This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: JMnbnETSvvGmikgvlA/3X18mLNaRdc5vJrOEAhsDp4M=
Subject key identifier: AF:54:A3:6D:9F:79:18:39:36:63:01:AE:1E:E1:37:C8:BA:5E:DE:5D
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019B2D0C2CCB87053F05AE029567C6287FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 1292
Signing time: Wed 17 Dec 2025 16:02:11 +0000
Manifest this update: Wed 17 Dec 2025 16:02:11 +0000
Manifest next update: Thu 18 Dec 2025 16:02:11 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: +SPUceCtSnN1U4BjI8Klq+MVDy/HgCIl5Lccw4injPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2d:0c:2c:cb:87:05:3f:05:ae:02:95:67:c6:28:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Dec 17 16:02:11 2025 GMT
Not After : Dec 18 16:02:11 2025 GMT
Subject: CN=af54a36d9f791839366301ae1ee137c8ba5ede5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:59:29:eb:56:0b:10:36:e0:ab:f9:ad:60:5e:
68:9a:d0:2b:23:71:21:f3:cc:33:dc:6c:c8:d3:5c:
62:be:69:36:06:2e:0e:b3:67:e3:0f:d3:21:e2:f1:
f7:73:6d:be:8b:c0:41:01:b0:09:cd:fc:96:fd:3b:
9f:e8:6d:73:fb:27:35:9f:ca:42:6c:43:7c:fe:07:
8f:bb:8c:25:ef:ad:dd:6b:c3:54:63:02:e9:8e:93:
17:72:7d:54:95:bb:14:62:a0:f9:f7:db:74:19:a6:
57:02:5c:11:ff:3e:c0:67:1b:bc:9d:e0:c1:ed:c4:
12:85:5b:8a:f5:fb:6d:07:90:7d:2e:bd:2f:fe:4f:
65:e8:ea:6b:33:60:db:30:45:d4:01:94:5e:11:0d:
83:55:07:dc:35:9d:ac:24:05:49:e9:c6:19:a4:ad:
8c:64:3e:f9:ac:6f:7e:44:ee:06:bb:ef:73:54:0c:
6d:ab:e4:e1:d6:16:d7:d6:15:bc:7a:72:ba:9e:78:
eb:70:f7:3c:c8:18:31:21:e2:5d:23:2d:e4:ad:a5:
94:0b:70:88:e3:b8:0f:62:3a:92:6c:6a:db:e0:c3:
81:cd:1d:bf:96:40:c2:5c:77:6f:34:d9:55:54:39:
e3:ae:d4:c3:40:f5:40:41:1f:95:7f:21:f9:a1:2f:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:A3:6D:9F:79:18:39:36:63:01:AE:1E:E1:37:C8:BA:5E:DE:5D
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:74:f5:c7:fe:94:30:a2:84:65:33:c3:0d:69:02:d9:a9:
8e:2d:d7:14:d0:84:7f:02:48:ea:db:5a:31:91:0e:fe:3f:c6:
8c:c5:28:08:bc:53:8b:7c:ec:cb:94:aa:fe:18:01:cd:08:6f:
6e:99:90:62:9c:7f:f7:da:51:7a:03:ea:e4:b7:14:21:52:64:
13:c9:6e:b4:ef:9a:1d:f9:32:64:3c:4c:a0:7c:60:0a:03:91:
9a:2b:a9:7b:48:2f:b0:86:c9:fe:e0:f0:c3:4b:91:bd:51:55:
3a:a3:18:87:2f:2b:81:db:57:32:b4:f5:f0:f2:2b:72:dd:41:
a2:bb:01:f8:91:e9:a4:23:13:41:22:60:7e:3a:dd:9e:40:8f:
2a:8d:e4:3e:fb:cc:4c:9d:21:a7:31:96:7f:77:3f:29:39:aa:
3b:5e:48:5c:89:d2:10:6e:14:94:9d:b8:25:d6:a5:e9:06:41:
76:5a:12:4e:aa:4e:ae:e3:cd:31:83:27:32:56:56:6c:b1:3a:
dd:42:f0:f1:54:1b:59:95:69:54:63:75:d9:17:b9:c0:80:84:
1d:8b:21:75:d7:21:18:8e:bd:85:44:9b:d1:7b:93:df:df:61:
c2:ca:e3:a4:41:11:56:e7:26:07:06:c4:1a:e1:77:7f:55:8a:
d9:f6:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:28:32 2025 by rpki-client