This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier: Z+n2+b5Y8euN+UMIKyOr0iuLyWWGwPIm6VfleI0ul4I=
Subject key identifier: 78:64:D8:FB:4B:A0:0A:A1:DD:4A:C2:12:5B:B8:6B:CF:AB:89:04:2D
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 3A54AD1654B4FE545BA3C9395084794BB2AD3FD2
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number: D6
Signing time: Wed 03 Dec 2025 20:54:31 +0000
Manifest this update: Wed 03 Dec 2025 20:49:31 +0000
Manifest next update: Fri 05 Dec 2025 00:06:31 +0000
Files and hashes: 1: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
2: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
3: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
5: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
6: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: kjJaUJn+iM72TcBkR5xEs6MvM5lltpHL6grrLsn1RQY=)
7: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
8: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:54:ad:16:54:b4:fe:54:5b:a3:c9:39:50:84:79:4b:b2:ad:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Dec 3 20:49:31 2025 GMT
Not After : Dec 5 00:06:31 2025 GMT
Subject: CN=7864D8FB4BA00AA1DD4AC2125BB86BCFAB89042D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:5f:5e:3b:77:68:54:80:8d:82:16:3b:04:
07:62:09:c5:db:1e:08:8c:0b:82:33:47:d5:27:47:
cd:65:42:3d:85:d3:d6:53:3c:4a:3e:bc:95:8f:76:
be:7c:c2:64:62:46:47:f6:43:72:db:29:43:63:8e:
8a:48:11:9f:11:70:72:f1:d2:75:1c:61:18:eb:a2:
94:a0:3f:4d:9c:42:23:76:ec:7c:6a:86:aa:b9:65:
9a:de:0b:7f:d4:0c:f1:1b:bc:02:d2:2c:04:9f:26:
76:94:04:bf:cb:f8:d4:2a:38:9b:ed:bd:68:57:8b:
df:92:3e:7f:cd:2d:07:72:66:e5:00:69:0f:d7:54:
ed:bb:96:0c:2b:b9:4c:33:77:12:f3:6c:87:06:1a:
d4:69:41:d0:55:a7:48:62:2d:8a:56:fa:f2:5c:9d:
0b:e5:8b:43:bd:ff:b4:0d:68:81:7d:d7:e8:71:c3:
3c:59:e6:4e:3f:1f:5c:84:4a:4c:ab:43:f6:85:88:
cc:73:cd:ea:9c:7a:db:a1:f4:e5:ba:42:56:28:ee:
e1:84:0f:e4:ca:ad:41:15:ae:db:c1:57:df:da:2e:
73:9b:bd:7f:c1:d7:b1:45:fc:85:18:61:04:13:11:
86:6a:23:12:29:fe:61:6d:f5:3a:6b:f8:21:6e:d2:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:D8:FB:4B:A0:0A:A1:DD:4A:C2:12:5B:B8:6B:CF:AB:89:04:2D
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:0d:66:fd:20:94:a9:bb:08:1e:aa:df:07:54:4f:51:24:
10:36:49:91:70:36:3f:82:e2:3f:b2:32:95:7a:bd:6a:c2:fb:
8f:6f:19:46:a7:3e:b6:2a:c3:82:ed:07:2d:84:28:53:24:c3:
50:a1:f5:f1:00:e9:e4:d7:a8:2d:85:9c:90:45:be:16:cd:97:
cb:bc:6b:eb:4e:e9:25:5d:74:ae:4b:82:05:39:88:1a:d7:2f:
4b:94:ce:f5:74:86:0a:0e:09:64:49:97:0f:57:53:4d:65:56:
57:39:ff:99:ad:fd:ce:02:17:c6:a7:8d:d2:3c:16:ef:6d:25:
49:cd:6f:58:a5:64:87:b8:82:8a:97:24:ec:63:7e:6a:68:c1:
8c:c7:19:21:f1:0a:24:72:2e:9f:d5:bf:6a:8e:c9:98:45:44:
7e:25:dc:47:93:5a:66:1b:9d:fa:60:fa:ff:79:ef:92:f0:44:
11:24:4d:32:f2:c4:d9:96:3c:35:8f:13:96:29:4d:14:da:f9:
94:bf:83:7b:6b:57:5e:de:8b:94:a2:04:b7:19:76:07:22:29:
1e:43:00:d5:bc:1e:56:93:59:df:73:0e:72:32:ec:db:05:7a:
8d:ae:2b:50:db:7f:af:27:a6:c2:f9:b3:ba:ea:ea:af:cd:da:
87:74:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 08:13:36 2025 by rpki-client