This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: UDxHrjrpbQd/6OeKS7mWJdhS8M7PyLw93H6NXAF2ZJE=
Subject key identifier: AC:CF:23:D4:D4:D2:3E:23:0D:0F:B2:D6:B7:C4:7A:51:DF:C1:48:F7
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019AF464F833FF9EF7B4FAD3CA26CC151D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 06F5
Signing time: Sat 06 Dec 2025 16:00:49 +0000
Manifest this update: Sat 06 Dec 2025 16:00:49 +0000
Manifest next update: Sun 07 Dec 2025 16:00:49 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: iNybujJOFNBNGkMXfzL4QWCK8SQd38RaZEFtXLLnCXg=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:64:f8:33:ff:9e:f7:b4:fa:d3:ca:26:cc:15:1d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Dec 6 16:00:49 2025 GMT
Not After : Dec 7 16:00:49 2025 GMT
Subject: CN=accf23d4d4d23e230d0fb2d6b7c47a51dfc148f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:51:e8:a2:ae:3c:9c:d2:c8:4a:e3:c5:01:
3f:8a:90:ea:d9:9e:33:3d:65:07:2f:39:41:a2:66:
ad:6e:91:66:a9:32:e3:d7:ab:bc:26:a6:c8:af:68:
b0:c2:f0:10:8d:fb:8a:78:c8:4e:77:b0:65:ce:b8:
ba:7b:c6:60:a8:f8:8b:61:26:4e:21:4a:c5:00:6b:
9f:8c:5f:8f:77:01:e4:89:12:64:e0:af:ca:1f:7b:
59:9c:d4:a1:85:ac:9c:d3:62:80:30:8b:24:b2:77:
42:20:e4:e8:30:4f:8d:bf:31:82:b0:3a:0a:74:98:
d6:60:3d:8a:2d:fc:26:90:68:16:93:ad:d0:c6:33:
5a:63:ab:47:d5:39:93:bb:1a:69:c6:27:fd:c4:6a:
9b:3c:da:23:3d:d2:d6:09:38:73:18:51:e5:d4:54:
c4:b0:e5:1e:6e:7f:27:41:b5:5b:59:59:3d:f2:f6:
49:76:78:ab:c1:70:48:58:ba:c5:3e:a0:eb:b6:08:
eb:23:0b:e6:1e:b3:a2:5a:30:22:1a:e8:9e:ae:2a:
31:83:91:96:f1:c1:4a:a0:71:98:79:28:a7:dd:06:
91:10:eb:c2:f3:e1:1d:f8:f0:36:60:9b:38:9a:bc:
6c:19:24:e3:bf:00:7b:2e:a1:9a:67:3c:ef:95:a2:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:23:D4:D4:D2:3E:23:0D:0F:B2:D6:B7:C4:7A:51:DF:C1:48:F7
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:f6:7d:f9:40:6a:3f:c7:5d:c0:e4:e5:90:f5:f1:3d:72:
c4:25:55:d7:d2:6f:34:bb:d4:d6:00:10:54:47:20:0c:02:19:
13:fd:ca:52:2c:1f:bd:51:c5:37:02:d8:be:e2:ad:3f:6b:3b:
a6:9d:26:d0:06:b8:86:c2:f1:aa:20:ed:7c:e7:d5:a1:b2:58:
45:e1:d7:b0:f2:53:1a:e7:87:21:54:7b:74:c2:55:a1:51:fe:
1a:bc:21:62:0c:dd:83:37:6c:95:1e:9d:a7:b0:04:ac:ea:e3:
15:50:26:71:fe:11:15:f9:5f:44:6b:b2:2a:77:94:d2:d4:d9:
77:50:89:c4:07:5d:77:a9:dd:e2:b4:db:01:cc:d2:25:a2:64:
a6:b7:0a:37:f9:ab:93:33:09:ef:26:1c:16:34:82:8b:02:64:
72:1c:50:6b:e1:cc:05:00:f3:77:82:7b:f1:23:43:a8:00:3d:
ac:e4:24:0a:e7:ca:a6:a7:a3:3e:75:2c:0c:d6:4c:96:3b:16:
a6:73:e0:8d:49:7a:5e:a3:67:02:3f:53:4e:c0:a3:94:9e:4a:
f5:a2:31:8f:ac:a6:f0:6d:ce:23:ff:07:0c:6c:57:c2:54:37:
be:a0:12:26:fb:dc:09:7d:e5:a9:a9:4a:93:c2:58:54:f3:ce:
c0:db:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:07:24 2025 by rpki-client