This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File: R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier: HMMznmu1bgop0gcUy1T2D11u0vLAZ0zaGbDuhENdQZE=
Subject key identifier: AF:D6:D1:19:B3:1B:62:BE:42:3B:D0:5E:95:6A:B5:8C:F0:21:51:FD
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 019B3DFEA205D3B34D19C531E40C45BCA850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number: 178D
Signing time: Sat 20 Dec 2025 23:00:56 +0000
Manifest this update: Sat 20 Dec 2025 23:00:56 +0000
Manifest next update: Sun 21 Dec 2025 23:00:56 +0000
Files and hashes: 1: HVMp3VvTMqSiiMvK8ekyUscXHKE.roa (hash: 5bZY9H0pxJFOXf0QcKTcd4xctzA8L1dqR59jUwC+mbk=)
2: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
3: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: Sacp+dAehFD5KgFs7BCeMdv9ico68+Us0TUKhEM+CaE=)
4: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
5: YColBce1P8QV6dzwd3BQxfb0bW8.roa (hash: Y+U0uh0d0L8YbI91riCmE6Asc9FINzw4Y3Ujz9SWSEY=)
6: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:fe:a2:05:d3:b3:4d:19:c5:31:e4:0c:45:bc:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Dec 20 23:00:56 2025 GMT
Not After : Dec 21 23:00:56 2025 GMT
Subject: CN=afd6d119b31b62be423bd05e956ab58cf02151fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:34:82:e4:20:dd:02:db:21:ae:6d:03:2e:
e0:a4:6c:6b:fd:cd:8a:24:89:cd:d2:b7:c0:b1:4e:
d1:10:66:2f:57:a5:8b:10:b6:02:2f:43:ba:c8:74:
65:9c:f4:63:44:ef:e3:9c:3d:25:4d:c9:6d:80:92:
51:d6:8b:11:c3:10:90:94:02:d4:ad:c2:bb:ea:bc:
2c:14:0d:8d:0b:22:5a:d2:e1:0d:91:31:c0:81:42:
09:c2:aa:d6:83:23:06:10:38:7b:ec:e5:ac:0d:7c:
b4:f4:4b:78:8b:76:17:f3:0d:5a:3d:63:66:26:ea:
14:ea:2a:19:f6:04:46:91:12:e1:a3:62:99:62:be:
5c:5b:e2:ef:56:04:f0:7f:94:3c:d7:cb:11:07:c1:
f4:d9:d2:9b:68:97:ec:3a:f8:1c:9f:aa:0d:a7:7f:
91:06:4a:bf:f6:c3:83:8c:09:f7:34:07:e8:23:47:
b3:48:c5:bc:ee:b7:6a:fc:48:52:57:54:f8:95:e8:
f8:09:f8:b9:ed:12:a3:4e:2c:19:5b:b4:ca:3d:d6:
53:7a:2e:33:5e:ff:4d:62:46:77:5a:13:30:a4:d4:
3b:eb:13:6b:3f:95:30:d1:11:36:f2:52:16:1a:98:
0a:3d:c9:c3:84:81:79:63:54:82:13:36:9e:51:c2:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:D1:19:B3:1B:62:BE:42:3B:D0:5E:95:6A:B5:8C:F0:21:51:FD
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ab:42:52:38:36:95:42:70:bf:7a:ee:15:40:f2:4b:92:2c:
cf:40:fb:6c:12:02:ce:55:d3:40:9b:67:7f:6b:ca:0a:9a:67:
40:dd:29:0a:76:9e:12:46:75:92:5c:ec:4d:ed:aa:f5:8a:f9:
65:98:4d:5d:08:c4:4c:8d:6e:d3:96:9d:d1:b9:c5:d7:92:f8:
83:57:57:bf:a8:f2:00:9f:24:56:93:04:62:2c:25:01:27:20:
99:28:c0:cc:f1:dc:db:bf:7d:1e:b0:1a:52:71:01:82:7e:8b:
d1:f1:7e:3c:bc:7d:7f:fe:99:1c:5c:8e:46:91:3b:55:31:90:
20:43:ce:13:92:7d:bb:f3:5a:b2:8e:d5:59:3a:2b:61:a6:d1:
dd:f7:48:95:6b:29:d0:93:cc:e8:3e:3e:cf:2e:43:7b:f6:3a:
1b:f2:c8:31:de:dc:74:78:11:e5:12:ae:4e:94:f4:10:8b:3a:
fa:09:97:47:e7:29:1a:50:8c:55:e6:55:23:c1:84:52:38:fe:
6a:f5:80:c8:d6:13:cf:a5:76:0b:a4:d7:ab:6e:98:7d:87:43:
9c:f6:8e:58:f8:b8:ac:68:f7:41:43:73:77:79:e9:51:d1:4a:
19:27:db:d7:fb:9c:c9:4a:88:a1:0f:43:00:55:50:31:a1:b2:
51:bb:dc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9/qIF07NNGcUx5AxFvKhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWE4NzhmNzZiNTA5NDdjYmQ3ZGVjYTA0YWM4MzJlMjg3
YjUxNGQwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD
EyhhZmQ2ZDExOWIzMWI2MmJlNDIzYmQwNWU5NTZhYjU4Y2YwMjE1MWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaM0guQg3QLbIa5tAy7gpGxr/c2K
JInN0rfAsU7REGYvV6WLELYCL0O6yHRlnPRjRO/jnD0lTcltgJJR1osRwxCQlALU
rcK76rwsFA2NCyJa0uENkTHAgUIJwqrWgyMGEDh77OWsDXy09Et4i3YX8w1aPWNm
JuoU6ioZ9gRGkRLho2KZYr5cW+LvVgTwf5Q818sRB8H02dKbaJfsOvgcn6oNp3+R
Bkq/9sODjAn3NAfoI0ezSMW87rdq/EhSV1T4lej4Cfi57RKjTiwZW7TKPdZTei4z
Xv9NYkZ3WhMwpNQ76xNrP5Uw0RE28lIWGpgKPcnDhIF5Y1SCEzaeUcJf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/W0RmzG2K+QjvQXpVqtYzwIVH9MB8GA1UdIwQY
MBaAFEeqh492tQlHy9feygSsgy4oe1FNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWIt
Mzk5MmM1NGUxODdiLzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWItMzk5MmM1NGUxODdi
LzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEatCUjg2
lUJwv3ruFUDyS5Isz0D7bBICzlXTQJtnf2vKCppnQN0pCnaeEkZ1klzsTe2q9Yr5
ZZhNXQjETI1u05ad0bnF15L4g1dXv6jyAJ8kVpMEYiwlAScgmSjAzPHc2799HrAa
UnEBgn6L0fF+PLx9f/6ZHFyORpE7VTGQIEPOE5J9u/Naso7VWTorYabR3fdIlWsp
0JPM6D4+zy5De/Y6G/LIMd7cdHgR5RKuTpT0EIs6+gmXR+cpGlCMVeZVI8GEUjj+
avWAyNYTz6V2C6TXq26YfYdDnPaOWPi4rGj3QUNzd3npUdFKGSfb1/ucyUqIoQ9D
AFVQMaGyUbvcuQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:41:55 2025 by rpki-client