This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File: 6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier: UavnT6LbLqES1bbhrQZkB3JTHkPDHPrTw1l7ZzawQdc=
Subject key identifier: CF:25:E9:1C:DA:49:80:FE:74:E2:59:66:6B:40:AD:8D:48:44:30:FA
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 019B22875FF9CB0B2B4416A8B8B105458100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number: 11C9
Signing time: Mon 15 Dec 2025 15:00:55 +0000
Manifest this update: Mon 15 Dec 2025 15:00:55 +0000
Manifest next update: Tue 16 Dec 2025 15:00:55 +0000
Files and hashes: 1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: JkEh6/ERwKvCfNBOXg26Qd1kvXFRNjUR9QDFGcTaCvU=)
2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:87:5f:f9:cb:0b:2b:44:16:a8:b8:b1:05:45:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Dec 15 15:00:55 2025 GMT
Not After : Dec 16 15:00:55 2025 GMT
Subject: CN=cf25e91cda4980fe74e259666b40ad8d484430fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:f1:33:a6:82:e2:26:04:7c:9f:c9:c2:90:
12:3a:d2:8f:0a:93:06:a1:92:25:6b:82:af:94:06:
de:97:37:82:c2:ac:56:39:b7:a3:9a:67:ac:c2:5b:
3f:d9:57:98:14:0c:54:f7:58:4d:9d:1c:77:78:ca:
38:aa:09:88:aa:90:e1:fa:ed:1b:f3:6d:64:fd:3d:
89:67:e1:d3:93:be:0d:89:4a:e5:2c:01:9e:f9:3d:
df:03:29:85:6b:c2:10:eb:d4:28:bb:77:d7:cc:d2:
a2:d2:95:ff:da:81:69:f8:bd:6f:e9:fd:45:43:52:
90:a7:98:6d:47:1a:fd:3f:e2:17:8f:60:4b:a3:93:
47:5d:20:1b:11:75:9f:be:9f:e9:33:29:47:f3:2e:
fd:53:ba:b2:9b:dc:51:14:88:15:7e:47:cd:c9:41:
f3:32:06:3d:20:14:7a:22:6f:02:29:db:41:22:f8:
c0:ad:20:d6:4a:88:06:44:3e:39:d3:d1:ff:f4:bf:
ac:d6:bb:4b:2c:a7:79:e6:cc:4f:d7:25:a0:bd:a0:
08:c4:e1:4a:c9:e5:2a:93:cc:4e:3f:2f:36:5b:59:
18:ca:be:19:51:5b:7b:c3:d3:de:3b:75:94:58:3c:
a5:6c:89:0a:3e:62:f4:e9:0b:ca:30:6f:d0:5b:1a:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:E9:1C:DA:49:80:FE:74:E2:59:66:6B:40:AD:8D:48:44:30:FA
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ef:30:3b:b2:e6:7c:5d:bb:d2:63:a9:f8:b4:b5:ff:ee:8c:
ba:61:86:80:95:fd:e8:d4:fd:29:57:a5:2b:5f:1a:97:ae:85:
da:97:02:ea:eb:ec:dd:84:9f:85:d4:02:9e:d8:06:4b:d5:61:
73:07:14:69:71:ad:97:e5:2e:bd:51:47:45:6d:89:00:34:8b:
23:26:31:00:76:c9:e7:22:35:44:25:06:60:84:e2:a0:f6:7a:
83:d5:ac:9d:0a:5f:df:a0:e6:29:f9:a6:80:cd:f4:fa:1e:8e:
f1:84:41:93:7e:d0:35:71:f5:54:13:3b:7b:32:ef:74:8b:6a:
4d:6b:f7:6d:91:74:58:7c:30:8e:06:51:4e:cf:c7:94:af:c3:
60:df:7b:33:76:f6:ac:49:9a:eb:5b:79:49:aa:7a:f3:e0:ff:
e5:09:07:68:8d:b2:fe:05:22:70:d9:04:59:f5:c0:71:c2:bc:
48:37:8b:34:b1:70:bd:b4:7b:1a:df:c0:ab:69:89:0b:56:ae:
00:72:36:54:0c:b0:b7:ce:3e:b4:43:98:8e:1a:18:4f:87:bd:
e6:ba:f9:be:53:7b:9c:43:8e:e9:44:90:49:9d:79:ca:58:42:
5a:e3:d3:81:e6:fa:93:5e:52:9e:84:e9:3c:9f:a7:6f:05:0c:
37:fa:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:56:04 2025 by rpki-client