This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: dnukkiGdJ9bhVd773JDTdTDKhyGXCVyM/kTzWO37nno=
Subject key identifier: DC:01:5E:CF:78:3C:3F:9B:DF:16:59:A1:CE:02:97:AF:CE:94:EB:C8
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 019AF19AA1103096806C205A3F5320588D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 0552
Signing time: Sat 06 Dec 2025 03:00:34 +0000
Manifest this update: Sat 06 Dec 2025 03:00:34 +0000
Manifest next update: Sun 07 Dec 2025 03:00:34 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: kahbkkqMkBoyYK6dTRd3psysrlEcI7fVzMXSIlq5k8U=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: rQUKCahIBhl3q6X_ssqHaslUPkw.roa (hash: oqWMNr1y2jXmtuppkY6LyFtpsdVUxnQjZycMv+hYavM=)
4: tFTfuySubfSrRVHUhxYeF1u80Zs.roa (hash: fQsA3U2f82hs7Bti4LUoQIz7rVn7qpzt4RTZ9jhDkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:a1:10:30:96:80:6c:20:5a:3f:53:20:58:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Dec 6 03:00:34 2025 GMT
Not After : Dec 7 03:00:34 2025 GMT
Subject: CN=dc015ecf783c3f9bdf1659a1ce0297afce94ebc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:04:16:99:d8:0d:7c:38:d1:73:c7:1b:7d:
ba:bc:c1:5c:e7:9f:bd:9b:88:ee:d2:ee:15:5a:72:
21:72:e7:d0:47:00:8b:c1:09:0f:87:e8:9d:2d:2e:
8e:9b:8f:a6:92:9d:a3:f8:28:ea:0c:93:2b:76:c3:
1b:8e:00:8a:9c:c8:6a:2e:2c:d3:2c:3b:b2:28:dd:
58:7b:8a:3d:ba:67:45:57:cc:c7:2d:ed:c6:c7:e2:
40:ff:1d:e1:a9:f7:bd:c2:74:ff:fb:07:1f:17:65:
67:10:64:40:ed:6e:c1:1b:15:31:b7:d9:a7:31:90:
cb:f5:4d:08:ad:80:b2:2c:1e:cb:bb:2e:30:3d:77:
b9:97:82:67:ce:16:a4:44:cf:70:97:e1:03:12:16:
0c:87:5d:1f:00:33:ae:8a:b5:e4:0a:1a:ae:8c:b7:
22:1a:76:91:fa:81:b3:ae:13:11:a2:fe:6a:4f:af:
ba:93:b9:06:7f:a4:d1:d8:37:f8:f6:b0:d6:58:63:
eb:f2:ed:38:1b:e3:21:6f:0e:bf:e5:04:e8:de:82:
f4:8c:72:cf:90:b7:37:ec:c3:0c:fb:38:ee:69:c6:
9c:08:1e:9e:4f:eb:60:2f:45:6b:b5:7a:66:2f:b7:
b9:a3:ee:9f:be:a8:85:26:86:e2:ec:e4:94:05:81:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:5E:CF:78:3C:3F:9B:DF:16:59:A1:CE:02:97:AF:CE:94:EB:C8
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:07:94:8b:41:cf:d0:eb:21:3c:ec:de:24:28:85:e1:d0:
21:77:88:0b:81:e3:eb:14:4e:d1:9a:c2:e1:27:00:3b:5f:d8:
bb:f8:f0:95:6b:96:3e:e4:4f:24:2c:a6:4f:6d:6f:5d:4e:93:
ba:7a:1a:7e:7e:b6:c2:ad:b6:d1:f0:76:81:31:a0:34:93:59:
db:fb:28:43:10:54:bc:38:e9:5b:ce:7d:e7:e7:97:00:99:ff:
53:af:96:3b:f8:8c:55:38:fd:0e:24:2c:77:eb:fe:84:80:02:
fd:24:2f:17:29:6e:00:9b:2d:0e:da:06:8e:f1:d1:00:b7:e1:
43:ef:38:bb:d8:cb:c2:3f:95:c3:03:47:3b:bb:9e:ff:1e:66:
51:99:ad:0d:ad:69:c8:e2:5e:5b:4f:c1:3c:44:79:81:d6:03:
15:bc:36:a2:20:cc:52:0b:bd:38:93:65:91:07:79:2f:7e:16:
97:8e:ff:e4:b3:ea:bb:8b:35:bb:2e:dd:6a:7a:be:e8:a7:79:
9a:44:c2:27:dc:dd:7e:a5:fd:69:1b:56:ee:fd:2f:d1:9f:8f:
e2:fc:eb:ec:0f:7d:66:a3:ad:db:88:1d:a4:91:c1:04:9f:13:
82:75:54:b3:62:ee:b9:14:53:93:3a:d2:f3:5f:28:e3:6f:a7:
9d:55:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:28:09 2025 by rpki-client