This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File: b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier: YFXQ5imqtsaN/gQNpAjBojpD4NAqVIGk4pLRJJfgPVM=
Subject key identifier: 68:3C:13:B0:C4:26:D0:5A:4E:2F:23:97:1D:F8:54:00:AB:00:AA:39
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 019B1D988B89C1C937F9EA1B93CEA215057A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number: 04A1
Signing time: Sun 14 Dec 2025 16:01:34 +0000
Manifest this update: Sun 14 Dec 2025 16:01:34 +0000
Manifest next update: Mon 15 Dec 2025 16:01:34 +0000
Files and hashes: 1: EYicsUpHakuVJ85rHI3z9ChbOyE.roa (hash: +iUcQNM+1WS62zr3/+AkENonSCdw/nmYbxbfMIf3eUE=)
2: TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa (hash: 2zLKJ3umZ3JW8k4DM0pjot15c8VbxAJ5HTL+V7YT3A0=)
3: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: i3c3zo9Sqfcv0SsSaJUhbaDSvQI1YahEB6cjUGinQOY=)
4: yxe7My0NcRZq-SpiFdXNNwBJYL4.roa (hash: 0k/Fz33zsau4ewiit92jbfHfEKu+7iJrH4IQAHIlxUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1d:98:8b:89:c1:c9:37:f9:ea:1b:93:ce:a2:15:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Dec 14 16:01:34 2025 GMT
Not After : Dec 15 16:01:34 2025 GMT
Subject: CN=683c13b0c426d05a4e2f23971df85400ab00aa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:9c:aa:5f:e8:a1:26:1c:a3:05:3a:46:7b:
ba:66:e1:fe:f2:8b:2a:24:8d:2f:d2:0a:40:11:5e:
92:8b:02:e2:3e:6d:89:54:41:80:51:1e:0e:33:44:
a6:1d:ee:ae:ac:fb:70:b1:00:ae:b2:9a:7b:b3:e8:
fb:ab:b2:27:d5:e4:27:e1:72:b1:72:a2:8d:93:af:
a9:a4:a0:f4:b6:d1:1f:1c:2a:b1:34:d9:8e:7f:2f:
c1:42:87:99:c8:59:12:bd:a0:93:f9:82:03:de:4f:
2f:94:ee:6a:6b:a7:25:08:5b:bf:68:98:6e:0a:84:
c5:83:f4:cd:a8:81:a6:43:04:9d:95:4c:ff:08:71:
a6:46:22:74:5b:5f:1b:9f:8f:03:7f:81:a3:ad:44:
d0:31:50:57:60:de:08:3d:11:e0:61:79:3d:e5:08:
e5:ba:52:85:c1:8d:f1:dd:dd:14:e8:46:73:c3:d6:
79:b1:b3:56:e2:2b:24:02:33:bc:98:16:43:24:f1:
b0:89:6d:9c:16:ce:c3:5f:25:16:d2:28:2f:a9:b4:
80:cb:e3:cf:7d:4d:ed:5c:02:04:79:a8:63:5c:cc:
d4:16:d4:96:fb:00:be:33:c8:67:6a:de:fe:cf:a7:
66:b9:ec:63:fb:1a:c6:71:b2:34:d5:d7:82:f1:dc:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:13:B0:C4:26:D0:5A:4E:2F:23:97:1D:F8:54:00:AB:00:AA:39
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:3a:54:c2:60:e4:8f:48:de:5c:1b:53:97:8b:e8:ad:b1:
6e:2c:d8:9e:e1:56:16:21:83:32:64:a2:b5:98:1b:12:88:9b:
1f:8c:fd:0c:a7:0c:0c:5b:9a:ac:c9:54:b1:cf:f5:b1:ff:9e:
27:0d:73:0b:f5:d3:f8:d6:29:f2:e8:f8:ba:ff:37:45:c5:28:
76:ef:0b:23:36:7e:cd:e9:b0:d4:c2:ae:3b:12:b2:b6:89:c8:
42:bb:7a:0d:a4:50:6d:15:71:ea:5f:39:3a:68:2f:53:59:36:
d4:c2:4e:4f:08:32:f2:59:09:33:2f:35:ac:df:6c:8d:dc:1a:
48:3f:41:53:4e:64:29:95:ad:4e:c6:38:f1:f5:9c:5b:98:0f:
88:b4:b8:a0:c8:70:3d:e3:d6:82:62:31:d1:5e:13:fd:66:39:
9c:da:b0:75:f2:e6:bb:d5:70:12:f7:ad:de:03:a9:f8:7d:b9:
73:a5:40:b2:a3:24:b8:df:6e:f3:a3:19:71:2d:64:07:d9:cb:
32:d0:ad:63:f2:10:ae:12:d8:f7:b2:10:a4:31:e7:fb:7c:7c:
80:16:d3:38:49:2c:89:e4:f5:89:b6:d9:be:e9:e1:e7:6f:ac:
09:8e:f9:4d:f9:4d:9b:9e:0a:18:40:24:51:e2:7e:f3:c9:e8:
26:de:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:55:57 2025 by rpki-client