This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: 7QonvcHTgVX11fdR684lxITsLVneafgw1MWEvdL99/s=
Subject key identifier: 69:14:D8:55:E7:9C:4F:A6:3B:D2:9F:33:AA:0C:25:17:31:2E:4B:8E
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 019AF2098B23946F610BAE397224AF04322C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 175E
Signing time: Sat 06 Dec 2025 05:01:42 +0000
Manifest this update: Sat 06 Dec 2025 05:01:42 +0000
Manifest next update: Sun 07 Dec 2025 05:01:42 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: N4qYa7FnREd4n6B8TX95qPcE0P43fcLPSRmSmqv3vaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:8b:23:94:6f:61:0b:ae:39:72:24:af:04:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Dec 6 05:01:42 2025 GMT
Not After : Dec 7 05:01:42 2025 GMT
Subject: CN=6914d855e79c4fa63bd29f33aa0c2517312e4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:0e:8d:ea:84:ca:a9:db:72:f2:ca:46:3f:
c0:84:90:c6:4e:df:85:f8:c8:ee:1f:7a:3c:93:92:
b2:f2:9b:8c:b7:dd:02:c9:f7:c8:05:01:30:96:d9:
cf:12:26:4d:11:52:90:c3:29:07:54:37:7e:6a:b9:
35:ec:ac:4b:e1:38:09:74:68:be:06:ca:fc:18:b7:
9e:89:bd:2a:e9:b5:d2:5a:5e:29:a3:f9:19:33:49:
29:85:e8:b4:90:f7:a7:08:9d:b7:27:0b:bf:88:8f:
70:3b:1e:5e:a7:c0:5e:c7:34:e4:25:87:b8:fb:d8:
d3:a9:62:12:47:6a:86:c8:81:9b:f4:e9:7a:62:dc:
a8:1a:45:06:ba:74:6a:2d:a6:1d:43:b5:6f:00:06:
f7:76:98:96:e3:39:33:9c:ca:17:9c:32:f9:aa:16:
df:d2:3a:44:a9:ad:d0:9f:44:c2:c7:6e:18:b3:66:
cb:d5:cd:fa:70:13:1f:aa:73:57:66:1a:6a:10:bd:
65:5e:e3:b2:8c:41:27:a3:9b:0d:82:99:26:9a:04:
e2:d1:9a:ca:dc:60:1c:8c:6b:ad:16:22:80:6b:27:
d2:b1:32:73:99:9e:de:d5:74:23:a6:ff:66:14:6a:
bb:89:6e:e8:89:16:0c:20:9c:af:4a:77:83:a3:a7:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:D8:55:E7:9C:4F:A6:3B:D2:9F:33:AA:0C:25:17:31:2E:4B:8E
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:13:d0:99:f7:4e:18:af:48:f5:3c:a4:d8:72:d2:69:9c:
e0:18:02:12:d5:8b:ec:c1:da:7f:c1:14:84:4f:13:1c:11:3b:
39:e6:c6:f6:cf:7b:96:5e:b2:fe:e2:e2:0f:d1:64:1e:25:47:
f7:29:ef:0f:3e:eb:a5:7b:9c:9a:f9:d5:63:7b:07:11:d7:93:
c7:39:57:cb:7d:cb:9b:22:7f:69:44:9c:7c:68:f4:ba:1b:f6:
94:dc:5d:eb:aa:be:16:00:fb:85:64:d3:db:5b:69:16:50:7f:
5a:e7:0b:1a:6c:b8:47:82:35:8c:d1:7b:75:3f:25:e3:be:4c:
6f:e4:71:8a:63:05:0e:18:57:42:4a:0b:17:12:12:16:f6:56:
bc:e7:60:0f:fd:ad:76:ce:05:95:a0:d8:3f:5d:6f:5e:d9:e0:
09:03:81:c7:69:2f:46:8e:16:9d:59:62:c7:00:d5:ae:67:e0:
ee:ca:b3:aa:9a:fa:af:38:f0:34:c9:5a:88:8c:cb:0a:69:18:
a2:ee:2f:73:9d:5d:16:53:15:a6:e7:eb:56:df:9f:cc:03:83:
bc:db:ba:51:07:cb:0f:b7:25:38:9d:26:58:13:3d:31:4d:38:
d3:e4:f9:45:af:54:7a:1f:1a:4e:34:fb:f7:70:52:2d:ff:49:
51:0f:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:44 2025 by rpki-client