This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File: 9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier: 94pzp5CK0yabUQcXptRjpzsM7eEdBAjLcpnoC3IXgss=
Subject key identifier: F8:BB:97:E0:37:E1:A8:AE:55:89:5D:90:D8:5E:DD:3D:86:AE:06:C3
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 019B41372A54CB983C9F435068F5E3452FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number: 1798
Signing time: Sun 21 Dec 2025 14:01:32 +0000
Manifest this update: Sun 21 Dec 2025 14:01:32 +0000
Manifest next update: Mon 22 Dec 2025 14:01:32 +0000
Files and hashes: 1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
3: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
4: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
5: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
6: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
7: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: 4spW3czIBMZMqugjfDsaOu07eQ7bgIV+8f85xxp4xO0=)
8: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:37:2a:54:cb:98:3c:9f:43:50:68:f5:e3:45:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Dec 21 14:01:32 2025 GMT
Not After : Dec 22 14:01:32 2025 GMT
Subject: CN=f8bb97e037e1a8ae55895d90d85edd3d86ae06c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:70:20:40:f0:18:a2:10:63:70:5e:80:a5:
ff:8c:7c:d5:0a:b5:b4:39:e3:7a:fb:68:23:2e:78:
7b:f9:d0:e3:e8:bd:bb:18:22:cf:aa:68:10:58:e1:
e9:97:c2:1b:02:71:9a:e1:27:dc:e4:c1:53:40:2c:
f2:13:de:58:f6:f7:ad:22:97:a8:9b:4e:97:fc:c2:
4a:7e:be:15:0b:c1:5c:bb:d8:73:c7:b5:13:44:e1:
9e:a9:1e:32:1c:2c:78:f5:e0:7c:42:97:74:1e:55:
48:6e:f6:c2:eb:3f:82:79:d0:e3:09:cc:ee:7f:00:
62:dc:18:45:24:6f:53:e8:3a:7e:49:dd:de:31:b4:
e6:a3:aa:53:78:f5:d8:46:d7:08:88:b4:f1:a7:7e:
e4:7e:de:75:50:b9:26:da:64:25:11:aa:47:50:6e:
3e:67:23:0d:e2:8f:c1:ca:56:39:5a:ca:2c:91:86:
e7:ec:64:eb:d7:8c:3b:fd:21:51:a7:09:70:fd:8d:
47:b1:bc:f6:ea:71:70:3b:d6:38:7e:38:17:9a:eb:
f9:bb:bd:7e:f0:87:95:fb:cc:c0:de:bd:9b:e3:80:
17:15:8c:9a:9c:c9:22:29:a4:d8:2e:f6:8f:31:e9:
d7:4c:af:f6:df:cf:8b:18:6b:c5:3d:b1:5b:1c:a4:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:97:E0:37:E1:A8:AE:55:89:5D:90:D8:5E:DD:3D:86:AE:06:C3
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:4f:c3:f4:cd:2e:76:fa:bb:24:ba:74:d6:9a:bb:04:c3:
13:97:f3:8b:88:44:f1:25:4e:b5:8b:fe:85:c5:b2:82:92:33:
82:72:7b:f2:61:be:cd:cb:0b:94:28:9f:18:d1:39:bd:63:8c:
b2:20:0b:a7:73:f6:de:33:48:26:52:26:0a:26:49:a0:34:c6:
b4:e5:e5:82:a5:6a:4c:31:40:0c:68:c4:81:17:b4:e2:08:37:
da:f5:c9:fe:b5:8d:c6:d1:da:bd:62:a3:e5:2f:7a:8b:a5:7f:
40:26:2d:48:2d:1e:fe:fa:03:55:3d:a8:2e:4e:a8:bd:47:d0:
9e:8e:fe:63:96:32:bf:17:0b:99:50:d3:14:0b:d1:52:da:73:
6d:99:b1:c2:0a:db:f1:51:31:38:02:3f:56:34:0c:5a:eb:07:
6b:a8:96:d7:5c:f8:24:b6:2a:d9:fd:fd:7f:2f:fc:23:ee:b9:
49:40:14:48:bc:2d:ad:98:4a:fe:b7:33:73:67:1d:ed:4d:d1:
7f:8d:8a:14:8b:63:e5:a4:43:57:2d:8e:2e:e9:f1:78:ab:8d:
39:f5:4a:a3:e6:25:bb:fa:3b:20:89:d8:3a:48:b1:b7:08:ac:
d1:19:38:e1:96:7e:4d:75:c1:11:fa:6a:3a:51:d1:25:a6:31:
5a:4c:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:48:08 2025 by rpki-client