This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File: xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier: 81NrmXkDVNep2iqmGJhzyIMrwmXknJkzxdSPU3IuMU8=
Subject key identifier: F3:B2:F1:69:F0:72:B3:FD:6F:3B:6C:14:BE:16:DE:C2:36:0B:4F:E3
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019AF276B3514E389C158E8509066E7AC3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number: 0892
Signing time: Sat 06 Dec 2025 07:00:56 +0000
Manifest this update: Sat 06 Dec 2025 07:00:56 +0000
Manifest next update: Sun 07 Dec 2025 07:00:56 +0000
Files and hashes: 1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
3: c0033PUKHcK0RGnP2G-A-PBcvHI.roa (hash: 2Ou36KzazZ/RW5paKom4FLZjeLVkyhsmjYIVTfOC2XI=)
4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=)
5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=)
6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: V1vEsX3M55pC7tBdhTfd4XG6dFKlhugv843KoyeTvNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:b3:51:4e:38:9c:15:8e:85:09:06:6e:7a:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Dec 6 07:00:56 2025 GMT
Not After : Dec 7 07:00:56 2025 GMT
Subject: CN=f3b2f169f072b3fd6f3b6c14be16dec2360b4fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:14:ff:8c:e4:02:d1:20:64:b2:a0:ad:02:
e0:74:e4:36:5b:b0:49:ab:1a:50:d4:f6:81:f8:e8:
5f:a9:92:82:d4:11:01:8e:ed:87:fa:d7:0b:5f:73:
37:49:02:74:08:9e:4c:aa:f4:76:b5:34:1f:2c:cf:
bc:80:ab:98:df:19:10:65:10:99:47:f6:7e:7f:a0:
40:c6:8c:31:70:6a:9d:0d:47:ec:a5:c5:ab:79:38:
c3:19:03:a2:27:a7:03:0e:51:a6:a3:19:b9:37:1e:
b9:1b:ab:58:76:99:96:a6:95:be:e0:94:98:83:b3:
f1:39:8e:d0:87:63:2d:20:e3:70:94:91:cd:a3:81:
8e:3f:a5:c8:98:15:2a:f0:fc:e0:7d:fe:ca:46:3c:
7b:e8:0b:0c:83:02:10:c3:ce:37:83:a9:b3:f1:cd:
aa:37:2a:c0:40:11:6b:86:33:31:24:42:25:e4:ed:
1e:71:7e:fb:37:f7:a2:ed:2b:39:2e:ab:2e:60:39:
c6:f9:b7:3b:55:0c:f1:78:2c:5d:a4:48:c9:15:b2:
1c:a1:cd:9d:6a:73:2f:76:4f:8d:ee:38:eb:ad:5b:
18:b2:d9:ea:60:77:10:0b:90:79:5f:66:fa:a3:50:
83:27:a4:04:01:02:bb:5b:55:41:90:77:9e:c5:25:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:F1:69:F0:72:B3:FD:6F:3B:6C:14:BE:16:DE:C2:36:0B:4F:E3
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:50:e7:32:2c:35:a2:c8:91:ee:57:9d:af:36:b7:b0:90:3a:
a0:bc:5c:db:39:c5:3b:8b:0d:62:ba:0a:83:98:d6:1f:1e:73:
e6:0a:50:6f:3f:19:b3:69:40:36:e1:3f:0f:cb:2e:3a:9b:ab:
eb:fb:9f:9d:53:0d:61:9c:45:e8:81:b4:34:04:75:86:09:b4:
c6:77:ea:5f:4b:4c:e8:8f:64:c3:7c:12:71:77:6e:b0:2f:67:
13:8f:1c:4c:1c:c1:d3:c4:5c:2f:f1:79:23:80:dc:31:1c:82:
c8:d0:c7:28:41:4d:1d:f7:94:1b:7e:10:47:dd:1e:60:5d:24:
78:35:48:6c:46:fc:92:09:90:2e:fb:da:16:c6:2a:41:d8:39:
70:40:34:63:2e:81:5f:d8:01:cd:b3:b7:9a:8c:7d:2e:da:52:
99:1a:76:04:05:a8:b4:72:91:71:01:cc:24:67:a6:ab:05:b4:
7a:3a:cd:6e:d1:11:16:8b:03:82:b8:cc:5c:6a:23:2b:1f:88:
03:52:55:77:2f:87:2e:31:86:8c:1c:79:82:d5:67:28:27:90:
8c:fb:89:4e:04:11:19:48:1d:86:31:6b:47:7f:ef:91:ce:4e:
5a:52:43:56:78:af:b4:83:1f:86:d3:34:32:ad:9d:25:f8:03:
77:5e:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:31:05 2025 by rpki-client