This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File: bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier: MDnTaCjTEO7gM/bOEqjJjauEEoQoXnPgjghL54Zo2/c=
Subject key identifier: A6:71:96:2A:B2:80:D6:37:47:2F:66:44:94:5E:4D:7D:94:DB:B0:49
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 019B2219894F6C3C709CF617A3E3D4BA6D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number: 177F
Signing time: Mon 15 Dec 2025 13:00:57 +0000
Manifest this update: Mon 15 Dec 2025 13:00:57 +0000
Manifest next update: Tue 16 Dec 2025 13:00:57 +0000
Files and hashes: 1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: OP3eL2Z6ZUB5ducDfIh0YSiMy7b0KaEKLGMQppkEV04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:19:89:4f:6c:3c:70:9c:f6:17:a3:e3:d4:ba:6d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Dec 15 13:00:57 2025 GMT
Not After : Dec 16 13:00:57 2025 GMT
Subject: CN=a671962ab280d637472f6644945e4d7d94dbb049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:10:2a:86:51:f9:8f:54:ec:4f:22:e9:7f:
d2:e0:52:1d:d6:42:29:8c:eb:d3:d4:f2:90:9e:c6:
a3:b1:35:42:2a:d0:1a:8f:87:9e:93:dd:0c:d0:7d:
a3:fb:48:6e:75:33:f4:f4:93:d6:f8:49:ed:a4:f1:
df:27:3f:00:d9:dd:3b:40:d4:ca:62:3c:7a:be:06:
c1:23:7e:1b:6d:ec:6b:e9:cb:9f:fd:c2:be:cc:70:
0a:6b:ed:a3:df:14:32:b6:ee:61:93:f9:0d:19:81:
73:1a:20:36:99:db:a4:ee:e6:43:c2:33:90:5b:bc:
b9:12:e8:a2:2f:85:13:66:b3:2d:ce:d8:72:2c:ce:
fe:65:58:8d:23:97:30:87:29:ad:46:d0:3a:2e:3c:
85:a5:f9:61:56:c5:6a:3f:2b:dc:05:63:8d:cf:e1:
a4:cd:c6:74:b7:58:f0:75:e0:71:0d:9f:3a:4c:d4:
a4:02:66:e9:27:37:0a:b0:2f:db:59:a9:04:37:69:
a2:0d:c0:0a:80:ef:a7:cc:b2:b5:57:ee:0f:0c:41:
e2:79:90:3e:4d:37:25:63:96:68:45:78:64:29:7c:
3c:a7:77:3e:d4:d4:75:44:ff:34:41:54:1f:a0:79:
8d:b1:aa:28:bc:92:d0:24:94:02:99:a4:29:16:fd:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:96:2A:B2:80:D6:37:47:2F:66:44:94:5E:4D:7D:94:DB:B0:49
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:12:6b:e6:19:60:11:83:db:b7:8d:46:f7:47:ce:20:9a:
f5:2a:ef:04:39:88:3d:a3:be:73:59:47:5a:61:cf:6f:33:16:
32:1d:f8:0b:98:54:38:19:b9:c6:38:a5:e0:75:d3:ce:0f:26:
79:29:8b:54:39:c6:51:f0:83:a5:d2:9d:93:68:c3:78:1b:f2:
0e:0b:8c:35:65:33:eb:9f:12:68:f3:af:70:fe:7e:55:d4:22:
de:56:9e:ff:2c:ea:95:65:21:15:e0:1b:bc:1e:b9:c0:75:dc:
85:f4:60:55:98:7a:77:a7:f2:e9:8f:ca:51:98:c4:1b:e0:68:
8f:99:d9:16:0b:73:fa:b8:36:f7:12:5a:2f:8e:0d:ee:94:9f:
42:fc:3b:85:a6:7a:01:12:85:e1:49:bd:c5:1d:7f:a4:e0:d3:
87:a2:e3:7c:05:26:82:19:b0:23:ab:c2:12:d1:96:01:c9:ea:
02:46:0b:40:b4:96:6a:c5:2f:cf:f0:3a:d3:a3:e5:84:06:26:
d5:de:82:fc:35:07:43:6c:6c:5f:f4:b2:25:3c:93:6f:85:95:
df:ac:dd:04:6d:4f:48:a6:11:4d:50:79:b7:2a:0c:da:da:75:
d0:c4:39:c8:ce:d8:0a:bb:5d:f0:41:a3:29:7a:0d:45:3a:d5:
4d:e3:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:01:46 2025 by rpki-client