This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File: 6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier: 577ihA/XTR4aLw7mmJmUdBob6ABg9uiBGvsnUAVi434=
Subject key identifier: 99:E6:47:DE:15:40:44:76:CD:9A:2E:14:E5:D1:50:2A:0D:89:49:B1
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019AF3C051A9CAA9BDB30155FBA226C145FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number: 17A4
Signing time: Sat 06 Dec 2025 13:00:58 +0000
Manifest this update: Sat 06 Dec 2025 13:00:58 +0000
Manifest next update: Sun 07 Dec 2025 13:00:58 +0000
Files and hashes: 1: 0jV5LTodhzA8wVDje7kdH5wl0LE.roa (hash: OhxiR+DlZMWnXzRatnCbYzcanScQ4hgV764Jpk76hgE=)
2: 138IAUG567pgjcpYHEmIMDYySEw.roa (hash: R2DtFNV+ENO5hXPcHvNMvEoCXrlmajojy1f01qb1Cwc=)
3: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: fKRGOgJUdxAATbSgnJ4GDbco4EQEpyk4y81uqboc2Mc=)
4: EN2PA4LqEXKuo3e1ogAJM00I6hM.roa (hash: 3uEUfj7BRtsImAsWNlV+zd3yfILmZLpbeXXviDfiiGM=)
5: WVc2CMMzl3OxTazniKfgsA94UX8.roa (hash: oI3YDyrSL6PU5Wku37K2bFNDUgHLVbR5NcKy+jwV1Rk=)
6: gKwuz84JqfXVd9t-9wMc3TNayS8.roa (hash: LZYvjlHHoyK3zXtyxiowPJdeZotF/mJqVEEs+1kxVxM=)
7: h-bGacU9fgiR4H-2E9v6XeiGSeU.roa (hash: 6ypd4fLA8aJnNBffyCEBKS5ixXKMj39JyrXTMihA55M=)
8: qfkric2QUPKYkBB8bRDsZGyi6XE.roa (hash: daBShC7pqFoAAMzOkHKm3B5xOXs3TKHpZ+IiJ/7BGOg=)
9: tGECs5OY2cdz8mikBEFoXz5C6d8.roa (hash: Bw/zZmttO7DthXv4UKcvtOUWOfn1bWNIO4IyRKEnc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:51:a9:ca:a9:bd:b3:01:55:fb:a2:26:c1:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Dec 6 13:00:58 2025 GMT
Not After : Dec 7 13:00:58 2025 GMT
Subject: CN=99e647de15404476cd9a2e14e5d1502a0d8949b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:25:72:8a:7b:ca:bc:e9:d0:c4:e9:5f:08:
c1:d8:f1:97:e8:0d:91:66:20:7a:60:ab:2e:b2:b2:
d3:e6:df:25:d7:d3:bf:1e:62:c9:cf:84:2b:74:3d:
fb:bb:3e:fd:f6:00:9b:84:2c:5a:de:c9:52:36:41:
10:87:a5:9b:03:bc:43:a0:ab:8f:91:a7:13:ed:9b:
f6:02:70:c9:1a:a0:b5:9f:bb:d9:28:e3:36:e8:a5:
ac:d1:f8:96:3a:55:93:c4:45:ff:cc:d6:99:a0:25:
64:65:98:fd:9c:67:be:96:54:76:15:91:20:f7:bd:
68:8f:7d:2d:f7:77:de:ec:c1:58:32:65:ff:9a:d9:
da:db:dd:7d:ae:18:45:53:d7:60:71:3e:c4:71:66:
77:a5:e7:7d:21:d2:61:b0:15:39:aa:a0:cd:da:5c:
5b:60:b1:16:46:14:49:49:dd:b0:d9:7f:78:d9:06:
ca:3c:59:60:77:f6:ce:6f:6e:98:0e:9e:9b:97:a7:
2c:25:a0:e2:3f:19:53:69:90:fa:41:fb:72:92:3b:
36:a0:5a:7a:d9:83:e9:9c:e0:39:29:8f:0e:45:17:
b1:e0:42:ca:e5:0e:f3:05:01:58:e6:46:89:1a:29:
43:ea:46:c0:fb:24:a6:d2:75:79:e2:10:22:f8:70:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:47:DE:15:40:44:76:CD:9A:2E:14:E5:D1:50:2A:0D:89:49:B1
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:62:d5:f1:59:f0:b9:aa:98:75:22:76:a6:33:49:f1:c4:2b:
30:4e:eb:4b:d3:60:70:f4:e9:15:3d:47:8e:27:a8:4e:f4:41:
0e:ef:62:e4:2b:26:03:6c:61:fa:f6:a9:58:93:40:19:80:69:
5c:63:c3:cd:a4:53:6c:14:52:85:03:4d:50:7e:85:6e:5b:33:
54:f9:c9:30:1d:2a:c3:90:24:b8:3f:21:db:86:cf:eb:e3:ec:
a0:31:99:02:37:a7:0e:f6:97:a5:02:d1:a1:66:33:ec:e1:54:
ea:a0:3c:82:73:e7:48:41:5e:8c:10:87:6c:ab:f6:a0:c5:a0:
5d:0f:97:6f:82:1d:c4:02:11:2a:f5:69:a1:ca:2b:36:3e:48:
b8:1b:8a:2b:8f:9d:4b:8c:fa:e3:31:f5:f7:fb:00:ad:17:df:
3d:0a:be:95:ca:75:2b:73:fa:51:07:a2:24:b6:d3:21:50:1a:
94:4e:03:ef:68:8f:ea:7a:df:26:e3:07:6e:cb:77:d1:03:b1:
f8:01:e7:77:1a:52:66:1d:25:53:86:53:96:79:0c:da:1b:d9:
97:80:fe:a3:f5:b7:28:4e:02:dc:b7:c8:04:27:18:e3:00:c1:
c2:c1:30:9a:3b:40:f7:0a:06:b0:53:e2:66:d1:47:e9:a3:fa:
33:33:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:37 2025 by rpki-client