This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: BmUl+UHb1xutEkd+rzexZI8UP+3tLuwfugafP1uqCcQ=
Subject key identifier: 25:1A:CC:D6:81:60:E9:9E:4A:0F:E6:A1:59:A2:74:53:BC:6A:23:A4
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019AF3525610B792011573153946C744F667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 06B3
Signing time: Sat 06 Dec 2025 11:00:50 +0000
Manifest this update: Sat 06 Dec 2025 11:00:50 +0000
Manifest next update: Sun 07 Dec 2025 11:00:50 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: PIVYtPjb/qY4cpZnDTt4CWGF34SfugE/a4yIOIIWP+Q=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:56:10:b7:92:01:15:73:15:39:46:c7:44:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Dec 6 11:00:50 2025 GMT
Not After : Dec 7 11:00:50 2025 GMT
Subject: CN=251accd68160e99e4a0fe6a159a27453bc6a23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:cb:04:a2:06:0a:21:39:d2:53:2a:d2:53:
f5:23:d6:34:15:39:76:95:e9:3a:63:a3:c5:b4:bf:
99:c7:4e:fe:cb:42:ef:b1:dc:55:2d:0f:db:30:f1:
ec:96:96:ac:50:fa:e7:58:eb:a7:c6:88:39:69:9a:
61:fb:16:c5:5d:dc:9b:fc:d1:d1:16:38:49:24:ed:
71:3a:da:73:f0:91:43:8b:27:8b:d0:a2:1b:ba:77:
94:c6:ba:3a:a9:5a:5f:4b:9a:a9:c7:41:d4:9d:80:
00:0f:3b:f4:5a:c3:8c:57:4b:18:ca:e5:ab:84:ea:
7d:99:a8:9b:4c:41:1a:be:16:23:7a:39:41:78:6e:
82:c8:5d:6d:9f:f5:b6:c3:e2:bf:b8:49:f0:94:14:
53:17:57:27:5c:fe:23:b2:f4:7b:d8:a7:49:6c:23:
d0:80:98:55:bb:08:ea:45:68:89:49:ea:03:30:69:
88:29:df:7e:10:f1:15:db:ce:91:26:6b:82:34:93:
b2:18:3f:19:4b:94:fd:76:38:1e:c2:b2:04:b4:36:
cb:50:5c:cf:23:08:8b:52:32:4a:b0:e3:c7:0f:48:
ea:ae:43:64:73:b6:0b:fc:2b:bf:d5:e5:4e:bf:87:
10:69:cd:94:67:46:4d:ab:1e:05:e9:31:63:f7:5e:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:CC:D6:81:60:E9:9E:4A:0F:E6:A1:59:A2:74:53:BC:6A:23:A4
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e3:b1:66:7a:63:e8:fc:8b:33:d0:a7:a3:92:4c:f0:f1:97:
eb:2f:f8:71:5c:f5:fb:c4:22:9b:fd:ec:fb:a8:bf:a5:6d:21:
75:50:b0:50:6c:e4:65:6d:26:cb:04:be:72:a6:ff:29:1f:73:
7c:a3:13:c6:a6:66:ac:33:91:20:0b:e7:ad:e4:f9:52:e6:64:
5f:70:b8:da:62:2d:5b:9e:73:c4:ba:ac:bf:9c:62:53:45:45:
3f:80:24:4a:4a:10:6e:6f:60:b1:08:b5:44:31:a7:17:ec:46:
d9:af:de:bc:a0:00:bb:ba:b4:d9:6f:b9:6d:a3:3d:d8:d7:be:
e0:f6:4e:85:8a:85:75:51:1b:3b:fa:67:e5:72:a5:2f:3b:c1:
2a:9d:f1:8e:a4:dc:09:59:32:32:7c:2f:ee:7a:9d:d1:e6:20:
18:77:5a:8b:f5:f4:e4:f6:cf:c1:39:26:1a:2e:21:12:e0:76:
11:42:2b:3e:a8:ae:42:34:4f:cf:62:41:2e:45:c0:2a:d3:13:
3d:1e:17:7c:66:15:85:0c:df:c7:75:3d:9b:0f:29:08:92:3e:
0f:5f:b6:dc:97:4d:69:c7:e3:8b:c3:f2:91:24:6d:d3:98:69:
a9:36:65:59:0f:48:9d:6a:1b:db:43:36:24:9a:6a:59:28:eb:
18:25:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:09:03 2025 by rpki-client