This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: CBJFk2kfGDdpvazLjtc9om882NYCeqB7ip1+RQWzdpU=
Subject key identifier: 75:22:DF:D1:F7:F3:CE:8F:45:FF:41:EA:65:3D:67:4C:EF:35:40:35
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019AF1D19861E1B721B8018E0979BB2D23CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 0636
Signing time: Sat 06 Dec 2025 04:00:36 +0000
Manifest this update: Sat 06 Dec 2025 04:00:36 +0000
Manifest next update: Sun 07 Dec 2025 04:00:36 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: ACReM0KeU61biah9PGKWsS/kDHruMDgHlS5vv7tjZ+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:98:61:e1:b7:21:b8:01:8e:09:79:bb:2d:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Dec 6 04:00:36 2025 GMT
Not After : Dec 7 04:00:36 2025 GMT
Subject: CN=7522dfd1f7f3ce8f45ff41ea653d674cef354035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:60:d0:16:b8:8d:9f:f8:fb:1f:71:a2:7f:
cb:93:21:9b:0d:47:b1:b2:5b:72:96:1e:0a:57:69:
ee:26:2f:1e:51:0d:93:72:b5:b5:c1:8e:91:64:3a:
80:1a:79:be:16:4e:29:4f:6c:81:50:da:21:d9:d1:
bb:80:37:a4:8f:e5:f4:f9:44:2f:da:40:c8:79:86:
15:fe:18:e3:ef:8e:34:21:8b:7a:0e:38:b0:3a:cb:
77:94:7d:69:93:78:a4:e0:33:2b:4e:d6:3a:d3:72:
5c:cc:19:b2:54:72:70:93:47:0a:cc:57:05:3b:f4:
d5:9a:06:8e:cf:dc:ac:df:67:49:4f:6f:b5:f1:b7:
af:c0:83:cf:3c:9e:37:29:64:c4:35:7c:0a:5a:59:
54:f0:95:fa:4d:ff:55:5d:9a:36:70:50:8c:fb:67:
07:d8:fe:14:e5:9d:d7:55:65:c2:f8:ad:32:ea:29:
e2:f6:e1:cb:7b:db:27:d6:bc:97:a8:3d:f9:05:c4:
b5:79:1b:64:30:67:90:cb:1d:4e:97:ce:e0:b9:82:
1a:4c:91:18:f7:2e:af:cb:cd:9b:25:b5:7c:85:19:
4b:96:bb:99:33:dc:d4:f7:a1:46:8a:5a:9e:89:43:
b2:8b:96:31:36:2a:b2:00:e6:c7:f8:4a:46:fc:9c:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:DF:D1:F7:F3:CE:8F:45:FF:41:EA:65:3D:67:4C:EF:35:40:35
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:4a:02:83:7e:74:23:c4:c1:03:bf:5c:53:92:cf:ef:3d:
5d:ff:64:4d:ee:7d:c4:cb:11:3d:f2:c4:a6:27:4b:eb:8c:fe:
98:90:78:8e:50:da:07:0e:00:06:59:64:0f:29:4b:d0:9e:2f:
96:5e:60:c0:3e:77:b4:1c:88:08:41:e1:73:73:e2:cb:f4:1c:
73:79:5b:e2:79:ea:03:4d:ae:fa:f7:9d:a5:7f:dc:f7:5f:71:
f6:d2:36:6e:6d:79:f8:54:f8:a0:b4:89:78:ee:70:f3:95:6f:
2b:12:50:f1:8a:bb:3f:d8:69:1b:15:8e:cc:f3:65:27:8d:27:
a7:fa:26:57:76:9d:f5:99:b5:83:2d:da:ee:14:35:7d:5f:4f:
22:50:da:2e:93:45:9f:16:50:18:59:71:11:cd:6d:20:de:15:
ba:b2:0d:67:3e:4d:79:b5:a7:9b:72:2c:b8:d9:5c:1f:8f:f5:
40:95:96:48:04:81:5f:ff:9f:dc:2d:04:7c:f5:57:a6:15:79:
3e:95:5e:e9:05:d3:37:4e:8e:15:c5:f6:c0:df:d5:d0:7a:e8:
80:19:0a:0a:25:64:73:34:dd:1e:07:9b:36:f3:b7:a0:37:79:
1f:ac:ac:a6:7e:6e:b9:2c:54:9b:e1:02:7f:a6:0a:f5:46:76:
df:5e:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:40 2025 by rpki-client