This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
File: eeOR1_ik51JOBfUxkEKdsk2fs6c.mft (raw, json)
Hash identifier: Bp+KiXOzRArDfet1LCa/szNdsixFcK4n8HqDo1QkTZA=
Subject key identifier: DB:02:7B:8C:20:20:A5:34:26:B6:F3:A6:5B:FC:3E:5F:96:8F:9F:27
Authority key identifier: 79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7
Certificate issuer: /CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
Certificate serial: 019AF2097995469906587E1DB527D168E21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
Manifest number: 05CD
Signing time: Sat 06 Dec 2025 05:01:38 +0000
Manifest this update: Sat 06 Dec 2025 05:01:38 +0000
Manifest next update: Sun 07 Dec 2025 05:01:38 +0000
Files and hashes: 1: eeOR1_ik51JOBfUxkEKdsk2fs6c.crl (hash: 4ervDyISOju08icv2NvWq1No5OQdfzG9DQoE6ipq6zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:79:95:46:99:06:58:7e:1d:b5:27:d1:68:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
Validity
Not Before: Dec 6 05:01:38 2025 GMT
Not After : Dec 7 05:01:38 2025 GMT
Subject: CN=db027b8c2020a53426b6f3a65bfc3e5f968f9f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:91:6c:4d:2b:27:82:10:a6:88:91:0a:51:
9b:cc:ef:e1:e8:eb:7a:fc:5a:6d:58:d2:76:3e:ee:
b3:eb:84:80:0d:01:1c:32:eb:86:64:5c:3f:58:e0:
53:e5:c9:ce:28:fb:78:38:ae:f0:b8:fb:08:6c:a0:
7a:69:39:ee:d5:34:37:18:66:cd:60:3a:4d:fe:89:
37:57:b4:af:b2:05:93:d4:de:6c:ca:78:9a:74:f7:
b9:9c:a8:62:33:ef:46:c3:7c:4c:63:18:02:37:66:
33:bf:a7:f2:4e:1d:9a:40:ef:f8:32:f0:51:86:1a:
15:7c:b6:92:40:63:50:87:7d:d5:de:d6:8c:0c:56:
07:5c:a5:34:67:f7:64:4f:8b:52:89:a8:e9:c3:1b:
7a:da:9d:e6:8a:4a:4f:97:6e:34:d1:68:16:d4:f5:
60:82:95:a0:92:3c:8f:84:98:2e:46:62:09:9f:5f:
7a:c0:da:36:cb:89:d7:dc:23:62:11:c7:52:de:a0:
3b:b8:34:ae:05:24:1d:dc:dd:e0:0c:9c:6f:a4:ab:
0c:63:d9:e3:17:b9:c3:87:ef:a6:45:fb:48:c8:c3:
ea:cc:45:bb:4c:cf:4f:04:4d:c0:72:54:10:0c:70:
74:2f:2d:1f:c9:69:cb:f4:8f:aa:03:e2:1e:aa:76:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:02:7B:8C:20:20:A5:34:26:B6:F3:A6:5B:FC:3E:5F:96:8F:9F:27
X509v3 Authority Key Identifier:
keyid:79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:94:1d:3c:a1:ff:22:c6:f0:09:5d:f9:f0:af:10:6f:cb:21:
44:3b:5d:c7:e8:e2:1b:98:33:99:58:5e:d9:87:db:89:43:c8:
1c:17:bf:b6:8c:46:10:59:8d:d8:50:03:da:a0:ea:15:55:ea:
b9:11:be:d3:3f:54:4c:5b:e6:c0:9a:1d:de:42:8f:ab:97:e5:
1c:66:78:27:5f:6f:99:00:c2:c3:75:cb:81:46:9c:ad:4c:72:
72:66:2d:75:5e:98:6b:00:3d:56:f7:4d:e4:57:a8:05:cb:5b:
84:09:c1:dd:7b:da:18:de:c7:df:18:5a:cc:f5:0e:5e:b7:9e:
1f:ae:61:db:40:ae:d2:6e:ff:36:61:38:0b:44:df:c8:2a:e6:
96:04:91:e8:b4:3e:dc:18:59:71:a6:ff:57:70:87:9f:f3:ad:
8f:9f:8c:04:59:35:db:73:f9:2e:33:8a:5a:ad:61:3c:84:7c:
4e:32:83:a2:b5:89:83:fd:4c:56:ca:98:2d:4f:45:f3:3f:94:
30:9a:af:a4:96:d4:21:5f:8b:ec:a3:7c:88:1c:69:6b:47:2f:
9c:21:5c:06:17:7a:1e:44:bc:59:cb:d7:91:37:1a:87:d0:37:
e1:30:80:bc:1b:b6:77:de:eb:58:7a:12:d5:88:98:fe:5c:ac:
41:e9:2f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCXmVRpkGWH4dtSfRaOIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTM5MWQ3ZjhhNGU3NTI0ZTA1ZjUzMTkwNDI5ZGIyNGQ5
ZmIzYTcwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD
EyhkYjAyN2I4YzIwMjBhNTM0MjZiNmYzYTY1YmZjM2U1Zjk2OGY5ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7SRbE0rJ4IQpoiRClGbzO/h6Ot6
/FptWNJ2Pu6z64SADQEcMuuGZFw/WOBT5cnOKPt4OK7wuPsIbKB6aTnu1TQ3GGbN
YDpN/ok3V7SvsgWT1N5syniadPe5nKhiM+9Gw3xMYxgCN2Yzv6fyTh2aQO/4MvBR
hhoVfLaSQGNQh33V3taMDFYHXKU0Z/dkT4tSiajpwxt62p3mikpPl2400WgW1PVg
gpWgkjyPhJguRmIJn196wNo2y4nX3CNiEcdS3qA7uDSuBSQd3N3gDJxvpKsMY9nj
F7nDh++mRftIyMPqzEW7TM9PBE3AclQQDHB0Ly0fyWnL9I+qA+IeqnaJbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsCe4wgIKU0Jrbzplv8Pl+Wj58nMB8GA1UdIwQY
MBaAFHnjkdf4pOdSTgX1MZBCnbJNn7OnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVPUjFfaWs1MUpPQmZVeGtFS2RzazJmczZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZDE2NjQtYmY3MS00ZGJiLTgzZTYt
YTAxZjc2MGRkNGM5LzEvZWVPUjFfaWs1MUpPQmZVeGtFS2RzazJmczZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZDE2NjQtYmY3MS00ZGJiLTgzZTYtYTAxZjc2MGRkNGM5
LzEvZWVPUjFfaWs1MUpPQmZVeGtFS2RzazJmczZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJQdPKH/
IsbwCV358K8Qb8shRDtdx+jiG5gzmVhe2YfbiUPIHBe/toxGEFmN2FAD2qDqFVXq
uRG+0z9UTFvmwJod3kKPq5flHGZ4J19vmQDCw3XLgUacrUxycmYtdV6YawA9VvdN
5FeoBctbhAnB3XvaGN7H3xhazPUOXreeH65h20Cu0m7/NmE4C0TfyCrmlgSR6LQ+
3BhZcab/V3CHn/Otj5+MBFk123P5LjOKWq1hPIR8TjKDorWJg/1MVsqYLU9F8z+U
MJqvpJbUIV+L7KN8iBxpa0cvnCFcBhd6HkS8WcvXkTcah9A34TCAvBu2d97rWHoS
1YiY/lysQekvnQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:12 2025 by rpki-client