This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier: BxVC5REH0MHiKvSPqlBo7iZlt1JQ+pNH77euW8beps8=
Subject key identifier: 68:49:BF:00:5B:E5:B3:A7:48:3B:E8:03:7D:17:53:83:5E:32:3D:B6
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer: /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial: 019AF5E5A5E227BEDBD769960E045554E494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number: 0C08
Signing time: Sat 06 Dec 2025 23:00:59 +0000
Manifest this update: Sat 06 Dec 2025 23:00:59 +0000
Manifest next update: Sun 07 Dec 2025 23:00:59 +0000
Files and hashes: 1: SeZ4MHkWijanJyiqLEKOSjkards.roa (hash: 0MJVFVX2eka97RjF2zWc+vftmisrddmh+e7zXYl/UsE=)
2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: M6jw2UjzRJXaT2gqrNCZJl0NkQPsSvBNmfDl20oQjGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:e5:a5:e2:27:be:db:d7:69:96:0e:04:55:54:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Validity
Not Before: Dec 6 23:00:59 2025 GMT
Not After : Dec 7 23:00:59 2025 GMT
Subject: CN=6849bf005be5b3a7483be8037d1753835e323db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:02:7a:af:f8:f0:04:a1:e8:f9:27:9f:6f:
40:8f:2c:7a:39:af:8c:14:d0:db:f6:b0:b3:7b:90:
ba:72:3a:92:78:27:23:69:c6:95:61:2f:d1:5a:19:
6e:d8:aa:11:6f:9f:cb:d6:14:35:f0:7a:82:e5:eb:
1b:c6:eb:a3:84:36:f7:0c:ed:1f:75:a0:89:6b:41:
3a:cb:97:a5:ef:4a:a1:de:d3:84:d3:c2:2d:bb:45:
cd:94:1e:18:29:46:d8:2f:70:3a:20:68:e4:05:ed:
eb:27:f8:a6:69:05:82:a3:e5:5f:63:23:0a:05:64:
39:ca:2d:20:84:5d:f4:ac:a2:aa:d5:60:a2:83:04:
41:7f:0d:1c:0b:ed:6d:0e:53:23:d0:20:56:c2:27:
c7:f6:de:5f:72:95:28:9e:e4:75:22:c2:cd:a9:26:
8c:95:4a:5c:9c:9c:1c:5e:89:db:dd:55:01:30:d0:
b4:fa:43:04:3e:6d:5c:ee:b7:f3:f5:63:5f:01:5b:
8a:ac:44:be:f5:39:36:26:d0:01:f5:7c:46:ae:d4:
8b:c1:1f:7a:e7:e8:d2:db:05:01:79:fb:9a:31:49:
ef:a1:aa:c4:45:9d:12:d1:9a:92:7d:c2:a1:95:1f:
1e:2c:1e:ea:eb:7c:cb:a1:b0:c8:01:f5:3b:2a:35:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:BF:00:5B:E5:B3:A7:48:3B:E8:03:7D:17:53:83:5E:32:3D:B6
X509v3 Authority Key Identifier:
keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cf:14:68:eb:4c:19:a8:90:2a:93:34:ba:6d:24:83:47:d6:
75:5f:e7:aa:a4:8a:0d:74:4f:e2:4c:d4:9c:18:89:6d:a3:2e:
7d:58:24:ec:d7:16:52:df:44:9d:86:38:29:2e:50:ef:28:ea:
d9:8f:27:65:27:46:da:d0:85:aa:e5:9a:bc:3b:37:99:59:4b:
8b:64:e4:03:9e:64:4c:4d:c5:20:8d:7b:3e:f0:fb:c9:e8:b2:
bb:58:2e:b2:e2:8b:ea:5d:6b:71:2a:e9:7e:2c:97:53:8e:17:
7e:58:bf:72:d9:ac:f6:d6:93:88:bb:79:3c:a7:91:0c:30:df:
f5:8d:d6:06:95:5d:42:2b:f2:0a:03:10:46:81:cd:0d:d1:a9:
50:00:9a:bd:46:e1:b6:66:ef:ec:93:9f:a5:b7:01:6f:29:4e:
5a:33:13:55:95:fd:0e:9d:33:bd:e7:e1:21:f5:cd:55:4f:28:
10:9d:9d:75:14:79:29:13:95:26:cb:64:f8:62:b5:52:6d:9d:
b4:fb:95:c1:9e:f2:45:9e:10:48:b4:75:69:32:e9:b5:b1:8f:
22:93:64:bd:9e:29:0e:2d:a8:98:af:11:d4:88:c1:22:2c:e3:
17:12:59:8d:c5:c8:93:4d:d1:d7:f7:6a:93:f7:38:d3:71:88:
61:63:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:51:45 2025 by rpki-client