This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: 2kIXNjpZOLHIVaagk1wEbWwo5cewk0IEru9aWbTlKYI=
Subject key identifier: 3D:9B:E6:14:2B:7C:7A:EB:2D:4F:1D:19:4B:71:55:F8:C5:2B:B5:05
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 019B37C54168A5DC21801824DED712C1F1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 15E1
Signing time: Fri 19 Dec 2025 18:00:32 +0000
Manifest this update: Fri 19 Dec 2025 18:00:32 +0000
Manifest next update: Sat 20 Dec 2025 18:00:32 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: s8hrLmw6nLPfQ+Lx9sZftyIKdRibDH+7g6re9pFmlag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:c5:41:68:a5:dc:21:80:18:24:de:d7:12:c1:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Dec 19 18:00:32 2025 GMT
Not After : Dec 20 18:00:32 2025 GMT
Subject: CN=3d9be6142b7c7aeb2d4f1d194b7155f8c52bb505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:ab:b6:13:de:78:93:0f:57:97:af:2d:c5:
b4:4d:ed:02:11:cf:32:11:03:75:dc:fa:72:16:26:
f8:29:81:ae:0d:2c:18:60:cf:3e:1b:f5:ea:f8:8e:
5b:54:ca:d8:0e:8e:d2:7a:59:16:4e:6f:3b:c4:f2:
d0:c3:f8:8c:47:84:d9:29:ae:4d:28:97:b9:c0:65:
b2:fb:a4:d8:1a:b7:77:57:ab:88:51:c8:30:cf:fa:
26:73:2c:1f:1e:f0:bc:c0:6c:20:5a:11:a2:04:1b:
54:3a:26:9e:d5:dd:ce:5d:e0:d9:30:0e:2c:0e:f6:
64:3d:1c:59:ba:78:87:ea:cd:f4:ba:39:57:6f:bd:
7f:db:e5:d0:5a:0f:91:7d:55:da:d0:0f:9e:38:d8:
5a:2a:82:32:dc:d1:90:0e:68:4b:14:06:14:fa:b7:
87:85:d3:61:6b:13:ec:d5:1b:ee:36:48:f6:5f:54:
dc:5f:81:c2:91:4e:9a:fd:6c:c3:64:7e:fb:01:4d:
bf:c5:f8:9d:a6:11:27:04:93:a2:80:4b:35:f9:66:
28:17:da:fb:ec:e2:c0:7f:2b:92:84:e1:7e:01:0c:
7a:f2:b7:ac:70:67:61:79:25:c6:63:c5:44:5e:ed:
ae:f9:f0:f7:4c:59:3c:29:3a:e1:98:80:b9:1b:b7:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:E6:14:2B:7C:7A:EB:2D:4F:1D:19:4B:71:55:F8:C5:2B:B5:05
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:04:c3:10:91:a8:49:ca:31:27:9f:bc:9e:98:8f:6a:43:
2f:72:6d:74:f9:45:ee:e1:ae:06:e6:dc:7d:fc:b8:ea:a0:c4:
d3:d0:b3:f7:36:54:d9:70:57:68:0a:52:15:d1:77:b8:d9:a5:
dc:01:6d:ab:0f:28:c6:1e:69:0f:33:ae:51:ee:c7:77:1b:3c:
b4:48:ae:3b:40:6f:a7:12:01:67:58:68:9b:96:39:cc:c3:86:
09:00:21:9e:b0:df:1f:3a:06:63:7f:55:9c:c9:9a:d6:ce:31:
c6:78:fb:e7:a3:bb:ac:67:00:3b:7c:2a:8c:c4:fb:89:b8:ba:
9a:80:35:45:cc:2c:fa:21:cd:ad:46:a3:23:23:06:21:c0:33:
86:63:7d:19:c7:6a:47:59:c9:9e:43:43:d9:a5:62:15:7e:84:
10:dd:da:08:64:6d:d0:cd:80:37:16:fa:81:9b:a7:e3:87:27:
3c:24:01:87:4e:48:f0:69:be:4b:54:4c:35:1f:61:da:b1:6d:
89:6d:b2:9c:3b:7a:4b:5c:b2:38:48:b2:a4:d0:0f:b3:6f:17:
85:e9:2c:10:bd:3e:8d:ae:cb:a0:e8:a3:ba:a1:d5:35:18:29:
ff:46:a0:6b:1b:9e:ab:ed:66:81:71:b0:6d:0d:e3:32:0c:e7:
fd:bf:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:50 2025 by rpki-client