This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: fSoV+zRL+4Dip2ZQee9wTWkD1ISEwNXj0JBjS4PhY0Q=
Subject key identifier: 69:DD:19:2D:3D:61:33:AD:69:BE:12:48:19:99:AC:A0:9E:A5:42:46
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 019B0E25638E99945CCD1E7AF29C8324D400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0B7D
Signing time: Thu 11 Dec 2025 16:01:29 +0000
Manifest this update: Thu 11 Dec 2025 16:01:29 +0000
Manifest next update: Fri 12 Dec 2025 16:01:29 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: 4M0kMqZKpBgEHyFsCu36TpFN1rVRmkOmlRYBFFgXD0w=)
2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:25:63:8e:99:94:5c:cd:1e:7a:f2:9c:83:24:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Dec 11 16:01:29 2025 GMT
Not After : Dec 12 16:01:29 2025 GMT
Subject: CN=69dd192d3d6133ad69be12481999aca09ea54246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:7f:ae:37:96:48:5b:4e:77:25:7a:eb:be:
38:9a:5e:09:bc:35:fe:86:58:a1:29:9c:d1:c2:87:
92:b3:47:80:5b:57:55:1d:f1:59:87:9c:29:f1:45:
09:c5:63:46:45:d1:cf:6c:15:8d:14:90:61:a7:a9:
2a:e2:8f:3e:57:62:2c:a4:19:02:0e:42:e3:91:ae:
a8:d1:5d:31:19:8a:21:71:45:a3:22:33:aa:c1:4f:
d2:26:4c:1c:be:1e:52:0e:b5:26:65:d6:3f:6d:01:
8e:90:1f:54:8e:bc:48:f2:bd:e2:85:4a:0e:b6:d2:
7d:6a:f7:ad:66:61:bd:8a:32:2c:21:1e:a7:63:4a:
74:93:92:73:65:65:30:b8:50:f5:3b:b3:9d:37:9b:
31:67:e9:07:6f:41:c7:e5:28:66:f1:e5:d7:1b:3b:
e8:8d:9c:5a:f0:e4:b2:d1:db:4a:c1:58:4a:96:ab:
d2:8d:fc:2c:41:56:c2:7c:89:97:27:83:74:7b:fe:
a8:31:49:ea:a7:5a:9e:8b:c1:b6:9e:0f:3a:6e:b8:
9f:01:77:83:a8:3d:2e:47:e7:09:78:5b:c6:bc:87:
be:f0:f7:16:9d:d0:8e:52:d0:d9:e4:56:ac:71:ac:
2c:2e:98:3b:9d:e3:f0:f6:99:fe:c8:1a:4f:4b:b3:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:19:2D:3D:61:33:AD:69:BE:12:48:19:99:AC:A0:9E:A5:42:46
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:f7:55:7e:20:66:4b:85:f1:55:27:a7:8a:54:d7:f3:40:
db:32:a2:ec:19:b9:f6:71:2e:15:c0:38:5c:d3:57:f9:d7:84:
b7:53:bd:a4:7b:cd:19:b4:59:6e:81:35:7e:68:3e:04:13:da:
33:cf:fc:70:21:e5:8b:5f:5d:6b:f7:e3:08:21:9c:80:e7:6b:
16:8e:6d:ab:d0:2e:d9:ca:34:ab:33:2f:c6:8f:00:74:b4:f7:
4f:41:20:42:98:ea:0f:a5:cd:b0:63:af:3f:57:cf:3e:41:50:
33:cd:92:47:b6:46:28:21:2c:e4:b6:74:48:37:96:10:c8:7f:
e8:47:9d:d0:50:eb:7e:59:8a:fa:e7:fc:45:54:68:2c:51:0c:
26:2d:a4:89:45:83:8e:fc:b9:41:24:86:61:92:7c:13:e2:c2:
d1:c6:46:8b:32:e5:65:5d:19:d6:e8:e0:32:10:e1:4e:f0:f3:
e7:43:a7:4f:e0:56:d3:4e:fc:4b:76:ca:f4:3c:c6:98:d1:fd:
b6:15:00:36:05:22:21:c2:b0:e1:fa:ce:ec:16:ef:6d:73:d7:
64:b3:5e:b7:4a:e8:e2:69:e8:c1:e0:0b:61:51:3a:82:6c:8a:
22:2c:3b:48:33:fc:96:4a:18:fb:ec:c8:bf:dc:a3:a2:fe:36:
90:af:79:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOJWOOmZRczR568pyDJNQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZWUxMWQ4YzQyOTdiZWM1NGJkMzA1NDMwY2E0NzcyZGZh
Yzg0N2EwHhcNMjUxMjExMTYwMTI5WhcNMjUxMjEyMTYwMTI5WjAzMTEwLwYDVQQD
Eyg2OWRkMTkyZDNkNjEzM2FkNjliZTEyNDgxOTk5YWNhMDllYTU0MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwd/rjeWSFtOdyV66744ml4JvDX+
hlihKZzRwoeSs0eAW1dVHfFZh5wp8UUJxWNGRdHPbBWNFJBhp6kq4o8+V2IspBkC
DkLjka6o0V0xGYohcUWjIjOqwU/SJkwcvh5SDrUmZdY/bQGOkB9UjrxI8r3ihUoO
ttJ9avetZmG9ijIsIR6nY0p0k5JzZWUwuFD1O7OdN5sxZ+kHb0HH5Shm8eXXGzvo
jZxa8OSy0dtKwVhKlqvSjfwsQVbCfImXJ4N0e/6oMUnqp1qei8G2ng86brifAXeD
qD0uR+cJeFvGvIe+8PcWndCOUtDZ5FascawsLpg7nePw9pn+yBpPS7PANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGndGS09YTOtab4SSBmZrKCepUJGMB8GA1UdIwQY
MBaAFHnuEdjEKXvsVL0wVDDKR3LfrIR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMt
MTBhMjA2ZGE3YjZiLzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMtMTBhMjA2ZGE3YjZi
LzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+D3VX4g
ZkuF8VUnp4pU1/NA2zKi7Bm59nEuFcA4XNNX+deEt1O9pHvNGbRZboE1fmg+BBPa
M8/8cCHli19da/fjCCGcgOdrFo5tq9Au2co0qzMvxo8AdLT3T0EgQpjqD6XNsGOv
P1fPPkFQM82SR7ZGKCEs5LZ0SDeWEMh/6Eed0FDrflmK+uf8RVRoLFEMJi2kiUWD
jvy5QSSGYZJ8E+LC0cZGizLlZV0Z1ujgMhDhTvDz50OnT+BW0078S3bK9DzGmNH9
thUANgUiIcKw4frO7BbvbXPXZLNet0ro4mnoweALYVE6gmyKIiw7SDP8lkoY++zI
v9yjov42kK957g==
-----END CERTIFICATE-----
Generated at Thu Dec 11 22:59:57 2025 by rpki-client