This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier: 2NwdoRItZG2qjXrHUZ2sLt5Rk1rM9jGPTpyyRSdVVww=
Subject key identifier: B2:5D:94:75:51:59:BD:C3:40:D3:71:10:2F:8D:1B:51:50:12:9F:D8
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial: 019B53AACCA636049A42FBC9A0E8218CB9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number: 04E2
Signing time: Thu 25 Dec 2025 04:01:00 +0000
Manifest this update: Thu 25 Dec 2025 04:01:00 +0000
Manifest next update: Fri 26 Dec 2025 04:01:00 +0000
Files and hashes: 1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: A4errrqxzVVQSTuECy/bq82WmVJlwZYu1YSAtFxd70E=)
2: gqtW-HTwNuaNzij_O-fG_WDDmgI.roa (hash: 64HgUSoh+cIdBaNAyauCdgl6p5QawtedcJQPBNkM8qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:53:aa:cc:a6:36:04:9a:42:fb:c9:a0:e8:21:8c:b9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Validity
Not Before: Dec 25 04:01:00 2025 GMT
Not After : Dec 26 04:01:00 2025 GMT
Subject: CN=b25d94755159bdc340d371102f8d1b5150129fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:9c:81:95:13:3f:36:4f:2c:23:0d:24:85:
fb:3b:97:f4:f6:12:7f:39:40:b1:4c:ed:3e:5e:bb:
65:aa:92:9d:5f:13:8f:28:c9:12:d8:dc:e8:4e:f8:
ee:c0:46:27:53:77:83:f5:b6:c6:49:b3:f2:7b:ea:
a2:eb:df:b7:0c:f4:77:6b:c1:b1:13:d1:32:39:b8:
7d:bd:c1:df:3e:d8:d6:b0:74:95:bf:9b:e6:c7:75:
7e:5b:28:f6:86:a9:13:37:06:bd:39:a8:6e:d6:3d:
8d:70:01:c6:58:15:0b:99:a0:8d:6a:f7:b5:1d:ab:
dc:b1:81:00:b3:dd:5e:bf:9d:01:32:c9:c6:50:a2:
cd:7f:e9:db:f4:9d:53:c0:ea:b1:01:76:37:a1:19:
1a:5d:ee:e6:e4:de:a4:e4:e0:77:76:f8:4e:d1:33:
d0:c6:91:ab:ef:78:aa:7b:b0:8f:44:91:28:48:14:
ff:57:1c:37:0a:a2:fe:34:d1:23:76:a4:76:be:d3:
3a:6d:b0:22:0a:2d:14:88:a1:1d:af:e3:db:12:64:
ae:4d:47:33:7b:48:e3:1e:92:b9:06:e2:8d:47:bc:
cf:03:92:5a:23:fb:df:ac:42:b3:e4:05:e1:3f:67:
97:65:97:9f:af:de:13:5c:47:21:b0:ac:b1:e7:61:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:94:75:51:59:BD:C3:40:D3:71:10:2F:8D:1B:51:50:12:9F:D8
X509v3 Authority Key Identifier:
keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:de:0b:b0:46:8d:d6:76:cb:c3:8b:2b:fb:b7:06:70:14:
2d:e3:e5:85:df:0e:54:76:19:c8:e9:ba:cc:a1:70:46:1c:36:
7d:b7:d4:05:d0:c2:28:27:da:04:f8:35:cd:6c:79:0c:3e:05:
2d:3d:68:70:aa:65:50:d8:73:4e:9d:bd:5c:ce:fe:29:ac:8c:
9e:66:2b:35:6d:9c:79:35:b8:d6:cf:d2:85:53:25:88:e3:5c:
18:82:e3:01:ba:9d:ad:32:bc:0c:18:5f:d1:57:21:59:3b:b4:
25:88:ce:6d:52:0c:04:4d:76:1c:68:b3:2a:67:c6:bd:b8:69:
74:e3:1d:a3:d0:f3:02:be:34:45:3d:57:e0:dd:53:3d:2b:7a:
f3:f2:2b:a4:30:de:70:e0:20:4c:b5:e8:ac:06:d9:61:5d:74:
f0:cf:14:20:df:fc:ce:2b:71:be:8e:9b:26:5e:28:e0:3e:dc:
80:7e:64:b1:43:2c:8d:47:d6:5b:ef:69:5a:3c:ab:44:66:a6:
e6:0f:2f:fc:73:7a:a7:ae:01:8e:7d:b1:e2:39:e7:75:df:54:
31:46:22:fd:08:9f:67:0c:94:c1:37:d2:f1:06:49:d5:86:61:
cd:38:eb:6c:5c:c9:69:95:99:ed:92:f5:a6:65:64:fc:1e:82:
60:0f:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 13:04:08 2025 by rpki-client