This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier: xHMCRygCH/Y++cFY/GmOL8KT4X3eIPLz6Gra/0eT2Ac=
Subject key identifier: F3:DD:A6:EC:FC:7A:B5:5C:6B:20:36:FB:BE:74:31:27:E7:F7:F9:BE
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 019AF19BCFBFF740B2075674F2F0F3976364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 03:01:51 +0000
Manifest this update: Sat 06 Dec 2025 03:01:51 +0000
Manifest next update: Sun 07 Dec 2025 03:01:51 +0000
Files and hashes: 1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: 9S4qqhCpUMYkpT/EGPYcb5lhZBipaGsfLmLShKjQoo8=)
2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:cf:bf:f7:40:b2:07:56:74:f2:f0:f3:97:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Dec 6 03:01:51 2025 GMT
Not After : Dec 7 03:01:51 2025 GMT
Subject: CN=f3dda6ecfc7ab55c6b2036fbbe743127e7f7f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:0a:46:36:60:f4:cf:2b:00:6e:06:c0:0d:
b9:a0:ee:f1:fd:7e:43:f4:bd:85:04:b3:d2:c4:ac:
42:0d:b1:d8:c2:74:c6:39:9a:0b:c5:a9:35:e9:ab:
5b:57:b8:9d:06:8c:36:cd:03:20:1c:38:6f:d1:0c:
7e:74:44:4e:27:85:aa:80:38:8e:65:01:e0:df:e6:
63:54:68:f1:3e:0c:b2:4c:14:cb:88:89:02:6f:fb:
ff:68:32:5b:e5:55:70:8b:10:64:b3:cf:40:9d:88:
42:b9:fc:3b:25:38:d2:c2:32:07:66:27:dd:a5:3f:
45:67:9b:95:a5:f9:c9:8d:ee:da:c6:e5:9e:48:a8:
ba:6f:c3:64:42:8c:3f:30:eb:4c:59:78:c2:3a:31:
87:06:85:cb:08:4f:30:66:72:a2:db:18:b2:1a:3c:
e7:e1:fb:40:56:53:7c:10:bc:6d:38:40:50:bb:27:
f4:ae:3a:68:9d:d7:9a:ea:1e:dd:fe:4e:29:74:e6:
ad:7e:3c:03:d7:f6:76:e4:68:71:90:72:a1:f3:f9:
31:c3:ff:fd:b0:5e:88:dd:4c:87:1a:42:f9:50:98:
a7:d9:fc:d4:d9:fe:a4:98:88:bf:2d:ba:da:95:68:
17:28:35:a3:1f:a0:cb:91:58:f2:55:86:39:0a:3f:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:A6:EC:FC:7A:B5:5C:6B:20:36:FB:BE:74:31:27:E7:F7:F9:BE
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:38:24:eb:83:43:5f:71:e9:23:88:2e:b5:bd:f6:61:ea:
c2:9e:db:4b:73:ef:41:dd:bb:d9:0d:ac:21:12:5c:f5:66:2a:
4b:2b:43:de:88:90:85:2f:53:bb:ff:06:d6:b3:f1:2b:83:16:
3f:92:36:c7:34:9a:17:34:4c:c1:07:ad:dc:dc:3a:32:69:9a:
44:24:78:3e:f6:c8:a4:b6:2a:df:df:9d:89:0f:b0:16:10:5b:
44:a3:ad:27:18:97:d1:24:88:dd:78:7f:d1:e9:3f:ad:7d:e2:
5d:7c:2e:3f:44:f1:10:99:74:1f:2f:d9:0d:79:18:7f:98:25:
48:7e:44:0e:d5:79:9f:97:2c:b1:25:74:22:5d:8e:99:03:6e:
cc:88:61:88:81:cd:78:1f:3e:0b:38:b0:c5:fe:01:99:39:4a:
83:55:9b:08:e8:37:1e:57:d0:cd:6b:35:8a:30:fe:8e:0f:ea:
e7:5e:a8:ed:d6:8d:bc:0b:5d:96:93:b9:65:6d:13:e5:45:00:
02:b8:85:98:c5:01:7a:0d:5b:be:20:5f:95:c7:e6:35:72:0c:
49:ef:71:08:ad:c6:91:67:8d:ec:a2:9e:63:a6:4b:27:66:3a:
db:45:ec:ee:b5:f8:15:eb:2c:ab:c5:7c:eb:60:12:77:ae:be:
ec:e5:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:28 2025 by rpki-client