This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier: F+5tIGYwUyLHdS2/uH8u96FOZTOHeat6GSOofnCfN7U=
Subject key identifier: 06:6D:A8:C4:FC:69:1C:71:F3:9A:27:DD:BE:D2:27:2C:E9:28:9D:B4
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019AF2773C7300DB303D383448FBE6DE90BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number: 12C8
Signing time: Sat 06 Dec 2025 07:01:31 +0000
Manifest this update: Sat 06 Dec 2025 07:01:31 +0000
Manifest next update: Sun 07 Dec 2025 07:01:31 +0000
Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=)
2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=)
3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=)
4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
5: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=)
6: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: cX4/tbh9LKsgh/3nj1Sc0CgzWPjWNqVSZ+c91BNU+9g=)
8: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=)
9: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=)
10: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
11: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=)
12: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=)
13: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=)
14: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (hash: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:3c:73:00:db:30:3d:38:34:48:fb:e6:de:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 6 07:01:31 2025 GMT
Not After : Dec 7 07:01:31 2025 GMT
Subject: CN=066da8c4fc691c71f39a27ddbed2272ce9289db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:0c:48:9b:0f:ad:57:be:55:d4:92:da:68:
d9:42:33:28:02:f3:fe:f0:b2:02:c4:af:74:08:6b:
5a:7e:09:55:4b:4a:c8:3a:cf:d1:a0:fe:2e:6f:17:
80:93:16:5a:ea:1e:1f:c0:9a:d6:38:90:83:c8:48:
40:5b:96:43:83:cd:1f:3e:0d:3e:5b:c8:04:37:b3:
af:3b:bf:1a:79:28:98:43:e5:81:c3:30:83:38:d4:
04:43:de:76:bd:cf:60:41:c4:73:dc:99:95:c6:10:
2c:de:31:17:63:9e:1f:95:36:0d:ea:b1:3e:a3:c1:
ea:64:87:4e:dd:b6:bf:99:e3:b6:f3:33:02:c9:98:
d5:65:71:ff:b3:f4:93:c0:23:61:e1:d8:9b:e3:e0:
88:32:f3:c7:ce:0e:4c:3e:3a:c9:3c:d6:13:c9:87:
74:34:63:2c:a4:f5:b5:7f:94:d8:9e:1a:2b:34:14:
8f:dc:15:9a:b7:ad:de:fb:32:a4:b1:66:07:a9:ec:
8b:3a:06:fe:ae:5a:c3:ed:c3:cb:5b:84:23:b5:f8:
83:94:21:29:16:0c:3c:03:98:18:3d:d1:28:8b:d5:
76:9c:58:0a:3f:68:3c:41:04:27:9b:6d:87:5b:27:
b4:ef:0d:c7:54:5a:9e:7c:c4:33:58:50:ae:51:e4:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:A8:C4:FC:69:1C:71:F3:9A:27:DD:BE:D2:27:2C:E9:28:9D:B4
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:09:94:36:84:fd:29:6e:3f:ea:8d:ba:71:9b:b0:f3:d9:f3:
5f:bd:37:ad:db:4c:ce:d0:4b:3b:2f:68:4c:38:b7:8d:ee:cd:
fe:0c:b5:2f:e7:22:39:b4:c5:ef:c9:19:99:bb:a2:3e:23:f0:
c3:66:21:57:a8:71:88:0b:f6:72:65:6e:2e:44:4c:1a:ee:64:
ed:98:28:a9:3a:17:0d:c5:37:3d:6f:67:c2:7f:b2:ff:16:07:
b9:c9:70:34:83:60:0b:5f:23:27:9c:54:95:24:21:89:a0:8d:
b6:68:12:c3:fc:36:ca:1e:01:2b:59:ba:74:cc:15:fc:23:f9:
eb:62:a5:d9:ab:b7:e5:60:2f:67:a9:7c:08:99:94:c8:c4:14:
d7:e7:a3:c6:1f:76:96:56:b0:c6:65:60:a0:61:b2:4a:f4:44:
92:a9:1a:60:f4:95:56:07:93:33:f4:45:c1:28:07:da:14:dc:
4b:d5:ef:58:fe:d7:e9:18:98:e9:d6:86:d0:3b:76:76:d3:79:
69:a5:b5:40:2f:ea:73:b6:b9:a0:9b:c5:90:b6:97:58:e7:74:
ea:09:f1:cf:1d:f3:65:4c:ed:25:c3:61:88:09:6f:eb:7f:f6:
a3:98:b6:a1:2f:76:f1:10:ae:ca:e2:e2:86:9f:ab:8e:74:b6:
ae:94:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:22:35 2025 by rpki-client