This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: mLi+1VjlhbchjRB6ONeFXirRkJbKNG3gzXFbZ2BfYtk=
Subject key identifier: C1:05:AE:5D:0C:53:B5:A9:66:D1:66:03:DC:B8:64:6C:AD:E8:86:79
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 530075DC90483260E240E243C65AB9AF40F1A9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 0595
Signing time: Thu 18 Dec 2025 04:12:31 +0000
Manifest this update: Thu 18 Dec 2025 04:07:31 +0000
Manifest next update: Fri 19 Dec 2025 05:20:31 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: XPd3scJH66ZghZ0GyvVv/pTxznHy550hkDZk+eijdIU=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:75:dc:90:48:32:60:e2:40:e2:43:c6:5a:b9:af:40:f1:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Dec 18 04:07:31 2025 GMT
Not After : Dec 19 05:20:31 2025 GMT
Subject: CN=C105AE5D0C53B5A966D16603DCB8646CADE88679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:b6:00:b1:fe:e3:bd:cd:76:55:0a:5f:fc:
f2:e7:fc:98:53:fe:a3:c4:46:3e:5e:ec:35:73:c9:
a0:d2:6a:e4:5c:d6:ed:bc:f8:0e:8f:67:0a:07:21:
7c:b5:61:2e:48:a8:63:ff:43:d9:93:58:a2:44:1d:
6c:63:31:87:df:e7:03:6d:ef:3f:39:dc:a7:06:29:
2d:9a:3c:aa:f0:7c:e6:d2:5c:16:8b:35:8e:a8:35:
e3:15:47:8a:ba:33:a3:ee:78:85:c7:7a:bd:dd:b0:
a7:d9:4c:3e:c6:62:4d:4c:29:1d:d0:79:55:63:41:
bb:a7:f7:d3:2c:56:83:aa:d2:a7:1c:79:f3:12:53:
6f:a1:a0:76:49:41:d8:e3:14:d1:d7:94:ab:f2:85:
76:17:5c:ae:5e:9b:2d:88:e4:3d:b9:f0:8c:31:8b:
e0:39:03:9d:5d:eb:56:84:ec:c6:a7:f9:6a:32:32:
5d:c5:65:a6:35:fa:04:f1:d3:bd:87:8e:74:fb:70:
9a:65:6a:fc:39:de:86:6e:8e:2e:b8:d8:e7:e3:cc:
a7:7d:09:06:80:1e:81:b2:96:6c:5c:24:c2:13:ce:
fd:5e:89:29:2c:53:e4:db:74:95:9f:ec:22:ff:43:
de:03:64:43:01:26:90:38:fc:ca:de:0e:32:59:12:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:AE:5D:0C:53:B5:A9:66:D1:66:03:DC:B8:64:6C:AD:E8:86:79
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ad:bc:f1:a7:91:70:00:ec:13:cf:bb:ba:a2:46:a0:9d:4e:
4d:66:6a:41:e9:06:bd:56:90:dc:f2:a7:1c:1d:d4:00:87:70:
3f:ac:1d:4a:f2:5c:49:3c:be:54:f8:5d:ec:16:48:80:9f:83:
32:a8:54:ce:23:c0:e0:b2:3e:72:c0:94:b2:ce:32:73:71:36:
36:a6:66:1a:51:7d:57:b3:f8:26:2d:b5:4d:8c:6e:c3:b7:9a:
ee:a7:78:48:cb:02:ea:1f:f8:8e:db:b4:35:e0:32:b0:74:41:
36:3b:d5:e0:74:b9:cb:87:9d:89:ed:a7:75:8c:19:48:bf:f3:
5b:33:c5:8b:d3:7b:a2:7c:e7:a3:80:84:d9:27:f5:8c:4c:44:
90:f4:8f:94:47:67:f3:e3:6e:b6:82:74:74:f9:4c:d3:85:aa:
ff:0c:22:5b:98:7d:56:59:1f:89:bf:ec:8c:fb:e3:cc:26:98:
6d:d0:a7:b0:3f:e7:50:03:09:1d:5b:ef:22:44:35:58:6c:d6:
82:c2:05:a9:c2:6a:03:2d:31:a6:85:48:0e:ad:39:87:ee:f4:
97:56:f4:cc:7d:a9:17:6f:fd:17:c4:d8:cb:34:2a:ec:0c:38:
37:53:34:e4:0a:0c:b3:06:ff:ee:4e:4e:ac:80:d5:79:8f:0b:
34:50:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:48:04 2025 by rpki-client