This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier: eZEzHs4wwKOIzOxkxBkP6R+FBMb95WWj3k9TGMDOKAA=
Subject key identifier: 9E:63:DB:81:16:FA:5F:2E:90:55:1C:2D:83:C9:3B:F8:C1:9E:84:D2
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019B3A218BA569131BE974EA0D27A7D5F86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number: 1789
Signing time: Sat 20 Dec 2025 05:00:35 +0000
Manifest this update: Sat 20 Dec 2025 05:00:35 +0000
Manifest next update: Sun 21 Dec 2025 05:00:35 +0000
Files and hashes: 1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: ef3oJQDiTjZ8v1DvcCMQqymdOczD2+JsFr/gnoBMdSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:21:8b:a5:69:13:1b:e9:74:ea:0d:27:a7:d5:f8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Dec 20 05:00:35 2025 GMT
Not After : Dec 21 05:00:35 2025 GMT
Subject: CN=9e63db8116fa5f2e90551c2d83c93bf8c19e84d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:6c:ec:9e:3f:ee:48:cb:0b:34:13:fb:c9:
6e:5e:7d:e9:3a:8e:72:1e:32:29:1c:76:e5:e3:df:
17:15:67:d6:c8:c7:11:2e:a4:c9:3e:41:7d:6e:3a:
79:87:0e:26:0d:61:d0:74:8a:7a:31:b9:cb:b5:af:
47:af:98:c4:ce:92:f1:21:53:9a:53:a5:1a:f1:ba:
f6:f6:af:99:50:ef:00:52:d1:8c:dd:7d:69:95:6c:
15:6b:42:a3:72:1f:93:d8:d2:31:c0:62:65:b4:32:
50:4f:86:d1:2d:a2:c5:c5:45:77:4a:a1:f6:80:b3:
96:b3:f7:86:50:9a:95:58:be:7f:07:56:31:34:0a:
c1:9f:18:14:bb:ea:bd:23:63:c3:38:cd:eb:ff:2d:
b2:e3:58:6d:ec:81:7d:1e:d4:96:aa:5f:3f:c5:5b:
08:c8:21:35:9f:3f:23:2b:03:12:c5:4a:59:c7:c1:
32:ec:bc:4c:6d:d1:02:e5:1f:53:09:d9:21:8f:21:
12:88:ad:03:43:1d:f4:f1:a3:dc:cf:71:0e:01:38:
7f:f6:7d:05:9e:76:34:b8:a0:4d:c7:87:4a:25:2f:
7c:5d:41:3e:54:6f:45:49:bf:80:4b:5c:34:7b:7e:
5b:00:be:67:8d:ef:fb:c8:57:0c:af:a9:6f:36:af:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:DB:81:16:FA:5F:2E:90:55:1C:2D:83:C9:3B:F8:C1:9E:84:D2
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:23:79:96:e3:e9:46:ff:cd:4d:d0:68:ef:c6:6d:af:43:b3:
1b:7c:fe:fa:bc:f1:e1:79:8b:05:9f:1d:0e:23:fc:09:fb:73:
da:8f:ed:bb:8b:67:2c:22:d3:b2:5d:40:c1:28:97:9a:a3:5a:
70:88:d1:44:54:59:ed:c2:99:2a:e7:bc:73:15:8c:4c:56:4d:
32:c5:e8:2d:03:7f:50:e8:b6:58:03:a5:36:ae:24:c5:8f:8c:
2c:1f:ac:a0:3e:ed:08:e3:44:76:56:d2:8f:3f:8f:b4:6e:6e:
a4:3c:19:fa:f8:18:58:59:2f:1b:84:6a:99:e1:68:f0:4f:70:
14:65:32:98:3e:81:f5:0d:94:c1:3e:fd:8b:42:19:3e:de:2b:
2b:f8:e8:f5:48:9f:ab:40:c5:a7:6f:e8:d4:b8:56:36:19:94:
78:d4:b8:b5:50:4c:68:de:a0:11:13:7c:92:3d:1b:d1:bc:2d:
70:1a:19:dc:bd:2f:c5:84:55:59:df:65:12:3a:af:8a:67:26:
94:b8:d6:fd:8a:3d:f9:06:09:45:f3:bc:d8:28:0d:af:3f:d2:
28:60:28:9b:ff:6e:e7:a8:f3:0f:93:70:d0:c5:fe:1e:79:6e:
10:a6:14:ad:b0:36:00:8a:63:2c:77:5b:49:b8:96:00:ea:27:
b2:f4:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:16:04 2025 by rpki-client