This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
File: eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft (raw, json)
Hash identifier: Cb+MfNNRCCR87k5RFkigcguXxjHfmNjhKIb2Sci4r1I=
Subject key identifier: A3:76:45:C0:83:7B:5C:22:59:78:91:4C:BF:A3:C3:C9:59:D5:B3:09
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 019B318C5D8B8DEB23D7EF995F78AE9778DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
Manifest number: 04DA
Signing time: Thu 18 Dec 2025 13:00:41 +0000
Manifest this update: Thu 18 Dec 2025 13:00:41 +0000
Manifest next update: Fri 19 Dec 2025 13:00:41 +0000
Files and hashes: 1: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (hash: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=)
2: eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl (hash: +nOmgyJppzqnC/1Z0lm9nEgQWr+3+EcE/F6FO18VU1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:31:8c:5d:8b:8d:eb:23:d7:ef:99:5f:78:ae:97:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Dec 18 13:00:41 2025 GMT
Not After : Dec 19 13:00:41 2025 GMT
Subject: CN=a37645c0837b5c225978914cbfa3c3c959d5b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:a6:37:0d:84:d3:e7:05:a5:40:72:25:14:
e9:31:4d:d1:aa:5c:37:c9:9c:87:5f:50:08:b4:f7:
50:cb:f9:28:71:32:48:61:e8:ed:88:b4:f2:38:5e:
c0:24:22:74:15:89:f4:bc:ee:ee:18:1d:c2:31:3b:
97:62:1d:47:69:f5:53:9b:bb:f6:cc:43:3e:22:be:
48:e4:cd:ae:37:af:f0:a8:e7:93:3c:4e:9f:aa:d7:
e1:c8:ed:71:74:ca:67:ef:19:9b:24:ba:c9:0d:45:
49:e2:36:2d:4c:d3:67:0d:e2:84:3e:51:50:4d:90:
3f:ea:88:7b:ca:88:ca:e9:42:08:a2:7d:55:c4:3a:
e2:50:54:69:2b:29:be:55:f5:43:1a:21:86:3d:a8:
71:71:4b:90:16:2f:9c:15:df:ef:59:27:5f:d8:24:
5e:8b:53:8a:9b:35:7a:1b:a2:2c:c2:e9:d1:3e:a7:
8f:57:37:f1:20:17:11:51:e7:57:3c:11:7b:a3:a7:
5e:5a:96:30:c0:4f:a3:24:28:79:75:94:60:b0:af:
96:c7:63:35:1f:bf:6d:0a:7b:c8:26:6f:6a:4e:75:
74:8d:85:e9:b7:5e:d6:cd:4f:36:fd:9e:49:7d:ac:
2e:52:c4:11:48:87:e2:cf:c0:d9:4e:43:23:72:8f:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:45:C0:83:7B:5C:22:59:78:91:4C:BF:A3:C3:C9:59:D5:B3:09
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:dd:a4:44:ad:e1:77:b6:40:90:48:1d:4a:50:14:5c:dd:
e6:2b:3f:ea:06:39:26:7b:86:2e:d2:f1:89:f4:fc:4c:01:96:
9f:e7:e0:17:42:84:4a:53:e2:7f:84:4f:a1:50:aa:e1:44:ac:
89:3a:c6:3c:fa:00:91:08:96:3e:e5:c7:8b:87:1d:cc:c1:15:
45:db:95:dc:42:ca:4d:ed:43:de:26:c5:55:73:8f:ab:e3:71:
d2:f5:28:7a:ce:33:24:7e:88:24:58:99:4f:15:20:6b:dd:6c:
01:26:3e:9d:95:39:bd:8e:87:23:16:f0:64:37:e1:bd:61:a1:
a4:83:51:58:b1:e5:ff:ad:3e:c8:69:92:a4:e8:35:77:b4:6d:
61:31:02:b2:1f:f7:bc:b1:9b:4a:6a:75:17:19:5e:e2:bf:c5:
a9:ae:e8:bf:1c:36:bc:d0:23:08:a2:d8:7d:08:64:0c:af:c4:
b2:e1:4b:70:58:e5:f6:a0:49:f0:e9:26:7c:56:ac:ca:fc:68:
5d:02:2b:3b:ce:24:be:84:20:f0:ab:bb:d9:7d:01:50:1d:ff:
1c:69:5d:fb:b4:1d:23:95:d9:92:7b:2f:f2:b9:25:64:24:33:
b7:d2:b9:3b:24:4e:4e:cb:f5:aa:2a:da:f7:a3:11:c8:68:7d:
bf:b6:a3:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsxjF2Ljesj1++ZX3iul3jaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5M2Q5NjY0ZTI5YzBiZWI5MmM1NjczZGI2MDNhYjg0M2Uw
YzRjYWYwHhcNMjUxMjE4MTMwMDQxWhcNMjUxMjE5MTMwMDQxWjAzMTEwLwYDVQQD
EyhhMzc2NDVjMDgzN2I1YzIyNTk3ODkxNGNiZmEzYzNjOTU5ZDViMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKmNw2E0+cFpUByJRTpMU3Rqlw3
yZyHX1AItPdQy/kocTJIYejtiLTyOF7AJCJ0FYn0vO7uGB3CMTuXYh1HafVTm7v2
zEM+Ir5I5M2uN6/wqOeTPE6fqtfhyO1xdMpn7xmbJLrJDUVJ4jYtTNNnDeKEPlFQ
TZA/6oh7yojK6UIIon1VxDriUFRpKym+VfVDGiGGPahxcUuQFi+cFd/vWSdf2CRe
i1OKmzV6G6IswunRPqePVzfxIBcRUedXPBF7o6deWpYwwE+jJCh5dZRgsK+Wx2M1
H79tCnvIJm9qTnV0jYXpt17WzU82/Z5JfawuUsQRSIfiz8DZTkMjco8aBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN2RcCDe1wiWXiRTL+jw8lZ1bMJMB8GA1UdIwQY
MBaAFHk9lmTinAvrksVnPbYDq4Q+DEyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTIt
Njg2Mzk5MDAwZDNiLzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTItNjg2Mzk5MDAwZDNi
LzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTHdpESt
4Xe2QJBIHUpQFFzd5is/6gY5JnuGLtLxifT8TAGWn+fgF0KESlPif4RPoVCq4USs
iTrGPPoAkQiWPuXHi4cdzMEVRduV3ELKTe1D3ibFVXOPq+Nx0vUoes4zJH6IJFiZ
TxUga91sASY+nZU5vY6HIxbwZDfhvWGhpINRWLHl/60+yGmSpOg1d7RtYTECsh/3
vLGbSmp1Fxle4r/Fqa7ovxw2vNAjCKLYfQhkDK/EsuFLcFjl9qBJ8OkmfFasyvxo
XQIrO84kvoQg8Ku72X0BUB3/HGld+7QdI5XZknsv8rklZCQzt9K5OyROTsv1qira
96MRyGh9v7ajqg==
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:05:54 2025 by rpki-client