This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: SE5HeH68JFDjZabN6rSrV1hjXAUTA7J8BVj9x/jQKMw=
Subject key identifier: 42:97:CC:6F:40:D0:A3:F3:6F:1C:8A:E8:C1:FC:3C:83:D8:6F:1A:1E
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019AF5099B1DA3BD30DFB07070A78A214707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 163F
Signing time: Sat 06 Dec 2025 19:00:38 +0000
Manifest this update: Sat 06 Dec 2025 19:00:38 +0000
Manifest next update: Sun 07 Dec 2025 19:00:38 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: GIpv0+REeasu3fwJi8/fmkLUrXL+1vm3B+0LiqjjX0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:09:9b:1d:a3:bd:30:df:b0:70:70:a7:8a:21:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Dec 6 19:00:38 2025 GMT
Not After : Dec 7 19:00:38 2025 GMT
Subject: CN=4297cc6f40d0a3f36f1c8ae8c1fc3c83d86f1a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:7d:40:42:f6:76:4b:e6:a9:f4:c2:88:9f:
7d:4d:cc:61:47:43:01:66:66:f9:ad:e5:4f:ca:26:
1a:23:8c:e0:37:2d:24:e5:f3:2b:0e:73:0e:c1:ff:
2d:66:a9:f6:5b:b3:57:89:81:6c:7f:fc:08:cf:94:
72:74:d0:78:ca:03:3a:e4:c1:b6:54:3a:ac:9f:1f:
37:4f:6d:64:30:2f:4e:65:42:8e:e2:d9:28:9d:b1:
71:c9:8b:fc:79:f8:30:aa:13:5a:ed:b0:00:4c:81:
e0:5e:d5:46:ba:7a:56:71:10:f2:cc:b8:21:22:45:
ca:88:fa:e4:8c:43:a9:69:9c:2e:15:9c:51:d6:f2:
38:65:65:b3:c6:14:13:15:8f:7f:d0:cf:ed:53:1a:
70:bb:c3:b7:9e:6f:a4:4a:02:66:a3:bc:66:29:b1:
5e:fc:7a:e3:2c:1d:41:c9:39:9c:56:2d:3a:24:61:
e7:d9:0a:46:80:d4:7c:f3:44:0a:cf:ea:3d:ef:5a:
78:ec:6d:25:0f:0b:73:19:6a:9c:97:fb:a0:7d:f2:
b6:b8:2f:d8:cd:f6:a3:d6:36:01:e0:5b:e5:4f:c6:
8d:f2:85:3c:8a:4c:02:4e:b4:6f:18:44:f4:cd:73:
14:70:de:aa:6a:1a:6c:2c:5f:b9:a6:11:35:1b:06:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:CC:6F:40:D0:A3:F3:6F:1C:8A:E8:C1:FC:3C:83:D8:6F:1A:1E
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:5e:a3:49:6d:99:aa:46:11:df:ba:b3:1b:d4:e0:47:a3:
ba:6f:71:3b:ac:93:39:b1:bc:39:87:fc:a2:2e:73:8d:7b:8a:
4a:6c:ea:bf:cb:59:f6:1a:c1:ed:da:a1:58:62:7b:91:23:c8:
01:bd:ed:f5:04:a0:20:e2:da:56:32:87:23:69:aa:9b:89:ee:
e0:5f:4d:25:c3:11:97:c4:e2:04:31:7e:c0:a0:dd:ef:1e:a0:
7b:ad:19:20:f7:69:06:3f:fe:ef:77:30:d2:e9:81:0e:53:f3:
9e:80:02:cd:d0:c8:a6:13:76:fa:91:01:f2:e4:fa:f7:5b:4a:
fe:25:82:2d:ff:46:61:a8:78:3a:81:cb:8f:9a:2f:08:6b:c1:
a5:c2:10:c7:eb:59:e5:2f:4c:b5:f6:76:3c:63:14:c3:ec:53:
8b:53:1e:1b:bb:70:6f:7e:e0:11:da:b5:28:4c:b2:79:e7:bb:
d1:7d:a2:d0:01:b8:60:25:b3:a2:be:ab:f5:3c:24:f3:ff:bb:
77:44:b3:a0:08:a2:b1:f3:73:d6:66:f8:44:dc:26:ae:97:4f:
48:9a:98:9c:a2:1e:97:7a:cf:81:f2:fe:51:dd:c9:3d:70:66:
55:4e:1a:4e:1c:98:6e:33:db:64:8f:e2:71:dc:8c:d8:e0:e6:
b9:03:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:04:29 2025 by rpki-client