This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: bbWaKoxAFQ753Rn4IugkxuPafKVmeeKBH66T+++Ik0s=
Subject key identifier: 9A:52:31:3C:BC:FF:01:5A:95:06:40:D3:B1:CA:B7:A6:A5:97:63:7B
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 019B3BD9CB9CDD59C80EDD922761D01738DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 06FF
Signing time: Sat 20 Dec 2025 13:01:27 +0000
Manifest this update: Sat 20 Dec 2025 13:01:27 +0000
Manifest next update: Sun 21 Dec 2025 13:01:27 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: +nccBQcEi2QDCONozYZpdMClzKne374e3qMxIQ7zI+s=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:cb:9c:dd:59:c8:0e:dd:92:27:61:d0:17:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Dec 20 13:01:27 2025 GMT
Not After : Dec 21 13:01:27 2025 GMT
Subject: CN=9a52313cbcff015a950640d3b1cab7a6a597637b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:e7:1c:ac:27:b0:47:6e:2f:78:6e:78:1e:
fb:6a:25:1b:6d:f3:2f:ce:9c:de:40:0a:56:5b:cd:
3e:b7:3f:94:1b:3e:b5:47:96:5a:1a:99:9c:fd:82:
d8:93:34:27:1c:4d:fb:f2:25:e9:ef:bf:08:e2:90:
31:4c:3f:9f:44:0a:cf:3c:c6:df:c3:91:f5:8e:b3:
b5:48:4d:a2:a1:88:53:ee:4c:0e:fa:f1:cb:c0:00:
6c:0c:97:ff:c8:b8:19:23:e1:60:cf:e6:62:4f:9f:
58:6d:32:fe:86:73:cf:7f:3f:e4:7c:7c:fa:6f:c6:
97:5a:ca:4a:ea:4d:e8:b1:eb:7e:ce:f9:3b:3e:1b:
5f:3a:74:87:1e:94:c2:84:fe:fa:f4:1a:cd:19:94:
28:16:51:d4:8f:5c:31:9e:86:ea:8c:21:74:3f:9b:
48:fc:bc:f4:dd:49:a2:a6:e2:16:12:14:33:e6:e0:
b3:2a:12:84:da:fd:3a:e2:32:3b:c6:da:07:2d:ca:
89:3f:72:08:ec:b1:3d:40:ad:df:3a:47:6e:b4:c9:
a3:00:69:05:4d:ed:1a:fd:ca:c2:b0:7c:4e:5c:7b:
90:22:95:83:79:43:28:b1:37:52:59:af:52:eb:57:
b3:7e:71:1e:6e:ca:72:89:3e:59:cb:ed:6a:d1:96:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:31:3C:BC:FF:01:5A:95:06:40:D3:B1:CA:B7:A6:A5:97:63:7B
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:ad:b4:21:62:7f:56:2c:f7:47:55:54:a5:55:7a:4a:a3:
c3:77:f6:50:cf:47:f0:ac:67:ed:f5:a5:30:d6:04:d6:ce:ad:
99:ac:dd:cd:0e:39:ac:8b:d6:82:ce:32:e9:3d:8e:f2:d0:3d:
9b:a2:f1:bb:d8:a7:03:b5:83:19:4f:c8:87:85:ee:ed:cd:5f:
6f:4c:36:0b:13:f7:cb:90:d8:c4:92:04:f4:3e:af:64:c9:c7:
16:39:8a:d0:4c:31:92:a6:15:79:3c:90:ef:cd:d8:9a:24:92:
64:0a:cb:af:9a:da:2c:29:7b:7d:be:db:4b:8f:3a:8c:8b:3f:
0a:8c:62:17:7e:fa:24:2d:ef:d6:0c:ff:e7:d8:da:8c:6f:f1:
4e:72:8b:fd:c2:21:5f:2c:a6:de:08:05:17:2b:51:93:ae:b8:
11:e7:56:0c:e9:aa:f9:9c:f2:e7:6b:91:da:41:c6:17:72:00:
f3:f3:2d:60:77:10:c7:1f:12:11:77:25:9a:36:82:78:a8:db:
ef:90:c4:e0:26:95:c2:9a:cb:7f:8f:9a:d3:1f:7c:d2:4f:b4:
79:bd:1c:06:8b:6d:96:5b:c7:21:13:f8:c0:36:75:34:2b:61:
71:9e:bc:fa:37:7f:c6:9d:88:a1:73:e1:b9:1c:0d:ce:2b:d8:
1b:d3:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:54:47 2025 by rpki-client