This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File: 6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier: Ug4hrWAqPUMvwievnjsB7DTd99bZ9R4cHZZPp2kTi4c=
Subject key identifier: CE:64:22:D8:68:77:4F:56:F4:1E:8C:65:25:B8:65:57:E4:55:4F:DF
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 019AF5AEFE9774F16D95C69A230E4BF64842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number: 1703
Signing time: Sat 06 Dec 2025 22:01:17 +0000
Manifest this update: Sat 06 Dec 2025 22:01:17 +0000
Manifest next update: Sun 07 Dec 2025 22:01:17 +0000
Files and hashes: 1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: ZxlpzBKuAhds+rm24ln9M13w2+tLjfV3gqt8Gsb4ik8=)
2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:ae:fe:97:74:f1:6d:95:c6:9a:23:0e:4b:f6:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: Dec 6 22:01:17 2025 GMT
Not After : Dec 7 22:01:17 2025 GMT
Subject: CN=ce6422d868774f56f41e8c6525b86557e4554fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:17:88:7e:58:81:c0:bc:e6:b3:8c:46:94:
29:62:35:91:b2:12:6e:45:c9:e8:a4:e2:13:f1:99:
e1:87:34:ae:65:a0:6c:05:43:48:b0:cb:f8:0e:a5:
16:9b:5e:7d:93:59:29:6e:31:73:33:30:ea:8d:7d:
8e:b3:65:6a:aa:90:28:85:ec:97:18:66:6a:5e:4d:
64:ab:29:65:62:4e:ca:36:1e:65:6d:e9:7b:2b:37:
cd:e4:47:6e:58:67:e4:e4:12:4a:98:97:04:8d:e3:
2c:49:d3:b1:64:5e:61:f5:f3:fb:b8:59:d6:4d:21:
c9:93:82:24:80:16:06:23:6f:f9:db:c8:45:54:ff:
01:87:71:ed:a9:73:97:51:97:8e:ca:fc:fb:15:cd:
c2:7d:51:06:8c:40:c8:4f:f5:2a:f5:da:1e:0c:5b:
40:fc:ca:93:98:54:78:dc:a9:aa:85:15:5a:81:75:
1e:9b:4d:ba:2e:00:5f:9d:a2:10:8d:06:be:f4:16:
1d:21:68:6c:36:19:2c:d1:5b:c0:d1:f4:ce:c2:08:
60:74:7d:fd:f3:08:4c:15:a9:04:50:7f:10:19:70:
a6:d0:bc:29:7a:4c:68:95:70:50:29:73:36:ce:b9:
20:ab:9a:ad:09:94:1b:9f:5c:58:f7:4b:9c:f5:69:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:22:D8:68:77:4F:56:F4:1E:8C:65:25:B8:65:57:E4:55:4F:DF
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5a:d6:ec:03:26:99:a1:4f:89:99:c2:8a:22:85:6a:d2:b0:
d5:c9:0b:86:d1:a1:e1:25:6e:43:b6:36:db:43:f2:f1:0b:eb:
a5:5c:bd:b9:a3:06:92:ad:b6:4e:88:94:0d:3b:9a:91:6b:6b:
40:f4:f0:96:ca:76:c3:b4:38:2f:0d:d7:05:12:5b:00:3d:ee:
1d:78:5c:06:80:0e:4c:ba:bb:9d:8e:fd:ee:a9:8d:5b:92:6b:
63:a9:60:6d:61:91:86:0f:a9:51:2e:90:18:ba:fd:37:ea:d5:
63:a7:fc:ab:89:2c:0f:6a:01:c4:c5:e3:0e:48:27:50:fb:04:
22:65:a6:c3:d8:be:1c:1c:6c:d4:47:e4:e7:fd:05:69:d4:2a:
f4:96:f1:fe:c9:b2:0d:63:b2:7c:b5:20:64:6a:43:b8:56:00:
84:dd:3d:1c:bc:64:76:50:4b:0c:c9:f4:de:5b:2c:d6:93:9b:
cc:a8:8a:0e:24:a5:dc:8e:aa:80:0b:ba:b3:3a:05:62:c7:fe:
e3:e7:42:ca:a8:fc:5a:03:02:45:48:b1:fd:b0:46:ce:e8:ab:
cf:8e:a9:b0:57:2f:9f:ea:0e:e6:1a:68:3e:e2:36:3a:06:0a:
90:c6:12:11:84:0d:aa:32:b1:12:87:0e:17:49:f8:d7:77:32:
85:43:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:12:12 2025 by rpki-client