This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: rjlJ0hTwQ4C03hs04XqXdz+MN3THv/GAcKAW5nJE+vA=
Subject key identifier: 42:0F:AA:EB:73:E8:27:08:5C:71:A7:3B:D0:20:09:DA:E2:3B:3C:87
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 019AF2766943263B3D31B96C61C2F7297701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 148A
Signing time: Sat 06 Dec 2025 07:00:37 +0000
Manifest this update: Sat 06 Dec 2025 07:00:37 +0000
Manifest next update: Sun 07 Dec 2025 07:00:37 +0000
Files and hashes: 1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: ZXB6kRyhlrdT5rHbCSZ52ee90Pvw3Kg267pht/FdKzY=)
2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:69:43:26:3b:3d:31:b9:6c:61:c2:f7:29:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Dec 6 07:00:37 2025 GMT
Not After : Dec 7 07:00:37 2025 GMT
Subject: CN=420faaeb73e827085c71a73bd02009dae23b3c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:d4:9b:a3:5d:52:fe:ef:03:d3:2c:0c:95:
a1:bb:c1:1c:4a:55:cf:0a:f7:fc:a9:3b:0f:64:a6:
41:f2:81:a8:05:48:19:5c:85:18:a4:9d:98:32:bf:
53:b9:c5:13:02:33:6a:0b:a4:88:e0:19:49:95:12:
05:61:c6:4f:44:a8:b1:f9:b0:bf:8a:ce:35:90:76:
9c:fd:86:01:9d:6c:b8:88:a4:f7:1c:61:52:09:93:
62:2f:73:0e:9d:65:e9:46:16:58:56:59:2f:82:84:
51:04:9f:cd:2f:2d:53:0b:0e:38:2d:8d:ac:4c:94:
af:c1:d0:24:d8:fa:ae:38:33:db:4c:c8:62:af:8b:
42:15:24:27:3a:fd:d2:5e:e0:e5:86:59:67:53:64:
92:c7:02:fe:24:4d:e2:cc:2d:3c:2a:fe:b8:53:55:
48:d9:3e:47:69:4e:37:34:de:5f:ee:1f:7c:52:4b:
e9:ce:58:58:a6:b9:a3:d1:cd:3a:5f:88:96:f8:5b:
c8:2c:f9:4f:c3:a1:6f:d5:fb:31:05:52:21:ca:e6:
a9:73:98:05:e9:64:93:16:dc:8c:fc:13:c9:58:fe:
a0:2e:ad:88:07:36:91:bc:c1:15:0d:51:4e:fe:e4:
ef:f4:32:55:1e:82:9f:1c:39:b5:67:0d:fb:4d:04:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:AA:EB:73:E8:27:08:5C:71:A7:3B:D0:20:09:DA:E2:3B:3C:87
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a6:ba:48:9d:de:c0:9a:6f:50:e8:da:94:56:c3:8c:f4:7d:
3a:ff:2c:ac:a0:58:e7:aa:51:da:a9:bf:7d:cf:52:96:0a:ca:
c7:97:97:95:43:cd:0f:6d:6c:12:e3:50:a0:ab:51:6c:2b:69:
b7:35:88:4e:d2:2f:ef:85:7a:66:f2:aa:21:3f:0f:cd:9a:1d:
50:ef:67:b0:8b:e6:e7:67:7c:9b:cf:41:9a:76:cf:35:c4:2d:
a9:91:7d:86:5f:a4:49:16:96:4c:92:5b:99:5f:29:d1:5f:ca:
67:4a:31:c0:df:ba:06:46:c5:97:d9:5a:95:56:20:3a:96:00:
f5:df:08:3c:67:43:aa:70:a7:21:6d:a5:e4:2d:17:0b:f8:63:
8c:b2:ac:d1:79:eb:99:b0:d1:d7:94:79:8c:9b:c2:ad:34:45:
fc:59:5f:09:c0:ef:2f:52:b8:ad:1f:8a:0a:b7:d3:ae:dc:6d:
ff:6a:bc:4c:d9:de:cc:b7:62:db:d4:bc:0e:c4:39:ab:3c:9e:
57:48:cb:35:2c:89:57:20:57:16:0c:f9:71:cf:da:77:3c:7b:
73:3c:17:f2:57:be:17:30:2b:81:f8:c9:b8:f5:3b:67:50:ac:
78:a6:84:95:1b:83:03:12:87:ee:9e:28:61:3a:99:6a:63:1c:
b0:d7:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:43:52 2025 by rpki-client