:2f:c3:0d:82:f9:d9:
ca:5c:31:c7:2b:00:59:23:e2:8c:3b:5b:8b:cb:b4:cc:1d:04:
d5:2d:bc:ea:82:6b:c7:c9:7d:4a:70:49:c6:7d:22:10:77:cd:
13:f2:80:94:c5:43:61:f1:97:0b:e1:00:a5:ee:86:04:d7:4f:
48:b7:22:e2:c9:ee:f8:61:11:02:8d:2a:cf:5a:cd:fb:d7:00:
25:92:1b:27:57:78:3e:ad:43:1a:ab:57:52:15:ff:45:17:28:
67:fe:88:2a:4c:4a:cf:9b:7b:2f:04:d6:3a:1e:5e:7c:c8:36:
b8:7b:70:9b:31:3b:a5:48:77:c3:28:bb:f8:16:7c:b9:28:b4:
01:7c:ad:20:fd:ea:0e:ea:96:a7:56:1a:53:36:5a:c2:29:85:
bc:a7:75:29:20:22:53:a6:d4:91:d8:7c:6e:bc:d4:5a:17:88:
6c:09:98:72:69:89:9c:0e:66:a4:cc:9e:37:75:60:a1:bb:45:
86:92:3f:9f:9e:94:35:73:01:67:78:de:99:8c:50:76:cc:a1:
74:6f:bf:8d:8f:a5:2c:17:93:67:84:bd:de:b1:d5:c0:0e:35:
83:12:37:47:d2:1b:39:3a:bb:4c:bb:c8:a8:73:6a:fc:a9:c6:
35:24:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:13:15 2025 by rpki-client