This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File: k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier: ReCyTDLLzEVXkDggOi54PdCnSpKwqDxfXiqcyeVzSpA=
Subject key identifier: 94:69:80:B4:E4:7A:F0:C7:BF:40:20:82:91:6D:23:18:84:6B:D6:D1
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 019AF389075A4656E82AAFD86EE24E3C5DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number: 099B
Signing time: Sat 06 Dec 2025 12:00:35 +0000
Manifest this update: Sat 06 Dec 2025 12:00:35 +0000
Manifest next update: Sun 07 Dec 2025 12:00:35 +0000
Files and hashes: 1: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (hash: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=)
2: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: aLL5/39FK6LXcyQvK/blaxLE6nhZsk79Mz8/qbBnKqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:07:5a:46:56:e8:2a:af:d8:6e:e2:4e:3c:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Dec 6 12:00:35 2025 GMT
Not After : Dec 7 12:00:35 2025 GMT
Subject: CN=946980b4e47af0c7bf402082916d2318846bd6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:c3:c6:0d:12:70:67:55:aa:c0:10:4f:f6:
77:e0:ad:53:f7:5c:37:e9:b7:a8:42:b2:85:8b:78:
f4:04:35:4d:0f:16:0d:e7:9d:4f:04:ce:a3:7a:5b:
23:8b:b2:f6:6f:05:3f:c4:80:20:52:6a:82:6a:af:
88:1b:b2:38:48:6b:c0:fc:73:fb:7e:fa:b3:b7:1d:
76:f5:a8:e5:46:53:c6:3c:a9:71:fe:0f:6b:cb:e5:
a2:2c:3d:b7:4a:38:f0:2e:1f:26:20:e1:83:2a:b8:
2e:15:b5:f3:d1:f7:25:37:7b:2d:fa:2b:3c:69:30:
fa:4e:de:9d:c2:7c:e9:45:83:1c:82:65:2a:b5:ad:
cd:e9:5e:d0:2b:ed:93:de:03:13:0e:58:e2:8a:c1:
5c:03:a1:e6:af:1d:8f:94:71:69:34:16:2f:bd:1c:
97:23:01:ae:8b:88:6d:43:66:ce:c2:e4:6a:44:ff:
c9:9f:1b:3e:35:c7:88:1d:3d:bd:9d:f9:79:72:cd:
0f:26:37:44:27:0d:93:f7:b9:75:95:e0:71:44:18:
c0:a7:54:64:ed:fb:aa:cb:98:41:59:ed:4c:45:1e:
68:b3:c1:5a:fa:1e:f8:d9:c1:e4:be:1c:70:b2:a1:
94:48:66:b9:d3:3c:4d:36:91:88:f3:c5:e5:41:57:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:80:B4:E4:7A:F0:C7:BF:40:20:82:91:6D:23:18:84:6B:D6:D1
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:59:ae:6a:94:6b:c8:d4:1d:73:d7:25:da:e2:b9:12:78:
b1:07:87:22:10:20:3b:f1:3f:84:a4:b8:a1:62:8e:ed:86:10:
08:0b:a2:32:37:18:e7:e2:ad:be:da:06:85:0d:6e:36:84:eb:
6d:7a:64:21:80:d5:cf:fc:37:c5:77:57:c0:03:da:5e:53:b3:
43:2e:d8:7a:4d:b8:a7:40:38:8f:4e:42:81:f6:6d:fd:5e:5d:
e0:4e:e2:05:7c:5c:76:1c:47:65:e8:79:86:00:12:2b:98:20:
00:e7:89:07:1a:81:b3:33:a0:36:a1:f9:69:e3:28:bc:91:4b:
4f:2a:5f:7c:99:0f:f0:ca:29:e2:25:78:27:10:d2:33:3f:d5:
ff:9e:6c:72:a0:ff:d5:8d:6f:18:70:e6:37:4b:c9:c7:16:b3:
f3:20:b7:b4:54:b6:02:87:8a:1e:c5:ef:5a:ca:86:8c:fc:79:
a1:d4:fb:82:cb:54:73:22:c9:55:02:92:ed:f3:82:7f:55:37:
46:ec:a5:0b:2f:25:d5:25:f3:06:bb:52:47:2a:a7:9c:88:60:
52:58:e5:4a:15:39:11:db:21:d5:32:1c:11:1b:d8:48:c6:8c:
61:7f:81:4b:60:9f:1a:fb:aa:bc:08:47:3e:89:f7:b2:b5:bf:
4a:ed:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:21:45 2025 by rpki-client