This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: id13qaNLSAlyPxDC/51SnVGXd4zxgKtvCtUvLbwAYuk=
Subject key identifier: 85:B2:16:6D:B6:04:85:5F:FD:BB:23:F8:E6:35:E9:0F:2A:05:37:A4
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 019AF27707CCA29D4EAD35D7C453E45CB1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 06D9
Signing time: Sat 06 Dec 2025 07:01:18 +0000
Manifest this update: Sat 06 Dec 2025 07:01:18 +0000
Manifest next update: Sun 07 Dec 2025 07:01:18 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: tMrk8zoqy/3OwcWPwGB6i/5GdlX0QPqTEGi94pZPWwE=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:07:cc:a2:9d:4e:ad:35:d7:c4:53:e4:5c:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Dec 6 07:01:18 2025 GMT
Not After : Dec 7 07:01:18 2025 GMT
Subject: CN=85b2166db604855ffdbb23f8e635e90f2a0537a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:7b:ec:6c:8d:8a:a2:2a:51:25:56:94:5b:
80:b9:41:fd:10:86:27:84:93:7c:a9:21:7b:d5:7e:
d6:70:d9:7a:8a:3d:53:ff:4a:52:6d:90:f0:74:ac:
50:b2:d3:3d:5a:a4:91:dc:c0:9e:8f:e6:b5:33:91:
e8:c6:9c:75:bb:96:15:66:05:78:3c:df:cc:df:54:
81:69:cb:3c:31:0a:6f:6b:b2:a9:70:1f:ba:53:f7:
5e:ac:10:bc:34:bd:81:18:ed:52:db:c6:87:a1:c5:
d1:e3:5b:1d:d4:4d:c9:3a:a5:2f:ef:49:ad:1a:73:
63:d5:4a:87:30:ea:6c:22:ba:ba:6a:1d:31:0f:7d:
ce:9b:a6:e9:96:ea:29:0c:4a:6d:8d:78:5e:de:d8:
38:f6:64:b2:1c:c7:2d:cd:e4:3b:1f:92:88:30:4a:
c4:9c:a0:52:ea:41:e1:62:a6:83:cf:3b:8f:96:27:
97:10:6c:d1:c4:9b:51:ef:3b:22:e8:0e:7f:83:c4:
83:9b:43:dd:55:17:24:f0:68:14:7e:96:90:c7:23:
99:fa:c5:8e:a7:85:74:bf:8a:b3:e2:86:f5:22:82:
d6:fe:fc:38:2b:47:e8:52:4c:11:59:06:17:1f:28:
35:3a:de:9c:66:7a:05:b9:46:18:ab:43:88:fd:bb:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:16:6D:B6:04:85:5F:FD:BB:23:F8:E6:35:E9:0F:2A:05:37:A4
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:74:44:73:37:7b:2a:57:da:c5:02:01:ba:9e:64:bf:33:e6:
43:a5:2a:d9:95:a3:a6:d0:29:1d:5c:44:8c:f8:22:dc:90:0f:
16:25:69:b8:ec:e0:6b:3e:07:7f:8f:af:53:75:0f:9d:73:0b:
5d:b7:27:d1:b4:1d:06:ee:cb:06:bb:58:be:16:82:88:2a:9b:
58:3d:73:14:6d:4f:11:4b:92:1f:bb:f0:e7:ab:db:f5:f3:ca:
3c:7c:99:a0:e1:09:26:46:99:8b:bc:cc:37:0c:63:d8:c2:84:
6a:a1:78:c6:98:5b:14:44:4f:2b:18:fd:7a:a4:d1:db:68:2a:
8f:f5:c3:8e:ec:d1:44:87:94:2f:51:33:e3:05:19:49:fb:b7:
8b:39:96:f7:e0:38:b5:64:2f:7c:4b:ed:d3:ea:c8:27:55:36:
12:cf:7b:95:62:2e:18:b7:6d:3e:fd:9f:b4:9a:a6:9e:72:50:
4f:28:00:4e:24:13:ec:1d:40:67:f2:12:2e:73:a7:6d:83:84:
f4:48:e9:f7:9c:b8:54:2c:0f:df:6e:44:b2:b0:98:46:f0:0e:
83:c5:06:15:92:4e:db:e3:f6:68:4a:71:24:21:8f:dd:e6:fe:
58:da:96:82:4b:f1:49:a1:47:c4:d8:80:d5:2a:1f:ab:9d:3f:
fc:5f:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:09 2025 by rpki-client