This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: elxE5soo0ndBcZFFaMW7FuZMcoaMicypstpnLmxiuxk=
Subject key identifier: 62:64:C4:32:E4:04:0D:09:62:26:15:A4:B0:49:F7:E8:BB:AC:4C:B9
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019AF12D98865D4EF86FBCCC806AF72CFB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 01:01:28 +0000
Manifest this update: Sat 06 Dec 2025 01:01:28 +0000
Manifest next update: Sun 07 Dec 2025 01:01:28 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: p93KSilENAzG2/l6cs4+rb5dRL+rzZo5DLneduVeXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:98:86:5d:4e:f8:6f:bc:cc:80:6a:f7:2c:fb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Dec 6 01:01:28 2025 GMT
Not After : Dec 7 01:01:28 2025 GMT
Subject: CN=6264c432e4040d09622615a4b049f7e8bbac4cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:3e:46:f5:b4:36:5d:49:84:b8:9f:5d:5e:
e5:76:ba:b3:ef:35:4c:ca:2b:22:5c:6e:f6:06:a6:
eb:23:86:cd:0f:a1:21:8c:16:08:77:bf:d2:4f:29:
80:8c:a9:c9:c7:94:e3:b6:f6:5a:9b:72:c6:7a:16:
2b:92:f7:7c:d2:68:28:34:10:9e:42:d6:8e:3f:eb:
50:fd:8d:37:a9:1b:11:ed:99:53:7f:dd:a9:06:88:
17:97:b7:a5:86:07:db:6b:24:a0:9e:4d:95:ae:d8:
06:d3:70:16:e3:9d:8b:9f:05:d2:4c:27:5c:78:c3:
07:0e:e8:e6:00:38:8e:eb:34:c9:e7:02:1a:82:a1:
d5:92:3b:a5:b1:df:aa:e2:26:90:89:34:46:3b:53:
ae:1d:b9:59:2e:30:af:22:6d:ba:97:67:3f:0a:48:
2c:fe:c3:f1:a3:cb:f4:27:be:95:41:8e:a1:07:31:
2a:8a:52:01:ee:6d:dc:25:d1:b5:48:9e:b7:5d:5d:
a8:0b:b7:78:b5:6b:6e:54:ce:10:dc:c2:5d:77:e4:
4e:4c:80:f9:de:1c:84:41:64:67:18:3a:f5:07:e4:
d0:66:f7:a1:98:a3:2a:df:fe:cb:d3:70:e0:ad:5e:
9a:ce:5a:83:28:f4:61:af:30:b7:77:2a:6b:c8:46:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:C4:32:E4:04:0D:09:62:26:15:A4:B0:49:F7:E8:BB:AC:4C:B9
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:39:b1:9a:b4:5c:88:2e:4e:e9:b0:5e:88:b0:53:4e:bc:
6e:3d:45:02:23:89:7b:7e:24:85:cb:f8:1e:ff:41:f6:5f:53:
48:1b:fd:bb:be:b5:94:cf:66:b9:1f:20:81:03:c8:da:e2:ab:
d6:63:73:58:f6:7d:79:4e:a3:5a:c4:d7:9b:50:78:60:f2:ea:
53:d3:24:72:2e:9b:bf:57:d3:51:ff:7d:6d:11:01:bd:86:ef:
aa:af:2b:91:36:c2:96:2b:d1:35:6d:9d:ea:69:15:6e:57:36:
85:02:24:34:4f:fb:50:a2:72:bd:23:6a:26:83:ca:0b:8a:b7:
0a:c3:5d:df:1c:38:7f:c5:65:86:2e:db:61:25:84:58:34:24:
73:58:34:55:f9:b8:0e:16:a5:15:f6:d2:bb:98:7f:ac:f2:8a:
94:21:fe:43:ed:12:9f:38:f5:76:56:f3:12:a4:a4:57:0b:be:
e3:13:3f:94:ba:db:3a:48:24:e7:32:cd:68:53:02:f8:cb:15:
16:9e:9d:17:5c:53:d7:56:98:1f:34:de:9c:21:c5:25:7c:d2:
ed:94:a9:ad:e9:30:79:78:4b:d5:aa:23:35:a5:3e:6c:d8:5e:
cf:64:90:25:93:9a:c6:c5:92:2c:d5:9c:0e:5d:f4:f0:ed:eb:
40:d1:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:35 2025 by rpki-client