This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier: fIa3S3IDK+seKHCu/SYxYcoFyK4oGfbMGHN0cbROZbE=
Subject key identifier: F3:2B:D7:64:8B:15:A3:84:3A:76:B3:F5:4C:EF:B3:90:EC:E0:80:59
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 019AF5AEEF13B7ACD89B30D2310813138F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number: 04B6
Signing time: Sat 06 Dec 2025 22:01:13 +0000
Manifest this update: Sat 06 Dec 2025 22:01:13 +0000
Manifest next update: Sun 07 Dec 2025 22:01:13 +0000
Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: j/7r7RVuIutJ2P5kgG3l89BuI/B4FRvQo/TiwQb+en4=)
2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:ae:ef:13:b7:ac:d8:9b:30:d2:31:08:13:13:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Dec 6 22:01:13 2025 GMT
Not After : Dec 7 22:01:13 2025 GMT
Subject: CN=f32bd7648b15a3843a76b3f54cefb390ece08059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:63:36:f8:37:7d:42:15:37:b8:c5:73:5a:
0d:9b:c9:45:5f:e8:5d:37:46:9b:ad:27:e0:1b:6a:
cd:b2:c6:de:71:3b:e9:7e:f0:ca:f7:50:74:bb:ac:
ec:53:a3:56:08:13:1b:df:7b:ee:18:e0:66:f5:fb:
c5:8c:0d:71:1e:80:6c:81:31:07:1c:3a:aa:74:20:
a3:05:1c:d0:d5:f7:25:1d:e8:62:3e:b4:33:a5:f4:
92:2d:d3:50:a7:f1:19:13:5c:2f:e0:d8:4c:7d:5f:
fb:28:d7:fa:c1:75:1b:d4:5e:f3:04:1a:e8:2a:7b:
73:b8:53:77:d4:64:2e:0f:41:c1:84:e3:29:c5:db:
ad:32:d6:5d:4e:1a:29:ac:5f:fe:e0:28:b8:83:65:
8b:49:e7:43:dd:a1:10:b1:24:b3:fe:56:5e:f3:59:
2e:b8:22:de:49:31:65:21:4b:bb:3c:b4:8d:c6:68:
cb:66:e1:6a:41:24:63:fe:fd:d7:d1:91:be:1d:02:
d0:02:a8:83:bd:f4:3e:84:3a:d2:3a:d8:56:b5:71:
30:f1:3c:f6:77:30:4f:8b:f7:68:ab:90:b6:48:f4:
d8:08:2b:94:b7:96:e8:c9:27:1f:17:1c:ef:f7:c6:
97:ec:f6:41:18:c0:70:ef:9c:68:43:3e:3e:83:fe:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:D7:64:8B:15:A3:84:3A:76:B3:F5:4C:EF:B3:90:EC:E0:80:59
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:0c:fd:05:bd:07:6a:c9:f1:5c:db:62:20:aa:87:94:11:
ea:18:6d:59:b6:78:3d:a9:7b:85:90:b3:bf:92:ab:a8:39:60:
dd:c2:39:2c:62:ef:75:76:5f:ec:f7:d7:b2:79:ac:f5:87:2f:
3b:aa:d9:9b:14:5a:33:4e:bf:d1:95:a4:fe:29:79:1a:65:87:
36:b0:66:47:63:6b:2c:9d:e6:1f:04:20:f2:33:72:d4:86:3a:
c4:13:4e:13:b6:a7:3a:cd:72:c2:0e:a7:c5:94:cc:f1:1b:08:
55:f8:b7:d0:ad:de:02:70:78:bc:6c:15:bd:16:4e:57:4f:da:
70:b1:c4:39:c4:ea:75:03:25:e4:9d:32:57:26:95:da:39:8a:
22:fb:d3:a7:d8:cb:3d:1f:65:d7:53:62:30:a1:f9:c2:c9:50:
74:07:e7:e4:64:18:25:fe:a5:67:c8:54:92:ec:12:86:84:90:
b7:17:58:39:77:66:15:f0:da:10:5e:62:90:e6:0d:4e:1e:67:
93:2b:6a:59:39:7c:d9:7c:80:0d:6a:4f:45:f7:51:66:8c:95:
59:5a:f3:48:4e:7b:54:0f:bd:e2:cd:94:03:f4:41:85:a2:c1:
ff:b2:ef:db:1a:3b:07:c2:48:2e:0e:ad:7c:a1:b9:99:df:e4:
11:28:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:17:50 2025 by rpki-client