This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File: xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier: xstpuX26F2w+xkjo+sbtpEJD/+fNWQXbHFhEs9NwEsc=
Subject key identifier: 70:91:B5:A3:93:E0:56:E4:15:8D:72:FA:F0:02:B3:41:5B:C4:32:B7
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 019B3C103C93601818FD1C0EAB5ACE703CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number: 03F6
Signing time: Sat 20 Dec 2025 14:00:55 +0000
Manifest this update: Sat 20 Dec 2025 14:00:55 +0000
Manifest next update: Sun 21 Dec 2025 14:00:55 +0000
Files and hashes: 1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: 6SKvj8kYI6b5kI7U2Bg8f2fi8KGleLDj12YtiFXotuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:10:3c:93:60:18:18:fd:1c:0e:ab:5a:ce:70:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Dec 20 14:00:55 2025 GMT
Not After : Dec 21 14:00:55 2025 GMT
Subject: CN=7091b5a393e056e4158d72faf002b3415bc432b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:13:7c:7f:8b:43:66:c0:da:be:6d:97:df:
3f:52:b1:8b:2e:5f:8a:55:78:49:46:84:2d:72:0e:
fe:3b:bd:a5:3a:54:32:e7:1b:2f:43:ab:ff:11:6a:
ba:cf:77:f7:a8:37:0d:b9:1b:50:c1:a0:f4:a2:24:
63:58:21:32:f8:09:5d:50:d7:f3:04:61:5a:7f:ec:
17:61:6e:c0:de:fa:8a:3b:82:47:82:be:df:f2:76:
cb:b0:32:8b:44:73:2d:8b:d4:6c:74:24:94:88:fa:
20:bd:cb:ea:42:92:c9:58:6e:fd:85:f8:1a:5e:96:
88:50:94:3d:19:7a:20:be:aa:4c:da:0f:6d:80:38:
ee:f9:a8:01:a1:7e:f0:6d:94:af:a9:9d:3c:6f:a7:
38:c1:a0:2e:32:c1:18:97:38:f2:03:fb:32:76:8f:
21:af:99:84:66:9b:6e:5d:6f:19:d5:5e:50:25:da:
75:67:07:1d:f8:48:26:ff:7a:7b:1d:ce:ac:08:40:
c2:1f:b6:02:b3:76:6f:1e:86:70:72:03:06:41:1a:
55:fd:b0:03:15:84:64:8f:fb:dd:fc:5b:29:81:94:
32:e3:a5:88:2c:b6:14:83:6d:39:6d:ff:ba:5b:d9:
91:bc:7a:1b:d0:19:63:4b:79:6d:dd:c7:2c:85:b8:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:B5:A3:93:E0:56:E4:15:8D:72:FA:F0:02:B3:41:5B:C4:32:B7
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:2d:92:10:b2:67:9f:0d:43:63:5c:36:f4:7c:7b:28:37:
08:0b:60:79:61:5e:bf:4b:11:64:87:a3:92:d2:9d:a9:77:cd:
45:72:87:d9:a0:c6:ff:92:ec:f9:91:e6:57:05:42:fd:9c:73:
7f:d2:77:a5:33:4d:24:15:bd:ec:4d:59:bb:70:c7:38:78:65:
63:a4:55:3e:b5:29:d0:f2:76:36:63:e5:6d:cc:08:3c:7d:43:
1d:77:9a:fe:15:bd:2f:82:c5:31:4a:90:0e:44:ca:67:89:8b:
75:08:22:37:a0:28:0f:4e:2f:74:e1:6b:55:5b:b5:de:2c:8d:
29:91:76:a9:4e:53:28:57:d8:33:46:4f:24:33:8f:64:a3:47:
db:d6:9a:ad:13:0d:e3:b2:77:cb:20:46:af:49:b7:26:4e:97:
35:49:02:c2:16:05:b7:d5:4a:79:d8:a9:a7:db:a4:81:30:77:
d8:7d:4a:40:15:1a:23:fd:e1:84:ae:85:3c:e8:a6:6d:89:60:
1d:af:73:63:89:40:9c:47:fb:f2:c0:a8:64:ea:fe:a0:78:f5:
0e:63:e5:57:cd:09:cf:c3:20:2c:69:99:dc:0b:fa:09:e7:52:
4f:fb:30:d1:89:3d:61:ae:8c:d1:6b:b7:4a:d6:d7:f5:e9:fb:
ee:36:20:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8EDyTYBgY/RwOq1rOcDypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx
NDAzOGEwHhcNMjUxMjIwMTQwMDU1WhcNMjUxMjIxMTQwMDU1WjAzMTEwLwYDVQQD
Eyg3MDkxYjVhMzkzZTA1NmU0MTU4ZDcyZmFmMDAyYjM0MTViYzQzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvITfH+LQ2bA2r5tl98/UrGLLl+K
VXhJRoQtcg7+O72lOlQy5xsvQ6v/EWq6z3f3qDcNuRtQwaD0oiRjWCEy+AldUNfz
BGFaf+wXYW7A3vqKO4JHgr7f8nbLsDKLRHMti9RsdCSUiPogvcvqQpLJWG79hfga
XpaIUJQ9GXogvqpM2g9tgDju+agBoX7wbZSvqZ08b6c4waAuMsEYlzjyA/sydo8h
r5mEZptuXW8Z1V5QJdp1Zwcd+Egm/3p7Hc6sCEDCH7YCs3ZvHoZwcgMGQRpV/bAD
FYRkj/vd/FspgZQy46WILLYUg205bf+6W9mRvHob0BljS3lt3ccshbhskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCRtaOT4FbkFY1y+vACs0FbxDK3MB8GA1UdIwQY
MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt
MmE1ZTk4YWJkMWYzLzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz
LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy8tkhCy
Z58NQ2NcNvR8eyg3CAtgeWFev0sRZIejktKdqXfNRXKH2aDG/5Ls+ZHmVwVC/Zxz
f9J3pTNNJBW97E1Zu3DHOHhlY6RVPrUp0PJ2NmPlbcwIPH1DHXea/hW9L4LFMUqQ
DkTKZ4mLdQgiN6AoD04vdOFrVVu13iyNKZF2qU5TKFfYM0ZPJDOPZKNH29aarRMN
47J3yyBGr0m3Jk6XNUkCwhYFt9VKedipp9ukgTB32H1KQBUaI/3hhK6FPOimbYlg
Ha9zY4lAnEf78sCoZOr+oHj1DmPlV80Jz8MgLGmZ3Av6CedST/sw0Yk9Ya6M0Wu3
StbX9en77jYghg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:19:43 2025 by rpki-client