This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: 8TTjjFCky+8bhO2fGylnmMTYaNXCad5hwldxsgZ1BCo=
Subject key identifier: 1C:D2:98:04:9A:7E:9F:91:62:E1:F2:4F:AD:8B:08:DA:41:70:19:06
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 019B3A9005F8DF0B1FAC77B893DAA350FC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 178A
Signing time: Sat 20 Dec 2025 07:01:15 +0000
Manifest this update: Sat 20 Dec 2025 07:01:15 +0000
Manifest next update: Sun 21 Dec 2025 07:01:15 +0000
Files and hashes: 1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: 6dxwMzteJwsSMznNKt1doz7Z+UGRlnzGZjl5YZpmG74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:90:05:f8:df:0b:1f:ac:77:b8:93:da:a3:50:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Dec 20 07:01:15 2025 GMT
Not After : Dec 21 07:01:15 2025 GMT
Subject: CN=1cd298049a7e9f9162e1f24fad8b08da41701906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:94:93:d3:b2:fc:48:24:4a:21:a0:7d:2e:
dc:fb:81:f4:8c:ad:78:42:b5:26:18:e9:18:a1:16:
30:cb:65:20:c7:5e:db:29:92:af:b3:cd:10:c1:36:
65:44:c6:0b:58:94:84:b4:c9:6a:b5:73:89:85:40:
18:db:f1:ea:47:c0:6a:69:3c:9a:6a:c1:52:cc:db:
31:d1:bc:3b:ea:6b:b5:16:cb:e8:0d:9c:72:d7:f9:
15:15:3d:fd:e3:3d:d0:b2:01:f9:d6:f6:1d:e1:0c:
51:50:34:c6:c8:88:05:0d:cd:10:b9:6d:04:cf:0f:
a3:1a:eb:57:9f:a9:07:2d:65:8d:f7:b7:a1:9b:46:
cb:e1:8d:fd:c6:1a:4f:69:dc:bb:80:97:7e:fe:85:
3c:d4:e8:94:f0:be:08:59:69:c1:dc:37:60:10:a7:
0e:1f:e4:7b:e8:20:d2:2a:13:05:01:00:61:89:50:
1e:9b:74:5d:38:80:4b:75:ae:fa:f6:98:6d:0a:cf:
7d:a0:50:00:ae:f1:68:01:cd:45:c1:5a:aa:b6:c4:
9e:ce:b8:d1:2a:7f:8a:86:bb:15:ca:64:a1:76:99:
09:7b:68:c1:33:39:18:f2:29:fe:c3:69:e2:eb:43:
dc:a1:63:5d:38:a8:c4:e6:f3:36:af:d2:98:c7:af:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:98:04:9A:7E:9F:91:62:E1:F2:4F:AD:8B:08:DA:41:70:19:06
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:2e:4a:75:3b:93:c7:87:84:5c:05:a3:9a:8f:d1:d5:7c:
80:b6:e0:f4:2d:fa:a8:85:82:1c:ce:15:89:15:5d:08:ba:c9:
4d:e9:e7:8c:b3:aa:b1:5f:84:63:a1:eb:b7:93:68:d4:b9:c1:
44:2e:3f:85:d1:b0:fc:fe:a0:c9:99:a5:77:aa:17:0d:f4:88:
b3:f6:28:60:31:27:e3:a7:1f:03:07:d5:a7:10:95:70:1b:e7:
9b:27:d1:4b:67:6e:f6:26:9d:e8:de:ac:f7:d2:bd:e0:b7:9a:
c0:7f:00:03:81:4b:77:f6:51:b0:29:5e:6c:12:75:1f:b8:56:
6d:3f:61:95:f7:f8:97:a7:e5:43:a7:b7:3e:3c:60:17:95:65:
ac:5d:5a:cf:6b:96:f4:de:94:e5:ed:c0:1a:e9:84:69:b1:bf:
60:28:e0:87:1f:91:7c:5f:94:2f:f1:ba:64:ec:ea:e0:41:7f:
d4:67:7f:c6:8c:82:ed:1b:70:72:a9:d1:83:7f:ea:24:b1:3b:
22:0c:5c:d7:d1:89:27:fe:77:da:2b:eb:a8:ca:44:24:2b:f0:
dd:28:86:50:84:9f:fa:d3:cc:d9:a1:39:53:c3:89:c5:f9:be:
d8:53:2e:f9:17:6a:23:cf:73:58:79:bc:0f:51:77:ef:d3:86:
cb:90:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:19:50 2025 by rpki-client