This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
File: eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft (raw, json)
Hash identifier: XB/jSoGFZ7JMJlA8f4aoH6QEyvLsePyeVYs3d27CCvI=
Subject key identifier: 6D:E4:78:41:5D:AC:C8:7D:E3:AA:EB:81:22:E2:B4:89:81:FE:14:D7
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 019B4AA7EE12CE2858A59B5999D7B676B97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
Manifest number: 04E7
Signing time: Tue 23 Dec 2025 10:01:18 +0000
Manifest this update: Tue 23 Dec 2025 10:01:18 +0000
Manifest next update: Wed 24 Dec 2025 10:01:18 +0000
Files and hashes: 1: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (hash: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=)
2: eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl (hash: x1SaHtpcuOj92e+JJ48kNPS8cCNmn6kOzYxaJn38JQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:a7:ee:12:ce:28:58:a5:9b:59:99:d7:b6:76:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Dec 23 10:01:18 2025 GMT
Not After : Dec 24 10:01:18 2025 GMT
Subject: CN=6de478415dacc87de3aaeb8122e2b48981fe14d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:58:6a:64:2a:34:28:65:10:d9:e0:b0:88:
4c:b2:54:4f:3c:02:e0:60:f0:32:d9:f1:1b:2d:f1:
cc:c3:df:2c:ce:1d:ee:41:7d:b1:5e:65:7e:ac:84:
e6:8e:bf:ec:50:ba:fc:ea:7a:2a:de:d7:8d:71:e2:
6b:16:da:2f:3b:bc:80:d5:f7:ca:fc:d0:3a:94:ea:
ca:47:35:41:c0:bc:f0:ac:c2:85:f9:eb:66:be:b5:
c9:74:f8:f9:e9:88:5d:df:64:3b:b7:4f:90:d5:58:
e9:fe:45:0b:59:f7:48:dc:8a:ce:2f:65:ee:d0:41:
4e:88:70:4e:d8:8e:aa:29:fb:5d:fc:da:ee:ff:7e:
ed:9d:d3:fb:d8:3d:43:d2:08:d3:74:95:c3:99:f0:
04:01:69:10:f7:a9:87:ae:cf:50:da:c4:36:94:13:
83:52:83:75:df:75:85:b5:b9:91:60:94:99:a7:e7:
9a:ee:f8:19:fb:44:2b:b7:ff:5c:7f:31:b9:c7:ea:
3f:c7:bb:7f:7f:2d:47:eb:b6:41:e8:a3:e3:33:ff:
e4:0d:d3:20:2d:0a:24:93:8a:b3:97:4a:33:75:b4:
dc:dd:05:9f:ca:ab:13:1b:7d:ec:31:d7:7d:6a:cd:
d7:61:fe:30:1e:3f:9c:5c:1b:3c:56:d6:01:52:1e:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E4:78:41:5D:AC:C8:7D:E3:AA:EB:81:22:E2:B4:89:81:FE:14:D7
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:28:e0:af:ec:dc:eb:be:87:cb:ed:4f:ff:25:2a:fc:2a:
26:9b:eb:bc:ef:f7:be:74:05:cb:1a:03:a7:df:bb:55:a2:a9:
77:da:af:76:15:95:00:ef:01:0f:1a:b2:8c:be:54:e9:08:14:
60:2c:92:5b:73:d7:6a:30:09:b2:09:e8:f4:00:58:c0:6b:ee:
d9:a3:7c:a9:78:bf:d9:69:92:e0:d2:2e:dd:ed:91:e1:2f:33:
fe:71:cc:e3:64:0c:14:de:bc:e9:bc:02:c5:6e:dc:2a:f6:25:
ad:a9:18:08:e4:61:7a:ff:c4:dc:e4:eb:db:fd:1c:cd:5f:68:
b8:2f:cb:20:ff:15:8d:59:74:4a:64:f4:10:c3:02:63:79:00:
5c:cd:a5:f9:80:b4:15:aa:b8:15:81:3b:8a:5e:1c:e2:a9:12:
5f:33:88:a8:fc:71:5d:1d:4a:e8:bd:a7:78:63:b2:51:6e:c8:
85:b9:fe:ff:1e:33:27:99:cc:3f:c9:3e:5d:8b:28:e6:08:92:
2f:5b:b5:d3:f2:00:d7:32:70:30:06:31:17:52:c4:2c:67:49:
07:7a:d1:1f:f0:49:ff:c0:ce:dd:2f:be:ed:66:cc:9d:7b:64:
a0:49:46:f2:7b:2f:fc:5a:c7:b4:f9:88:34:50:ef:81:7b:0a:
fa:11:70:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtKp+4SzihYpZtZmde2drl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5M2Q5NjY0ZTI5YzBiZWI5MmM1NjczZGI2MDNhYjg0M2Uw
YzRjYWYwHhcNMjUxMjIzMTAwMTE4WhcNMjUxMjI0MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2ZGU0Nzg0MTVkYWNjODdkZTNhYWViODEyMmUyYjQ4OTgxZmUxNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd9YamQqNChlENngsIhMslRPPALg
YPAy2fEbLfHMw98szh3uQX2xXmV+rITmjr/sULr86noq3teNceJrFtovO7yA1ffK
/NA6lOrKRzVBwLzwrMKF+etmvrXJdPj56Yhd32Q7t0+Q1Vjp/kULWfdI3IrOL2Xu
0EFOiHBO2I6qKftd/Nru/37tndP72D1D0gjTdJXDmfAEAWkQ96mHrs9Q2sQ2lBOD
UoN133WFtbmRYJSZp+ea7vgZ+0Qrt/9cfzG5x+o/x7t/fy1H67ZB6KPjM//kDdMg
LQokk4qzl0ozdbTc3QWfyqsTG33sMdd9as3XYf4wHj+cXBs8VtYBUh4z0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3keEFdrMh946rrgSLitImB/hTXMB8GA1UdIwQY
MBaAFHk9lmTinAvrksVnPbYDq4Q+DEyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTIt
Njg2Mzk5MDAwZDNiLzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTItNjg2Mzk5MDAwZDNi
LzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM4o4K/s
3Ou+h8vtT/8lKvwqJpvrvO/3vnQFyxoDp9+7VaKpd9qvdhWVAO8BDxqyjL5U6QgU
YCySW3PXajAJsgno9ABYwGvu2aN8qXi/2WmS4NIu3e2R4S8z/nHM42QMFN686bwC
xW7cKvYlrakYCORhev/E3OTr2/0czV9ouC/LIP8VjVl0SmT0EMMCY3kAXM2l+YC0
Faq4FYE7il4c4qkSXzOIqPxxXR1K6L2neGOyUW7Ihbn+/x4zJ5nMP8k+XYso5giS
L1u10/IA1zJwMAYxF1LELGdJB3rRH/BJ/8DO3S++7WbMnXtkoElG8nsv/FrHtPmI
NFDvgXsK+hFw1g==
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:54:16 2025 by rpki-client