This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier: fB1aH8Hj1EZiXfXSsan22xJyt1wcYTyDwp+RgjeF/Wo=
Subject key identifier: F2:2D:DF:07:F0:46:93:9E:4D:9C:7C:47:BA:86:FA:2E:BF:E7:FC:F2
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 019B5A51EBFCA03CD58035F7B1163670AF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number: 17A6
Signing time: Fri 26 Dec 2025 11:01:16 +0000
Manifest this update: Fri 26 Dec 2025 11:01:16 +0000
Manifest next update: Sat 27 Dec 2025 11:01:16 +0000
Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: jXhZCTd/h9AGS3A4iFX09Xe+MAO+skO5u+3U4TmdW5I=)
2: NhCn1a0Le8G6D2sVi_l-BvVs8Q0.roa (hash: r1ZHnBqkDB4ZKDNF3hfVKil60HJx5YWEfmJ30XUmtD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:51:eb:fc:a0:3c:d5:80:35:f7:b1:16:36:70:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Dec 26 11:01:16 2025 GMT
Not After : Dec 27 11:01:16 2025 GMT
Subject: CN=f22ddf07f046939e4d9c7c47ba86fa2ebfe7fcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:8f:b8:8c:e0:07:38:c4:28:8c:5b:d4:0e:
81:a4:c4:28:b5:93:73:f6:93:93:bc:4b:85:ab:ef:
df:b8:1c:b5:a5:bc:1f:3d:13:a0:f5:ff:c3:ac:70:
78:9c:f7:17:c1:28:82:b8:c3:5c:0d:10:90:89:e5:
9c:78:d1:cc:a4:b8:66:c8:08:17:1c:0f:5c:41:98:
39:f1:aa:f2:47:54:ad:5c:1c:a0:b2:84:bf:df:13:
19:fd:80:71:b3:b0:3d:2b:41:6d:df:64:a9:2d:91:
48:7f:19:4a:de:1e:32:e3:c8:49:6a:80:34:6b:d6:
fc:15:64:ae:12:aa:70:69:80:b7:20:4f:97:6b:da:
33:43:b2:44:64:a1:f9:d9:f2:61:38:a3:c0:dc:c5:
e3:c2:09:c6:e8:02:49:94:a2:b5:86:89:31:cb:19:
df:9c:46:38:a4:c4:a9:79:68:ce:65:74:2b:d2:6f:
09:e2:ac:9c:27:10:74:46:50:74:8b:46:fe:9d:27:
a8:f1:9a:3d:f7:ca:20:7c:6c:ba:6b:1e:79:19:e2:
9b:e3:64:6e:97:6b:54:9b:65:5b:65:cb:4a:91:e7:
54:46:68:0c:94:5f:4c:ea:b0:12:82:7a:72:bb:5e:
df:cc:da:a7:87:9d:cc:06:2a:45:1f:5a:83:ea:c3:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:DF:07:F0:46:93:9E:4D:9C:7C:47:BA:86:FA:2E:BF:E7:FC:F2
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6e:24:68:bd:37:09:f6:4a:51:23:68:67:31:82:0a:b7:70:
85:2a:88:83:7e:4d:63:77:df:c3:57:35:59:e9:7a:e9:75:7b:
c9:1e:49:53:56:e9:9a:b6:88:6c:64:ed:c0:3b:8a:16:da:ec:
a7:06:9a:80:9f:d1:bb:36:33:97:db:7a:31:cc:e9:69:ed:57:
5b:08:2a:b2:38:ed:d2:fe:bd:4f:5c:55:2d:47:f2:cd:64:c3:
b8:b8:42:83:11:36:47:51:c6:fd:f6:39:e5:be:33:fc:3f:b9:
93:2b:ad:9a:40:3f:4d:47:f1:33:75:90:76:5e:5d:75:5f:82:
65:52:99:7b:77:31:6f:74:ed:d0:05:9e:97:b0:04:fe:79:d2:
4f:15:c1:7f:14:bb:51:79:7c:b0:52:cd:c2:4f:38:65:27:d2:
51:bb:a4:f2:c8:18:11:d6:19:9c:47:0c:74:29:a1:1e:01:da:
ca:39:a9:1d:2d:40:00:c1:9c:d6:68:2f:97:59:5a:05:07:63:
09:98:56:af:78:f6:2b:1b:27:b1:9e:ca:16:28:cd:07:42:84:
c9:07:bc:4c:91:73:60:cb:18:7b:af:ba:39:f4:9d:dd:65:ea:
f6:59:7e:24:10:9d:cc:d3:13:e1:60:76:da:3b:22:fd:10:87:
83:81:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:00:30 2025 by rpki-client