This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File: 6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier: R4n8CQeQZL3EVAVjhphfQR4eFyJou5mzezOnc2zscdo=
Subject key identifier: 91:ED:88:18:FF:63:B8:51:74:22:D0:71:CF:62:9A:40:21:58:D7:DA
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 019B50E063678A658EB172003824E19C2F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number: 11E1
Signing time: Wed 24 Dec 2025 15:00:41 +0000
Manifest this update: Wed 24 Dec 2025 15:00:41 +0000
Manifest next update: Thu 25 Dec 2025 15:00:41 +0000
Files and hashes: 1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: QWB9Y4vzLLLCi94U4oeGE4hveBmL+cTsIrLYZxl3PGo=)
2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:50:e0:63:67:8a:65:8e:b1:72:00:38:24:e1:9c:2f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Dec 24 15:00:41 2025 GMT
Not After : Dec 25 15:00:41 2025 GMT
Subject: CN=91ed8818ff63b8517422d071cf629a402158d7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:21:81:02:20:a0:0a:ec:a1:5c:b0:22:ce:
04:9a:f3:0e:3d:64:8a:da:0f:16:a0:ba:ea:9a:b5:
92:b7:50:c1:11:63:95:05:fa:82:13:6b:23:0c:4d:
6e:57:bb:a8:6e:38:1e:0e:e1:77:3a:f7:ae:81:7d:
86:af:3e:5e:57:13:1f:2d:03:39:bd:d2:db:e8:8c:
ce:a9:df:04:10:2e:57:0e:59:a0:63:83:e9:d3:ce:
eb:dd:5b:6f:ee:a4:93:ae:27:78:41:fe:b9:22:44:
3a:a4:60:e0:10:9c:ad:78:58:f4:cc:a7:3e:a2:64:
71:44:0b:cd:74:1b:cc:e4:b3:db:ae:02:96:a3:ec:
3f:3d:ca:d3:52:8c:8c:80:cd:db:ab:19:4e:e3:82:
80:79:70:8c:bb:8e:7a:31:c8:8c:77:8e:86:40:81:
1f:2a:fa:09:6e:9b:d0:bf:18:a6:45:a3:c5:e2:60:
b1:50:9a:db:b3:44:c5:26:76:9b:32:06:43:7f:b8:
80:af:01:10:a3:3b:46:22:14:f9:ec:f3:e6:4c:5f:
3e:47:51:e4:8a:df:a0:c1:b1:b3:0c:94:0d:bf:31:
0f:dd:ef:83:38:09:6c:fb:7e:5c:dd:ad:a1:06:0d:
1d:ed:f9:d5:b9:57:e2:3e:1b:a4:3c:64:d0:e9:1a:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:88:18:FF:63:B8:51:74:22:D0:71:CF:62:9A:40:21:58:D7:DA
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:50:f9:aa:08:2f:8d:3f:2a:cd:f0:b7:22:b3:5a:0d:18:
ef:10:e4:98:f3:f2:55:e2:6f:b5:c1:03:5c:e0:71:4f:52:e9:
43:10:e1:db:ae:1c:51:54:7f:f2:f4:d4:ce:bd:42:fe:52:4a:
ba:f7:d1:3f:81:51:8c:17:ed:21:88:32:bd:20:80:3f:89:c9:
d6:1c:2e:4f:c4:b1:8a:c6:df:d3:32:ba:e1:cb:cc:c4:3e:be:
ed:1f:89:24:fe:2d:e3:f1:b4:5c:56:bf:e2:0e:1e:60:76:95:
b1:09:65:db:e5:40:6f:89:11:1b:83:e2:0c:25:9e:6a:96:ab:
a0:7c:b1:f6:2d:7b:3f:c8:53:2d:c9:44:c9:99:83:9b:1a:05:
12:e5:68:a0:3c:8b:34:69:f0:c8:cb:0a:77:ca:13:93:aa:25:
ea:c9:79:44:75:a0:ab:f3:16:cf:88:45:8c:65:d9:3e:0a:35:
3c:1f:ea:1a:10:aa:ef:e5:c8:29:ea:98:24:61:2d:a7:a9:3b:
f4:93:0d:fd:4b:b7:7d:03:a2:78:81:48:f6:e6:3a:de:66:68:
7c:3d:76:21:cc:16:47:d2:c9:59:bb:01:96:d6:e2:d2:7a:c5:
54:fe:19:c9:fa:b6:a2:7b:1d:d2:8b:da:0d:d9:3e:5f:f8:1b:
e0:e3:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:28:47 2025 by rpki-client