This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier: p0w0baFykPRQrtIh0AQr6G5DEC7YNPQf7heATzmm8XA=
Subject key identifier: 65:9E:B6:7E:D5:37:82:2A:A0:74:5F:80:44:FE:B3:52:6E:D2:4B:7C
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019B228784C701F12F5AD3B343F16EE6C410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number: 03F7
Signing time: Mon 15 Dec 2025 15:01:05 +0000
Manifest this update: Mon 15 Dec 2025 15:01:05 +0000
Manifest next update: Tue 16 Dec 2025 15:01:05 +0000
Files and hashes: 1: 2tQqGK4g82dy1c5SML4akqkLzQs.roa (hash: 0ihiDi+ydh24SGVwQxglY4r4t8f0Ij3xsuV5NeDNJgU=)
2: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (hash: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=)
3: I1LQw1CBlPzdRK1ZEvgFu8378uI.roa (hash: iIDM1s8e551CHIuxRBUaodgRmli45m1JLpfi8ps3uPQ=)
4: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
5: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=)
6: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: YlIQ00CGGXOYd0rIfrqCPROkE3RPbrk8GNoNal49OoE=)
7: jHePdwysK6kNDI3bSqmeF8Twv-g.roa (hash: 99KfjDJeuSZw+7rcAWv6j4zVImWkkOPG8GX+d82LmKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:87:84:c7:01:f1:2f:5a:d3:b3:43:f1:6e:e6:c4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Dec 15 15:01:05 2025 GMT
Not After : Dec 16 15:01:05 2025 GMT
Subject: CN=659eb67ed537822aa0745f8044feb3526ed24b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:6a:1b:b7:da:f9:19:e6:47:88:dd:a4:d3:
ea:e0:40:57:0d:61:4c:40:10:18:b2:22:b2:dd:1a:
b8:32:5e:c8:fd:07:6a:e7:c0:e9:5b:e5:de:6b:bd:
ce:de:51:74:78:5f:b6:84:81:c2:d5:f8:b6:d1:40:
35:21:31:68:b6:bd:0d:d1:2d:1f:d7:44:a1:8c:ef:
0a:a9:e0:ac:63:f8:95:49:e4:c0:c7:c9:c0:16:df:
cb:ed:20:cd:28:fb:d2:02:ad:01:df:e8:97:37:6a:
78:1a:74:e3:86:fa:46:c0:a0:de:d4:49:0f:28:4d:
ad:6b:b7:dc:fc:60:6f:6f:b0:ee:af:9b:84:ca:8d:
ba:15:db:f0:b6:96:aa:ee:a0:88:67:cc:4e:ad:24:
ff:c4:f5:ab:97:51:25:ad:d1:62:02:c6:3e:62:d9:
38:81:1c:6d:83:2a:a2:04:da:7a:11:cd:7f:8f:13:
3a:be:8a:9d:f7:f1:83:f7:b7:0d:64:71:2d:86:f9:
7f:ce:df:d0:6a:cd:47:ca:23:dd:0e:b7:1c:61:f8:
18:0c:b8:92:f7:4d:46:a4:40:58:e0:c7:5c:a5:bb:
8e:b2:01:9a:33:9e:5c:18:04:24:f4:e3:2a:bb:d3:
c8:56:09:f9:3e:d4:bf:61:a4:fc:8c:23:75:45:9b:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:B6:7E:D5:37:82:2A:A0:74:5F:80:44:FE:B3:52:6E:D2:4B:7C
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:a5:b6:c5:fd:43:22:97:59:b7:78:96:ed:6e:72:5d:2d:
66:f4:46:cc:31:5f:57:79:09:0d:5c:dd:cc:db:c3:70:98:08:
07:f8:98:41:0d:5a:8a:b8:89:e9:37:b8:09:46:98:3c:87:a5:
62:14:0e:fe:90:73:0c:b9:79:6c:19:db:7a:a9:8f:c2:71:44:
8e:25:c4:dd:e6:34:8e:b6:93:c3:43:18:85:05:c3:e8:9f:1a:
39:1a:39:be:49:aa:6b:36:f9:2a:5d:51:fd:9c:a6:92:2c:7a:
01:01:dd:ce:94:a8:95:cd:ea:29:e9:71:b5:27:cd:1d:f6:07:
57:fc:89:ab:13:91:2b:9e:9f:38:4c:59:7f:43:79:e0:83:d6:
5d:86:d3:65:43:39:42:f5:61:11:84:0e:5c:e3:c0:3c:00:ac:
73:a4:11:3d:7a:cd:72:bd:34:19:99:e5:ec:8f:14:2d:62:a2:
8c:3d:cc:0b:66:6f:15:20:5f:f9:16:6c:38:3d:34:7d:68:af:
9c:08:4f:99:3a:54:9d:4d:2a:b1:ed:8f:b1:78:35:e8:e0:b5:
05:87:8e:38:18:5d:b7:87:2b:22:d9:60:df:3f:26:26:e3:54:
88:7f:b9:07:a9:80:5d:b1:c1:23:2d:aa:45:76:42:8d:1d:80:
f6:5c:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:21:32 2025 by rpki-client