This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: O7pN6dbM7Jla312luGZM7SkbwHE8r1FpVo6tBaepQ+Y=
Subject key identifier: BF:59:2D:F1:31:4C:A3:28:21:66:6D:41:CA:78:50:13:00:3E:69:FB
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 6C1363E8526D92BD0447324ED6C89BFC41EFE0A7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: DC
Signing time: Sun 14 Dec 2025 16:03:34 +0000
Manifest this update: Sun 14 Dec 2025 15:58:34 +0000
Manifest next update: Mon 15 Dec 2025 18:21:34 +0000
Files and hashes: 1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
2: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: I975D7tu+Y3r06ugf9D5CrlG3rGYbsDxc2NVr6z06BE=)
3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
4: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
5: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:13:63:e8:52:6d:92:bd:04:47:32:4e:d6:c8:9b:fc:41:ef:e0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Dec 14 15:58:34 2025 GMT
Not After : Dec 15 18:21:34 2025 GMT
Subject: CN=BF592DF1314CA32821666D41CA785013003E69FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:ee:ef:44:e6:dd:23:72:91:2e:e7:2f:00:
8c:83:66:ee:33:e1:44:ee:42:fd:62:db:e5:57:9c:
e6:39:dd:51:01:d8:d2:79:47:ba:37:ab:aa:6f:76:
d1:07:aa:f2:d1:b2:51:35:bf:93:40:d7:0c:92:16:
2b:dc:df:2d:bc:65:46:ea:c1:cc:6b:7f:74:43:a3:
38:7b:9f:18:1a:55:42:b4:7f:66:a6:e9:31:05:8a:
3a:25:e5:ab:39:08:d1:cc:8e:44:f5:5f:aa:05:ec:
32:07:02:c7:8e:f2:5a:6a:8a:ab:f0:a4:b2:9d:9b:
aa:19:91:ef:87:a5:49:f6:0a:cf:58:0e:d2:09:ae:
a4:6f:8d:b8:4e:52:2c:21:cc:1d:a4:a1:1d:09:db:
dd:76:d9:ed:f8:71:9d:18:90:77:ac:30:17:3c:1c:
d8:6c:36:89:d5:e4:4d:00:ff:c7:a7:c2:83:66:3d:
dd:62:c5:0a:4f:86:52:d8:85:cb:38:c6:8e:11:1f:
aa:d9:2f:fb:b3:9b:b2:6f:4c:88:42:9f:47:5e:fe:
01:cb:41:ef:1d:e7:1f:d2:99:64:2c:a2:72:e7:70:
4d:95:6a:c7:02:81:4b:30:1e:ca:f4:45:8e:95:4a:
8b:0a:8f:49:ba:e9:b5:39:cb:1a:59:55:e4:73:92:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:59:2D:F1:31:4C:A3:28:21:66:6D:41:CA:78:50:13:00:3E:69:FB
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:e3:96:03:22:7c:c7:36:ff:e9:3a:cc:ff:c4:99:bc:c0:
33:26:53:b1:5f:ca:b3:e6:ea:1a:5f:4e:93:1e:09:bf:0a:7b:
33:27:99:ff:74:4c:c2:70:f5:f2:37:76:5a:21:92:76:30:4b:
22:3b:95:48:72:ad:4b:d0:d5:c2:e3:1a:47:a7:8d:d7:ac:08:
e7:68:77:f2:ae:b7:cb:cd:19:87:12:79:34:d8:da:ac:c4:84:
13:65:3c:2f:59:99:6c:bb:ce:67:4c:fb:36:bd:d6:11:40:86:
bc:fc:78:37:80:76:6b:60:17:d0:4e:05:d1:81:04:9d:9c:88:
07:8e:df:6f:72:61:c5:86:e8:3d:c3:57:70:43:94:2e:4b:63:
2d:0b:a9:ba:28:a4:f9:eb:8f:54:38:14:e8:8e:ea:d2:72:b2:
ec:de:d9:4c:c0:1f:ef:ee:84:22:25:2d:aa:e4:86:56:20:52:
73:5a:13:b5:73:61:e3:15:da:23:b2:0c:f6:f5:d3:f1:f4:3e:
a5:d1:e5:8f:61:3c:93:ae:dd:39:d2:72:65:85:75:94:16:7f:
17:6e:41:bf:9b:e0:6b:81:29:98:ec:33:5b:9b:00:ff:19:37:
24:93:87:08:fd:95:d2:83:ff:1b:a3:31:f4:e9:5c:59:6d:79:
a1:44:81:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:53:19 2025 by rpki-client