This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: T7qYOgIOqBVrV300xESokeIA7gUTFqCpO3tXUCuRb28=
Subject key identifier: 46:4B:55:2B:B5:3A:C8:E4:C5:A5:3C:7D:AF:66:D1:C8:F4:21:58:0E
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019AF12E35A050D67F74CA92B78172F4AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 1273
Signing time: Sat 06 Dec 2025 01:02:08 +0000
Manifest this update: Sat 06 Dec 2025 01:02:08 +0000
Manifest next update: Sun 07 Dec 2025 01:02:08 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: c2fzgOKzJJhi6ZnjM4r2AcfkMCjGeFLk3myhRVTP/2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:35:a0:50:d6:7f:74:ca:92:b7:81:72:f4:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Dec 6 01:02:08 2025 GMT
Not After : Dec 7 01:02:08 2025 GMT
Subject: CN=464b552bb53ac8e4c5a53c7daf66d1c8f421580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:38:05:e6:b6:db:25:8f:7f:71:dc:56:64:
de:39:48:c8:a4:ff:5f:0f:c9:7b:4d:b8:09:9d:18:
41:a7:84:fd:87:d5:a2:dc:58:93:04:c3:ce:d7:35:
21:64:a6:51:9f:2e:16:8b:b9:ad:fd:f1:d3:b4:7c:
45:0a:ea:96:b3:59:24:0a:56:fe:4e:90:fe:63:c4:
6d:ab:af:a5:bb:c7:dd:8c:02:55:49:2e:e4:1f:43:
10:4e:42:62:4f:25:d0:57:8f:5f:c7:44:a8:c0:2a:
ff:ea:b8:d4:50:b6:07:13:14:64:9b:bd:0e:1e:49:
82:6a:39:fa:06:ee:df:64:90:3f:6f:a7:7d:8a:1c:
c1:4c:74:f0:2f:58:aa:c7:4f:a0:7b:55:62:17:98:
f1:ff:95:45:a5:94:13:08:55:79:08:86:5c:c7:0f:
15:da:c0:08:14:87:2e:37:09:a9:23:3a:a2:f4:bb:
d1:a3:fd:8f:32:ac:c8:10:f9:f0:78:62:37:59:0c:
74:13:90:83:2e:7a:9e:b0:eb:e4:a7:75:23:c7:34:
af:ab:ff:9c:df:c5:70:c9:5e:7b:34:4b:3d:f4:df:
98:a0:83:91:36:ec:81:fe:37:d2:fb:6b:4a:c8:b6:
7f:2d:6b:f9:42:fb:ff:73:9a:cd:ed:d7:55:46:0a:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:55:2B:B5:3A:C8:E4:C5:A5:3C:7D:AF:66:D1:C8:F4:21:58:0E
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:48:b2:61:fe:b9:f6:4f:e5:08:14:d2:75:e6:73:32:84:0b:
cb:28:39:d9:c6:11:cc:7a:6c:f4:cd:30:93:3c:64:77:66:e1:
81:3e:a7:87:32:10:0d:01:a5:63:71:4c:f4:c3:6a:0a:dc:ad:
7c:1e:ba:1a:61:78:a7:f5:5d:e6:1c:9a:50:f8:97:ef:06:24:
ef:1f:9d:28:3c:ab:e2:47:e9:b0:5c:35:94:0f:66:e1:eb:60:
bf:76:47:df:30:d9:48:ca:5d:4f:78:36:f3:fd:96:69:6b:c1:
06:73:e1:f0:31:2c:74:98:5d:3d:f8:d7:95:f7:0a:82:6c:c8:
31:69:19:af:43:5b:80:e8:12:6e:bb:05:35:1f:de:97:77:16:
ac:55:3b:ec:77:8d:d4:32:a3:a1:22:74:1c:f6:09:09:b8:34:
5a:ea:a1:a0:cb:64:42:fe:52:6d:74:49:66:b0:00:db:ca:f6:
47:06:29:6c:1f:39:8f:b7:67:2d:dd:89:19:a9:d3:59:5a:26:
db:b9:de:89:ed:f9:06:f6:69:d1:b9:b4:75:9c:f9:9f:7f:ea:
70:d0:30:cc:22:8d:02:89:87:db:b7:1c:77:48:f0:16:4b:80:
fc:16:bc:ca:4f:58:fb:35:00:00:a9:29:03:25:41:fd:32:fe:
b6:71:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:31 2025 by rpki-client