This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier: agXwnI+ln/lKQMJRalg5+ncGwvqUjczU5kOTQle1a+8=
Subject key identifier: FE:05:FD:65:C2:AE:7F:83:4B:F6:B2:D3:72:AD:29:DA:20:BB:AA:9D
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial: 019AF27667442E87BAD12045600957149D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number: 06E2
Signing time: Sat 06 Dec 2025 07:00:37 +0000
Manifest this update: Sat 06 Dec 2025 07:00:37 +0000
Manifest next update: Sun 07 Dec 2025 07:00:37 +0000
Files and hashes: 1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: QtffmjXxjlXRHIu4OQqoX1ohTBh3vJOVrQFfT9cZz9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:67:44:2e:87:ba:d1:20:45:60:09:57:14:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Validity
Not Before: Dec 6 07:00:37 2025 GMT
Not After : Dec 7 07:00:37 2025 GMT
Subject: CN=fe05fd65c2ae7f834bf6b2d372ad29da20bbaa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:e9:7e:a7:7a:dd:7b:22:9f:39:61:68:dd:
16:12:dc:d3:8f:10:4b:6c:f8:25:5f:1c:53:a4:d5:
97:fd:8e:4b:38:4a:ec:aa:18:36:60:f0:74:dc:9d:
81:e0:b3:1f:35:7b:d4:c3:6f:f8:a5:a5:11:39:30:
18:3c:ad:91:82:25:58:88:f2:2c:a2:84:68:b6:e4:
1c:9d:f0:79:5b:29:37:f4:c5:5e:e9:09:ad:81:01:
35:cd:76:15:52:f3:30:9b:44:97:4f:66:3e:6b:20:
c8:87:39:4a:f2:e1:28:e7:33:ed:1e:da:d1:9a:49:
ac:a4:c5:dd:85:cc:ad:b3:42:55:8b:7b:d1:d7:04:
fb:4d:15:e7:11:e6:6f:13:aa:2d:a1:aa:8a:34:5b:
36:06:a1:36:4c:46:29:83:8a:79:99:47:04:31:48:
3a:51:b6:2f:20:01:77:53:ac:a0:6c:71:d3:47:37:
0a:ce:7f:ef:4d:c4:01:09:ab:dd:0c:b3:7b:21:d9:
91:75:ce:0f:1d:a2:93:f0:cf:ed:1e:57:69:92:8c:
89:84:fa:5d:07:d6:e4:7d:9a:15:b4:c0:22:fb:e4:
d5:d6:64:40:a1:9a:f9:32:00:37:3f:2d:eb:b6:88:
0f:cc:63:0d:d1:62:14:7d:6f:98:5e:ca:fc:e4:ca:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:FD:65:C2:AE:7F:83:4B:F6:B2:D3:72:AD:29:DA:20:BB:AA:9D
X509v3 Authority Key Identifier:
keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:69:94:f0:db:4e:d9:15:f8:9c:d2:3c:0a:d3:eb:f9:12:
48:58:05:95:3b:f9:9e:87:35:c0:cd:d6:28:5d:1b:66:86:2c:
1b:d3:09:49:4d:2a:7d:a5:ce:5c:bc:c6:ed:5c:10:76:54:99:
5d:9f:d1:1b:bc:37:05:58:b3:7b:2d:61:b6:7f:03:02:1f:95:
c1:fe:1d:0e:50:d1:fc:35:dd:4d:9e:2f:85:62:f8:21:50:26:
29:ea:da:64:d7:2b:7b:e2:eb:af:a6:66:a8:63:b0:dc:8d:7e:
9c:59:92:68:9f:8e:29:8f:35:71:41:6e:4f:7e:13:ac:a9:f1:
56:ee:96:c9:89:aa:02:0e:11:8a:f7:dc:b9:ef:ab:b3:42:a9:
9a:89:b2:55:da:60:7b:44:ba:f0:3c:e5:d6:f5:85:02:53:43:
31:4c:4d:4d:67:fe:45:28:d9:d2:93:65:39:19:b5:d9:a9:70:
04:01:8b:d5:f2:8f:7b:ca:00:a5:86:26:2f:01:74:d9:0a:75:
cd:8d:7e:68:19:ba:bf:91:43:c1:ca:df:cc:32:5f:ac:5d:b6:
64:bf:ae:a7:0b:10:f0:be:de:17:c4:23:f0:b3:1c:3a:a6:7b:
b9:4a:59:4a:91:8b:dd:23:c1:0f:d9:f0:b5:33:5f:85:d2:cc:
53:8c:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:21:58 2025 by rpki-client