This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: /nrGlQzGTBwpJuoL5SWtiIkdL2+4AoDCvSz2CICYs8I=
Subject key identifier: A9:D8:75:56:EB:DC:D3:F3:4B:8F:40:9F:08:26:2F:36:D6:18:91:8C
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 019B2B8A2A94EF7C59EAE13E3C357257511B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 1780
Signing time: Wed 17 Dec 2025 09:00:33 +0000
Manifest this update: Wed 17 Dec 2025 09:00:33 +0000
Manifest next update: Thu 18 Dec 2025 09:00:33 +0000
Files and hashes: 1: EaL6Ix0Eou0QDLjCzFWl0ew8laY.roa (hash: yuhNShNhzz/MaGAXuOUPcECRlpw6IKQvZBq5XeXjSxM=)
2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: lTjJ9cBvr7HR+Ez5VSpm5UqTxUpEAuMyT9hI7yVdnio=)
5: xmPH32QYxN9sQH_6cI7fXoqHUEs.roa (hash: 1zn6wk2gZUPdlnR+sqdNWEYJ3GwxThzty4kNMpAjtSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:8a:2a:94:ef:7c:59:ea:e1:3e:3c:35:72:57:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Dec 17 09:00:33 2025 GMT
Not After : Dec 18 09:00:33 2025 GMT
Subject: CN=a9d87556ebdcd3f34b8f409f08262f36d618918c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:82:9e:c8:d7:b1:0d:65:f8:bd:53:c3:29:
81:75:7e:51:58:b6:bc:a3:eb:fc:86:c2:29:51:53:
02:bf:14:b0:62:f4:6c:88:cd:aa:b1:cf:8d:7b:bc:
aa:57:4b:06:98:5a:76:03:96:86:e6:55:e5:29:7d:
d5:e2:5f:10:b6:eb:5e:7b:8e:4d:b3:1f:e5:15:7a:
7b:1f:d8:78:d3:71:6a:65:9c:6d:f1:17:e8:bd:0c:
c7:9e:60:96:69:f3:40:d8:3c:df:2a:ef:2c:1d:43:
1e:e7:c6:bb:62:cb:78:d9:84:e6:17:e7:7d:19:61:
c8:f2:da:96:f8:0d:a5:5f:56:7b:0f:3d:d0:c6:ad:
4e:d0:d6:ae:d1:8e:2b:42:51:17:64:e8:a4:b2:82:
bf:e2:96:3c:5f:d7:dc:02:b2:06:5c:a7:e3:bb:33:
1a:3a:1e:15:40:12:27:78:e1:c4:e8:ac:d8:bb:a5:
3b:81:9a:32:22:3e:7c:7d:0f:37:57:9c:7e:98:aa:
dc:87:0f:2d:35:0b:33:ab:fa:29:86:06:58:2b:3c:
f5:98:91:3c:25:3a:a6:02:e4:61:f9:a7:82:a3:f2:
f4:20:9c:01:22:8b:03:e4:ad:ed:84:46:49:7a:1f:
e9:fd:bf:a0:15:10:97:64:90:64:7a:bf:7e:9e:e9:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:75:56:EB:DC:D3:F3:4B:8F:40:9F:08:26:2F:36:D6:18:91:8C
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b5:b7:c7:0f:ec:37:13:cc:13:b4:2c:ee:c8:19:c3:2a:76:
a6:92:ea:ae:e1:dc:69:67:05:7e:10:67:4e:a4:23:7a:1e:85:
1e:fb:56:23:1c:ba:9d:e7:a8:b7:af:88:74:bb:ae:58:bc:c2:
2c:cc:9e:50:a3:33:32:14:0c:de:cf:ba:f9:b4:ce:cd:94:6a:
0e:9e:f2:66:f7:f4:2e:e9:37:81:a4:86:41:02:b2:57:6c:52:
05:8a:2f:30:43:9c:44:3d:d8:66:74:53:dc:a3:a8:34:c9:9a:
7a:cf:24:14:9e:55:00:a7:73:2f:29:ba:4b:70:a7:1b:07:dc:
a5:52:47:9b:e5:58:8e:92:87:99:5f:3e:0d:d8:69:65:91:5a:
d4:a4:ee:0e:ba:3b:9c:20:a5:51:b4:8e:70:2d:7c:61:90:c3:
cd:25:25:a2:6c:e1:b5:e8:3c:02:6c:a9:de:a8:9a:f2:f8:28:
83:99:80:6a:bc:fe:b3:91:29:eb:1e:6c:c9:05:e5:dc:87:d2:
86:d4:8f:ba:0d:0e:c8:b0:a1:f5:4d:64:58:ba:66:0d:46:e8:
66:a3:56:eb:dc:87:5d:b6:84:14:89:ce:01:80:2d:03:5b:90:
80:44:bf:d4:45:68:93:95:b2:7f:0a:77:30:74:f9:71:aa:a3:
18:1f:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:48:21 2025 by rpki-client