This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File: 6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier: Zx0lwA/HCA82nysy3hmsRxF2lIS+Okafsb0VSLqarms=
Subject key identifier: 1F:2A:C1:6C:79:EE:46:78:11:8B:92:67:A2:77:FF:1D:01:F7:30:14
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial: 019AF0BF1E0088C6EF17FC529172E219C1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number: 06BB
Signing time: Fri 05 Dec 2025 23:00:47 +0000
Manifest this update: Fri 05 Dec 2025 23:00:47 +0000
Manifest next update: Sat 06 Dec 2025 23:00:47 +0000
Files and hashes: 1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: Fqw3YVCsOsTa8GHetbsMc3MF3K9YfOdVRBmkanOBMHs=)
2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:1e:00:88:c6:ef:17:fc:52:91:72:e2:19:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Validity
Not Before: Dec 5 23:00:47 2025 GMT
Not After : Dec 6 23:00:47 2025 GMT
Subject: CN=1f2ac16c79ee4678118b9267a277ff1d01f73014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:37:3c:cf:4b:a9:3d:9d:25:c3:75:42:cb:
d1:a4:f6:7f:fa:b0:2b:06:e6:ec:86:68:68:93:c8:
c6:e5:14:bf:25:03:2b:ea:71:09:00:d0:fe:a7:97:
51:d8:ab:0c:1d:17:2f:67:a2:6c:33:b6:37:53:33:
df:68:46:4c:fa:c1:98:b1:b5:79:0f:8e:58:3d:98:
c8:bd:91:54:94:0b:42:53:2f:12:73:82:df:75:6d:
b7:68:16:a0:21:9b:97:52:8a:90:b7:91:c3:33:19:
d8:fc:d0:e9:87:4b:cc:21:c4:1c:b5:40:33:c1:04:
1f:ff:e4:6d:e2:12:8c:0e:17:eb:cf:ce:bf:92:48:
c3:65:9b:92:f9:0f:3f:f8:b0:fb:55:49:bd:81:29:
df:b1:cc:c2:73:31:5e:dc:a6:40:76:dd:8f:9e:b4:
b9:10:58:07:ac:d5:63:55:c6:58:69:50:47:03:64:
31:56:cf:2a:fe:61:e7:5d:e1:6f:d3:48:1b:be:1b:
a2:b2:bc:4e:55:7e:81:85:ec:b2:96:6d:78:09:4b:
86:21:65:40:5a:57:fc:b5:08:fb:40:3f:6c:d5:89:
5f:a2:b5:f3:8e:be:0c:34:3d:14:56:d2:41:f0:6c:
bc:45:c6:d6:1e:a1:cc:69:1a:f7:3e:1e:32:2e:ec:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:C1:6C:79:EE:46:78:11:8B:92:67:A2:77:FF:1D:01:F7:30:14
X509v3 Authority Key Identifier:
keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:05:7f:95:77:92:24:e5:18:97:de:64:f2:77:bc:e8:66:
71:8a:ef:38:e7:bb:0c:f2:17:34:ec:b6:de:58:de:fb:28:45:
5d:d1:6a:a5:0a:fb:a3:2f:fa:bb:e8:39:bb:37:a6:bf:f0:07:
f7:36:6e:09:d7:19:31:8b:40:94:61:50:58:8d:3a:49:96:d7:
0f:51:23:64:63:59:cf:d7:d1:6f:ac:35:17:70:65:f3:41:8a:
28:e6:1f:af:04:4f:f0:d6:2f:62:11:ae:ff:c6:dd:cc:eb:18:
d2:d8:46:c7:97:e7:15:1e:e1:5b:74:04:43:c8:f0:41:04:3a:
ce:27:77:f4:d9:03:93:d1:6a:d9:5b:d5:b5:5c:ba:8b:9e:8a:
69:ef:3f:e5:89:02:33:01:d3:ac:ef:6c:ff:73:68:c0:c9:45:
1b:1b:32:8a:67:cd:2b:bf:05:4b:c5:ce:53:37:1b:45:22:77:
36:2e:24:f8:8b:00:67:f4:2f:91:04:07:cc:06:ab:82:49:a0:
46:e8:f5:f4:f6:e6:37:4c:b6:de:2a:ed:c2:09:d7:93:74:1b:
61:e7:8a:a8:af:5a:b8:1d:d6:c4:ac:93:35:b5:a1:86:d8:d5:
5f:d8:20:47:61:45:ad:29:e1:af:5a:ec:98:21:b5:c8:65:13:
dc:78:cc:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwvx4AiMbvF/xSkXLiGcHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTZlMTcwZjc5YmIwNWU3YzBkZWMzZWM2MDY0M2U3Mjli
ZTRlY2QwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD
EygxZjJhYzE2Yzc5ZWU0Njc4MTE4YjkyNjdhMjc3ZmYxZDAxZjczMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTI3PM9LqT2dJcN1QsvRpPZ/+rAr
Bubshmhok8jG5RS/JQMr6nEJAND+p5dR2KsMHRcvZ6JsM7Y3UzPfaEZM+sGYsbV5
D45YPZjIvZFUlAtCUy8Sc4LfdW23aBagIZuXUoqQt5HDMxnY/NDph0vMIcQctUAz
wQQf/+Rt4hKMDhfrz86/kkjDZZuS+Q8/+LD7VUm9gSnfsczCczFe3KZAdt2PnrS5
EFgHrNVjVcZYaVBHA2QxVs8q/mHnXeFv00gbvhuisrxOVX6Bheyylm14CUuGIWVA
Wlf8tQj7QD9s1YlforXzjr4MND0UVtJB8Gy8RcbWHqHMaRr3Ph4yLuyUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8qwWx57kZ4EYuSZ6J3/x0B9zAUMB8GA1UdIwQY
MBaAFOsW4XD3m7BefA3sPsYGQ+cpvk7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzIt
NGJkOWM4NjdiZWU5LzEvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzItNGJkOWM4NjdiZWU5
LzEvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+gFf5V3
kiTlGJfeZPJ3vOhmcYrvOOe7DPIXNOy23lje+yhFXdFqpQr7oy/6u+g5uzemv/AH
9zZuCdcZMYtAlGFQWI06SZbXD1EjZGNZz9fRb6w1F3Bl80GKKOYfrwRP8NYvYhGu
/8bdzOsY0thGx5fnFR7hW3QEQ8jwQQQ6zid39NkDk9Fq2VvVtVy6i56Kae8/5YkC
MwHTrO9s/3NowMlFGxsyimfNK78FS8XOUzcbRSJ3Ni4k+IsAZ/QvkQQHzAargkmg
Ruj19PbmN0y23irtwgnXk3QbYeeKqK9auB3WxKyTNbWhhtjVX9ggR2FFrSnhr1rs
mCG1yGUT3HjM2g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:36 2025 by rpki-client