This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File: MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier: jmhTa3Oq466rr8hYHHAom7cOvL+5uFh3y9ctVOUFFZo=
Subject key identifier: EF:9D:95:C6:74:BB:F1:63:C9:B0:35:9F:2D:A3:D5:CF:F4:B0:27:1D
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer: /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial: 019AF389555DD7184C58AAAE1919FC73EBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number: 071A
Signing time: Sat 06 Dec 2025 12:00:54 +0000
Manifest this update: Sat 06 Dec 2025 12:00:54 +0000
Manifest next update: Sun 07 Dec 2025 12:00:54 +0000
Files and hashes: 1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: uuehrHKInu4kkrb87UJ2t3bCUXavMwKnVads1xzYnvc=)
2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:55:5d:d7:18:4c:58:aa:ae:19:19:fc:73:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Validity
Not Before: Dec 6 12:00:54 2025 GMT
Not After : Dec 7 12:00:54 2025 GMT
Subject: CN=ef9d95c674bbf163c9b0359f2da3d5cff4b0271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:ab:5b:ed:7d:b3:35:91:8a:47:b0:fa:3a:
c4:cf:44:7c:d2:f9:c7:dd:15:4a:4e:9f:18:2d:ae:
68:6e:b7:99:32:3f:4b:4c:2b:6a:30:37:7f:01:d7:
47:c3:5e:81:eb:75:07:9d:37:5a:11:cf:82:da:ce:
b6:11:ad:32:06:01:23:d8:6a:ee:25:ec:76:dd:49:
b9:df:26:c6:9e:33:95:d5:5a:96:67:21:d6:f9:8b:
86:d0:cf:f3:e9:8e:e8:4d:6c:5d:f0:7d:ab:54:eb:
14:82:24:8c:56:88:32:17:51:b5:86:df:58:1b:04:
0e:30:47:fc:1e:7f:e0:2a:a5:c0:96:d7:39:fe:18:
c2:ea:28:7e:de:fe:46:c4:aa:d4:f1:00:5c:4e:d2:
0c:fb:9c:58:ea:b2:10:a3:5c:ec:69:c5:45:d5:4a:
0a:92:f3:6a:70:cd:93:65:ec:0b:f0:22:25:d6:d1:
90:21:b3:49:a9:66:21:6a:25:35:01:1d:1e:c0:17:
34:d9:42:9b:bf:c1:a4:8d:64:54:a1:ef:f9:f0:24:
4b:d4:75:2d:8f:a8:37:37:54:6f:5b:13:13:b2:7a:
56:cb:7b:8d:bc:75:a1:b4:01:25:11:a2:4f:bb:60:
b4:27:20:b6:1c:f5:91:25:de:10:bb:58:cb:02:69:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:95:C6:74:BB:F1:63:C9:B0:35:9F:2D:A3:D5:CF:F4:B0:27:1D
X509v3 Authority Key Identifier:
keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:98:86:26:b3:97:21:63:d4:7e:dd:72:3c:be:35:50:99:
33:f2:91:94:b5:f1:89:0a:6a:db:c2:7c:bb:4c:1b:b5:b1:9f:
2f:98:b8:ab:34:74:b6:11:1c:8a:92:c5:af:4f:3f:14:80:e8:
54:ea:39:fc:ef:a8:86:ec:b0:88:8f:56:49:06:70:02:cf:df:
66:69:d9:46:24:ae:be:b9:41:85:25:12:7c:8e:7d:58:e5:03:
26:66:df:ce:1d:e6:bd:e5:aa:59:44:1e:59:e5:80:38:34:cf:
82:9f:42:7a:67:1b:c1:7a:92:74:2d:7f:79:a3:93:03:cd:de:
53:4d:18:1c:da:d9:43:5e:58:dd:b4:76:be:ae:2e:9e:26:aa:
99:a5:a3:bf:65:76:72:28:4a:8a:a0:96:4c:f1:17:91:76:70:
25:60:d8:f9:29:98:8f:88:aa:80:46:9b:f6:76:5d:33:05:8c:
e6:84:97:d9:e0:c3:ac:f0:d2:1b:78:07:48:c7:89:d1:ac:85:
d1:09:05:d5:e5:54:1c:ab:94:c5:f5:91:74:20:7b:9a:dd:3d:
14:66:0f:8c:af:16:94:10:a1:c8:ce:ef:a9:44:ea:cb:9f:61:
14:bc:4d:e5:7c:d4:ed:f3:1a:34:a3:83:54:f6:23:24:26:c3:
0a:f4:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:47 2025 by rpki-client