This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
File: AEUKhqpPfvd-WnXdluyzwqaPrRw.mft (raw, json)
Hash identifier: 8gI/DlGU5aS5x+XW7DA4s1vpn0fz3DBYVkGQfMoA32A=
Subject key identifier: AC:69:F7:3F:BA:F8:65:45:A6:A3:E7:F9:63:64:BB:23:1D:EC:88:B7
Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
Certificate issuer: /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Certificate serial: 019AF0BFA7E6C7FF4DE6A0F23A9BBA4EDE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
Manifest number: 46
Signing time: Fri 05 Dec 2025 23:01:23 +0000
Manifest this update: Fri 05 Dec 2025 23:01:23 +0000
Manifest next update: Sat 06 Dec 2025 23:01:23 +0000
Files and hashes: 1: 3aBWhvl7vzQ060N_r0jzz9Dhf7s.roa (hash: v8R5BzuEes54UPuq5U1ZIEWHDu7mGMWUNti8JAIi1D4=)
2: AEUKhqpPfvd-WnXdluyzwqaPrRw.crl (hash: ejcxVWCIc7/l1tpuUYxiWe2cd+6Y+IuO1C+ZbhOQKVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:a7:e6:c7:ff:4d:e6:a0:f2:3a:9b:ba:4e:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Validity
Not Before: Dec 5 23:01:23 2025 GMT
Not After : Dec 6 23:01:23 2025 GMT
Subject: CN=ac69f73fbaf86545a6a3e7f96364bb231dec88b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:91:6c:dd:34:fc:d8:51:35:7a:41:45:0d:
7e:54:7e:3f:35:5b:7d:fa:aa:2e:c1:e6:48:45:f1:
47:9b:18:65:53:a9:a8:10:33:17:1f:1c:8d:9b:78:
c5:b1:b7:49:ca:76:ac:61:31:84:cf:10:2b:4b:ba:
63:3d:f9:ee:a2:dc:30:4c:6b:24:af:47:37:4a:ac:
c6:02:79:27:93:81:b0:cd:e1:b4:b6:6f:98:00:81:
b2:59:4d:ec:37:e6:af:8c:95:14:11:97:24:01:99:
f0:d4:80:83:c4:6b:dc:83:dd:43:7e:f6:6a:6d:9e:
9b:90:54:b3:2a:ff:05:1c:65:3e:6e:63:65:94:a9:
37:f2:63:83:0b:89:39:a2:72:3d:f0:4b:df:c3:d8:
60:c6:9a:8b:04:24:df:4e:04:b3:ff:b3:ea:a3:0d:
44:80:ea:76:51:9d:f4:49:64:9f:4e:23:ac:3f:49:
10:09:92:3c:1d:d6:95:f5:77:75:73:00:f7:86:e6:
dd:a6:94:20:14:9a:f9:38:e4:a0:52:78:9e:52:63:
9b:20:57:ff:f1:6f:a1:c7:8d:bd:12:27:38:aa:3c:
4a:72:f1:c7:b8:a0:8e:23:8c:96:c1:c2:e6:24:14:
01:97:16:38:26:a7:06:0e:32:55:b7:08:71:75:be:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:F7:3F:BA:F8:65:45:A6:A3:E7:F9:63:64:BB:23:1D:EC:88:B7
X509v3 Authority Key Identifier:
keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:92:f7:4c:e3:db:f2:89:9f:dc:5f:17:f5:1e:54:48:46:
56:65:90:8d:a8:bb:e7:bd:bd:69:e3:6d:e7:fb:eb:9d:06:87:
3b:7f:f1:3d:2d:7f:70:c3:bd:79:ca:35:d3:05:05:59:51:4e:
bd:61:a4:d9:c6:5f:8d:79:8b:b2:e0:f8:39:2a:70:91:18:27:
bc:f5:33:51:48:af:c2:88:34:b3:50:91:37:ca:21:8b:75:99:
8a:08:f5:f9:95:71:22:d1:ec:7c:25:cd:14:e5:92:c4:76:44:
a2:79:e0:8b:6b:f8:40:f8:54:b5:f5:c6:63:5b:29:07:c9:1c:
e0:b2:91:0c:15:3b:8b:81:8a:ee:f4:21:5c:55:ab:f2:04:ba:
73:f1:12:8c:36:d4:25:78:ec:62:e4:0a:7f:16:ae:24:05:d5:
a9:fb:25:1c:00:fc:da:f4:5d:cf:c0:69:e1:4b:01:a5:88:c7:
bc:e5:98:d0:55:09:32:e8:55:7b:60:bc:aa:23:97:7b:60:0f:
72:57:94:bb:83:cd:b1:2e:ad:f9:6e:b9:19:fa:38:18:b8:99:
c0:e5:9e:e3:57:ae:d5:e6:9d:a1:37:3a:f4:60:81:a3:af:e8:
f3:84:ba:ea:4c:1b:be:86:f2:59:d0:4b:97:73:ed:2e:f0:c5:
53:c0:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:50:34 2025 by rpki-client