This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier: YXWHCaqoTor0UgENes3alN8JM4KHASCmSFEFidmi2bQ=
Subject key identifier: AD:A8:B0:6D:3A:3A:5F:6C:93:F2:EE:B4:A2:E2:7E:C7:64:71:29:90
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 019B20D019E5A4C54A0490BDE7B49010D0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number: 17B0
Signing time: Mon 15 Dec 2025 07:01:07 +0000
Manifest this update: Mon 15 Dec 2025 07:01:07 +0000
Manifest next update: Tue 16 Dec 2025 07:01:07 +0000
Files and hashes: 1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: TShhLE2uwH+ns4LDj0BEHwYdEdhhuWXDkiNL3Bj2HFI=)
6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:20:d0:19:e5:a4:c5:4a:04:90:bd:e7:b4:90:10:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Dec 15 07:01:07 2025 GMT
Not After : Dec 16 07:01:07 2025 GMT
Subject: CN=ada8b06d3a3a5f6c93f2eeb4a2e27ec764712990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:b1:11:a7:ef:70:50:58:ea:14:24:63:3f:
d1:65:32:fb:29:c8:f8:43:a7:9b:90:0a:cf:dc:1c:
8c:2b:1e:f3:cc:b4:bb:c4:43:9e:99:77:6f:29:2e:
fe:d0:16:28:21:51:8f:dd:90:15:c1:92:2e:f5:ed:
4a:be:3e:b2:87:da:70:da:51:40:6b:fc:00:11:bc:
36:e7:7d:da:18:b7:99:41:1e:26:f0:40:7a:8e:35:
aa:b6:33:5c:35:f2:ef:01:16:1c:51:f5:67:d9:65:
47:2e:79:59:a2:6f:b7:2e:78:09:90:24:ef:b4:94:
27:fe:c2:08:2c:a1:53:7e:d6:df:b2:e6:07:8a:69:
c7:c6:b4:74:2d:84:98:01:78:70:ab:53:bf:00:eb:
e8:b9:0f:e4:ee:d5:70:6c:dc:16:b1:61:c0:10:f8:
04:0f:8f:de:26:37:33:21:c2:63:70:c7:1f:ee:94:
05:7b:02:5c:03:8d:f6:f3:02:7d:7e:ab:bf:0a:30:
55:07:26:6e:19:9b:80:1b:87:53:cc:0d:3e:e2:09:
5b:c2:b3:f6:3d:6a:c6:30:9b:c9:c4:de:fe:e1:37:
20:b0:73:56:ea:93:92:aa:0f:d3:81:7b:f3:f1:64:
9e:b0:eb:1c:cb:9a:97:46:b4:88:78:ed:f9:57:c2:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:B0:6D:3A:3A:5F:6C:93:F2:EE:B4:A2:E2:7E:C7:64:71:29:90
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:2a:21:39:66:d1:e0:18:6b:95:e8:4b:bd:e0:1f:40:a1:
29:d5:80:e3:f2:74:85:9f:a0:03:3a:63:2d:81:23:6c:d3:b2:
b8:92:d9:f4:c9:c9:0c:3b:8f:de:6d:24:bb:87:3a:98:66:59:
1b:f9:26:1b:1d:57:b0:33:dd:8f:a3:02:ef:c2:b7:c4:91:f7:
dc:ab:71:3b:1c:55:3d:4e:41:2a:24:8f:0b:6e:38:8a:44:2d:
7f:7d:bd:3f:7c:33:51:25:2f:50:63:bc:c5:d9:8a:34:19:58:
d0:a6:99:d4:aa:fb:9d:29:3a:a8:2c:74:4d:0c:e8:12:36:57:
5d:0c:e5:a6:72:01:f1:34:3a:44:0a:47:8c:57:e0:cd:ad:5e:
f1:55:d1:d4:1e:15:fc:5d:39:0e:70:a8:4b:34:61:c6:1c:0e:
31:4b:39:5b:63:a5:15:61:ac:90:48:fd:00:7d:b4:02:17:7a:
f0:a4:31:b5:d7:48:96:ed:38:4c:ca:82:2b:9e:df:45:ef:70:
59:c2:95:fb:c1:25:96:54:1b:ee:4c:58:20:9b:01:57:1f:49:
33:f4:67:9f:fc:91:b2:5c:f6:9c:1e:c6:09:10:b6:ab:0e:8b:
26:39:d7:ea:f7:b1:60:c1:fc:d3:87:b4:46:0a:12:67:0b:e0:
e0:45:75:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:48:35 2025 by rpki-client