This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier: i/JOgFOU1emk1ywq9EasmmqvnMDcmwcW3QMAftlsGks=
Subject key identifier: EF:89:43:F8:A5:21:3A:9E:31:3A:27:CE:89:25:4B:C6:06:74:61:CC
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial: 019AF23FA2D24749EA11FEC187FDB4669A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number: 08B5
Signing time: Sat 06 Dec 2025 06:00:47 +0000
Manifest this update: Sat 06 Dec 2025 06:00:47 +0000
Manifest next update: Sun 07 Dec 2025 06:00:47 +0000
Files and hashes: 1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: 3IXpcjnGa+omCxCpUnPgYedTo9rvVoz1HMp0DrYeQHQ=)
2: mJE_Ax4JDpdyNPeWFMSVsXGju14.roa (hash: t5TGMLR0+nDNKqcsV3Ft/NZxzvRzL5m7zfzdz2TzA60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:a2:d2:47:49:ea:11:fe:c1:87:fd:b4:66:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Validity
Not Before: Dec 6 06:00:47 2025 GMT
Not After : Dec 7 06:00:47 2025 GMT
Subject: CN=ef8943f8a5213a9e313a27ce89254bc6067461cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:49:f1:58:2d:69:eb:5c:79:18:35:62:b1:
2f:e2:d0:a0:68:4c:27:c3:7d:31:4f:98:35:f9:f6:
55:4e:8f:e6:a8:40:ea:f3:fd:e9:25:a4:6b:47:6c:
99:0e:29:cb:49:9f:00:30:ed:59:d2:f6:66:e3:7c:
ff:60:5e:a3:4e:ab:a7:63:f2:3a:e3:2c:11:b8:10:
e5:90:45:80:0e:69:f1:8e:3b:68:f4:d6:51:b7:c9:
95:ce:f0:24:23:cc:d2:37:20:98:ca:27:3a:47:a1:
59:72:4a:35:de:e2:57:e9:66:99:11:47:f8:37:bb:
e1:9c:63:61:c1:86:7b:5b:b7:65:7c:59:44:c7:7f:
13:0b:6f:fa:bd:f7:9b:13:d1:25:f2:9b:56:d6:89:
52:55:91:07:e0:fd:53:1b:81:6b:0f:e3:c3:b3:d3:
1b:93:d8:21:b5:3c:e4:82:52:97:cd:d3:8b:57:50:
68:40:ff:e0:65:69:e5:8e:89:e7:73:f8:be:c8:26:
9a:b0:af:2a:b0:6f:87:e3:9d:7c:13:32:0e:10:d8:
89:77:cb:31:6e:ee:4e:01:d5:4c:c7:90:a8:00:f7:
71:a9:04:8d:4e:6f:2a:9f:2e:e7:14:36:03:f9:15:
2c:fd:33:e9:8a:b7:46:3c:ab:55:43:b8:c2:14:db:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:43:F8:A5:21:3A:9E:31:3A:27:CE:89:25:4B:C6:06:74:61:CC
X509v3 Authority Key Identifier:
keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:b6:b1:0d:00:f6:c6:05:20:30:28:94:72:a8:58:70:6b:
14:31:80:2c:e9:c1:b3:a6:19:a6:eb:3f:d2:7c:0c:10:21:63:
83:99:c7:eb:02:c1:b0:0d:b9:a4:d8:39:fc:c9:44:43:7d:c7:
21:b9:4c:4e:d3:23:dd:87:99:99:57:0a:bf:5e:a3:83:4b:bd:
6b:aa:ac:63:8e:87:7e:26:8f:09:99:29:e3:9c:6e:60:61:cb:
55:6a:8e:09:e5:ae:e2:b3:bc:a4:d7:12:05:6b:60:38:49:53:
23:06:4b:8a:f1:43:97:d7:fe:25:4e:fe:d3:a6:6f:2d:c7:a2:
30:01:30:df:e8:75:cd:57:98:e9:26:77:97:68:75:cb:eb:66:
11:54:91:3b:b0:67:30:36:57:b5:40:2f:8d:33:58:4e:88:98:
91:86:fe:19:87:b2:21:02:62:52:bd:07:95:fc:bd:a3:40:04:
a2:e1:1e:9c:32:e8:2c:76:2d:9e:9c:c9:e5:25:4e:e4:38:03:
d9:c4:4f:96:7a:77:29:ed:99:38:65:b0:cb:65:da:08:c6:34:
2e:40:c1:e6:49:d5:d8:a8:ea:1e:91:13:7a:d9:fe:13:db:fe:
4b:94:a0:9d:84:6c:20:5f:04:27:f7:01:3a:c7:2a:7b:ff:4a:
ab:7d:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:57 2025 by rpki-client