This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: x5MD0YRSi+Tv8CzJTyXYg0LUX8x+opjhCFV2v8mkJzs=
Subject key identifier: CB:1B:00:A9:E5:BA:9A:65:CF:78:74:20:F6:2D:AE:46:6D:A9:8D:8C
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019B3EA36E2DB49344B7F72B94596A527129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 123D
Signing time: Sun 21 Dec 2025 02:00:56 +0000
Manifest this update: Sun 21 Dec 2025 02:00:56 +0000
Manifest next update: Mon 22 Dec 2025 02:00:56 +0000
Files and hashes: 1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: OqTStXjw+FekbxVJwVLGzJ8qQW5UcMSsc8doi9Kw780=)
2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:6e:2d:b4:93:44:b7:f7:2b:94:59:6a:52:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Dec 21 02:00:56 2025 GMT
Not After : Dec 22 02:00:56 2025 GMT
Subject: CN=cb1b00a9e5ba9a65cf787420f62dae466da98d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:4a:62:cd:19:de:ed:5c:80:b3:b9:da:30:
96:0c:d5:c9:8c:06:f9:c3:3a:83:ea:52:fa:81:e4:
cc:65:46:5e:c8:03:0e:2f:18:91:70:2c:10:05:5e:
a8:97:8a:25:f6:39:0c:9f:d6:f3:98:cd:b5:18:bf:
cc:59:de:16:3e:fa:85:2b:50:2b:0e:7b:d8:e9:20:
b3:87:53:fc:eb:7c:e6:c8:12:12:fc:19:2c:a5:28:
34:7c:a7:d0:0a:7f:d5:c8:b2:ae:a9:a0:5c:13:81:
13:e7:31:f6:ec:4e:c1:45:f2:2c:a6:e0:44:63:94:
91:3c:71:21:e5:a1:63:4e:12:4a:59:d4:34:b6:12:
c9:51:ca:2e:20:d3:23:ea:14:52:f5:c1:34:1b:81:
a3:56:8f:f9:d5:a3:14:f5:1a:0b:f4:bf:df:38:84:
51:2c:41:48:c8:c6:a0:6a:c5:24:bc:4a:63:a0:84:
4d:17:45:54:cc:11:93:e7:ea:13:6e:32:23:d7:a2:
b9:34:5e:48:0f:23:da:df:ba:2d:3c:89:52:b5:77:
74:61:0c:77:09:6e:4f:66:19:59:1c:fa:19:37:5d:
48:ce:b2:23:f8:01:ef:e4:80:42:30:c9:5e:89:a8:
c5:fd:57:36:11:68:89:dd:db:e7:85:bb:be:f4:fd:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:00:A9:E5:BA:9A:65:CF:78:74:20:F6:2D:AE:46:6D:A9:8D:8C
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:db:7c:44:c2:9e:4f:69:4c:87:4d:96:a2:1c:ed:de:a9:db:
57:89:67:ae:26:90:2c:20:36:fd:fe:32:1f:d5:d9:99:8d:da:
1d:75:89:00:ac:6d:56:01:70:6f:8f:e8:bd:ff:87:40:94:53:
de:2f:25:47:89:77:39:93:07:c9:32:a0:7c:e3:45:b0:16:de:
bd:48:74:61:c7:96:c7:72:ae:7a:ae:e5:ae:1c:da:5f:bf:ca:
26:92:c4:86:bd:19:51:2b:4a:64:9f:34:bf:86:28:c1:fc:0e:
96:16:74:70:31:40:82:ba:30:31:be:e2:3c:02:65:79:84:53:
4f:59:c1:5f:28:44:9e:5a:e4:09:99:36:f7:ea:1f:66:17:c8:
57:d7:6d:a2:ba:98:4c:1c:96:30:26:59:7d:64:35:95:db:24:
15:10:8e:b8:55:50:08:e7:92:07:cb:3a:9e:d2:d8:01:99:7a:
f9:08:95:5c:56:a8:0d:ee:97:67:63:92:f3:bb:a6:a8:fe:f5:
99:6a:b7:f5:ad:16:00:8f:c3:7c:0e:01:e8:1d:ca:f3:39:31:
7f:0e:85:80:95:18:c5:5b:5c:25:d3:50:c7:8d:fc:bb:6f:4d:
66:ed:56:3b:d3:36:61:b3:bb:56:3f:e4:16:04:6a:64:47:39:
c1:ce:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:51:07 2025 by rpki-client