This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier: lFwFSeL8r7hbF39Q3ACFigSFCfMGplUZCEnVSPLP1ls=
Subject key identifier: 67:29:CB:1C:BF:FA:F2:46:E8:4B:E0:87:30:CA:4A:F9:B1:C2:42:E5
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer: /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial: 019AF276FDE262445CEF461B119360951D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number: 175E
Signing time: Sat 06 Dec 2025 07:01:15 +0000
Manifest this update: Sat 06 Dec 2025 07:01:15 +0000
Manifest next update: Sun 07 Dec 2025 07:01:15 +0000
Files and hashes: 1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: q14FsqxrNiQR2r1HqdcApFSgf+lq6Qj9eSQwtS2BkzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:fd:e2:62:44:5c:ef:46:1b:11:93:60:95:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Validity
Not Before: Dec 6 07:01:15 2025 GMT
Not After : Dec 7 07:01:15 2025 GMT
Subject: CN=6729cb1cbffaf246e84be08730ca4af9b1c242e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:c4:44:bf:fe:95:9b:77:8f:f9:93:b1:1e:
89:d0:93:59:d0:85:ba:79:05:00:e0:3f:3c:d3:3d:
1e:a1:d4:12:bd:15:d2:f3:2e:9f:87:23:cb:af:d4:
5b:f8:91:2e:37:8e:95:41:76:91:f1:b4:d3:1e:13:
f8:61:05:20:21:9d:e0:fa:2f:1f:bb:be:01:c7:ef:
ef:8d:42:a4:c0:e4:4b:41:19:e0:eb:12:a4:2e:e7:
e4:a5:91:ea:5f:e1:fb:24:49:66:88:69:da:35:12:
68:8f:65:72:0a:b1:a7:d0:b8:b0:97:a1:86:33:ec:
bc:3c:57:4c:6c:05:f0:ed:35:6f:04:8b:4b:ba:8b:
be:8c:98:0b:06:42:7b:58:a0:92:b7:54:21:d5:3d:
9e:70:99:b0:b4:16:3a:d2:fb:60:2f:27:04:33:a7:
81:73:20:52:a5:25:ec:ed:73:02:b3:5e:9f:0e:b3:
b9:8a:f0:ec:7d:bc:1c:6b:ad:eb:51:9d:fb:38:0c:
18:42:b5:44:e5:21:cb:87:6a:fa:a9:73:4b:27:70:
22:fb:a1:23:63:e2:12:57:d1:72:76:d3:22:1e:81:
2a:78:5d:d4:76:2f:df:2a:e9:fd:f5:7a:92:bc:68:
93:82:2a:e4:1d:6d:61:e2:d0:55:85:d0:40:05:6e:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:CB:1C:BF:FA:F2:46:E8:4B:E0:87:30:CA:4A:F9:B1:C2:42:E5
X509v3 Authority Key Identifier:
keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9e:88:b9:13:bf:7a:ba:a2:8b:39:cc:9f:c4:63:67:37:ea:
aa:61:06:34:3c:47:35:48:99:15:17:78:f5:1d:3c:dc:5b:5e:
8e:04:18:cd:be:b0:e8:54:27:af:64:00:ca:77:97:a4:70:03:
82:5f:2b:e8:25:b8:3d:52:0a:50:2f:16:32:4a:3e:04:cb:4d:
f8:f8:79:5d:92:37:8c:fd:e4:3c:80:b2:84:6c:0e:bb:6d:74:
ab:80:95:80:4c:fd:b3:f8:f1:6b:3d:0c:92:ae:e9:1f:0c:86:
e1:d6:f7:2f:da:bb:08:a2:c8:6e:de:fb:8c:50:ab:12:c0:7d:
8f:7a:80:68:ee:c3:96:da:04:45:13:5a:7a:26:d5:f4:b9:6f:
40:93:8f:e6:92:13:b8:35:4b:b6:e7:b0:ee:d8:20:28:1e:c2:
29:bf:35:c5:ac:c5:01:5e:7e:10:d7:de:1f:fe:a1:f2:43:1d:
7d:d4:7c:fc:af:e3:3e:41:fe:28:9b:64:78:9c:78:15:bd:5d:
1d:42:56:94:23:eb:18:29:3c:3b:d6:74:2b:cd:fe:0a:7e:f2:
ef:c0:2c:5e:e2:a3:45:24:86:35:8f:33:58:bf:1b:da:44:85:
23:fe:5f:c6:bc:4d:6e:f6:80:2a:e9:99:18:a9:0b:fc:55:da:
49:32:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:29 2025 by rpki-client