This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier: 3oOK5mIX+CrCvEbfMIKEmeB2Cfse8LiVg8N0OZrvah0=
Subject key identifier: 4B:20:90:62:D5:DD:27:0A:EB:39:DB:A6:03:83:B7:9D:31:DF:C0:7D
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial: 019B3EA35004C045AD5ABD1FA509BEB075FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number: 1290
Signing time: Sun 21 Dec 2025 02:00:48 +0000
Manifest this update: Sun 21 Dec 2025 02:00:48 +0000
Manifest next update: Mon 22 Dec 2025 02:00:48 +0000
Files and hashes: 1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: IO6p2fS4/XJYeKReC1ZSHbGI6ZqESqnHKE99asXuAjI=)
2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:50:04:c0:45:ad:5a:bd:1f:a5:09:be:b0:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Validity
Not Before: Dec 21 02:00:48 2025 GMT
Not After : Dec 22 02:00:48 2025 GMT
Subject: CN=4b209062d5dd270aeb39dba60383b79d31dfc07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:29:ff:d8:7a:c8:c8:4c:c2:81:4e:08:0d:
6a:e0:5c:bb:30:4a:b1:1b:c4:fc:2a:71:07:08:9c:
b2:2b:7c:15:de:b6:c8:bf:4a:6d:9d:5e:57:64:68:
d6:0b:d8:28:53:96:4c:e4:e0:0f:99:31:84:c0:86:
ac:83:58:6e:d5:53:4a:39:d4:60:66:40:f0:4d:6d:
3f:d8:30:36:0c:5a:b2:08:5b:4c:42:b9:11:fe:7d:
87:c4:a4:8c:45:d7:3d:3a:25:29:c6:d4:f3:78:8b:
cc:04:e5:86:1d:ef:30:2a:66:12:57:67:52:92:ab:
1f:d1:c6:b7:60:8c:ab:09:8f:b1:b9:cb:ac:e9:4c:
35:1c:c8:87:2c:ec:f8:71:31:52:78:47:ff:04:76:
a6:05:ae:88:ea:e0:66:f1:25:9d:ed:44:e8:3c:b1:
6a:10:a5:c2:69:ec:eb:67:96:df:46:f9:68:ae:78:
4b:68:47:29:f7:c3:01:b8:81:16:8b:ce:26:e6:13:
c3:30:62:7b:60:30:63:cc:6a:5e:d8:f8:d5:b0:87:
8b:c1:fd:26:4e:6d:bc:f3:2b:4d:7b:88:f1:1e:a9:
ad:8e:f6:eb:57:a9:71:03:33:00:06:71:37:6d:79:
1d:70:e0:48:2e:c6:fe:dd:47:36:11:e8:1e:17:8f:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:90:62:D5:DD:27:0A:EB:39:DB:A6:03:83:B7:9D:31:DF:C0:7D
X509v3 Authority Key Identifier:
keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:92:76:2a:78:85:52:e1:e5:1d:ee:d7:18:9a:dd:aa:bd:
62:62:4f:0c:18:55:79:6f:11:89:2c:f3:82:32:d2:b4:bf:56:
26:a8:f1:f4:77:8a:91:ae:f6:22:74:ad:30:4b:4b:ee:1e:57:
5a:66:9f:80:89:a8:0d:55:89:4d:9f:63:32:0d:46:62:97:e1:
5b:59:9d:f5:04:42:44:bd:83:b4:e3:15:87:0e:51:7b:30:b8:
6c:e5:d4:9f:e0:df:9a:aa:54:05:46:f5:5c:3a:7e:5e:90:2d:
1a:17:16:94:f9:b3:8b:63:b1:6d:ac:bf:66:1e:60:7f:72:d8:
81:a2:e5:68:12:90:66:72:a3:b8:a4:50:b8:a8:a4:50:31:39:
9f:5f:17:57:24:b9:b6:89:77:81:6e:f6:a4:0d:d1:08:14:23:
f8:28:a3:a5:81:50:a8:f9:5b:e7:4b:34:41:2d:f0:b6:a1:ae:
09:fc:e8:b4:39:86:9d:8c:82:1b:ce:01:a5:94:f2:63:3f:4b:
d0:bd:a5:58:ce:ec:7f:ec:74:82:68:f8:ab:e1:72:75:3a:f9:
4a:aa:54:4c:dc:64:38:97:2f:8c:f8:70:37:ba:df:82:db:cc:
eb:f3:3a:cd:5e:ab:93:19:8e:4c:cf:db:f1:ab:e4:39:c2:2d:
64:a8:9f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+o1AEwEWtWr0fpQm+sHX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk
MGYzYTQwHhcNMjUxMjIxMDIwMDQ4WhcNMjUxMjIyMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg0YjIwOTA2MmQ1ZGQyNzBhZWIzOWRiYTYwMzgzYjc5ZDMxZGZjMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKgp/9h6yMhMwoFOCA1q4Fy7MEqx
G8T8KnEHCJyyK3wV3rbIv0ptnV5XZGjWC9goU5ZM5OAPmTGEwIasg1hu1VNKOdRg
ZkDwTW0/2DA2DFqyCFtMQrkR/n2HxKSMRdc9OiUpxtTzeIvMBOWGHe8wKmYSV2dS
kqsf0ca3YIyrCY+xucus6Uw1HMiHLOz4cTFSeEf/BHamBa6I6uBm8SWd7UToPLFq
EKXCaezrZ5bfRvlornhLaEcp98MBuIEWi84m5hPDMGJ7YDBjzGpe2PjVsIeLwf0m
Tm288ytNe4jxHqmtjvbrV6lxAzMABnE3bXkdcOBILsb+3Uc2EegeF4+3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsgkGLV3ScK6znbpgODt50x38B9MB8GA1UdIwQY
MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt
NWE2NjU2NTVlYjU3LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3
LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHiSdip4
hVLh5R3u1xia3aq9YmJPDBhVeW8RiSzzgjLStL9WJqjx9HeKka72InStMEtL7h5X
WmafgImoDVWJTZ9jMg1GYpfhW1md9QRCRL2DtOMVhw5RezC4bOXUn+DfmqpUBUb1
XDp+XpAtGhcWlPmzi2Oxbay/Zh5gf3LYgaLlaBKQZnKjuKRQuKikUDE5n18XVyS5
tol3gW72pA3RCBQj+CijpYFQqPlb50s0QS3wtqGuCfzotDmGnYyCG84BpZTyYz9L
0L2lWM7sf+x0gmj4q+FydTr5SqpUTNxkOJcvjPhwN7rfgtvM6/M6zV6rkxmOTM/b
8avkOcItZKifWw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:04:42 2025 by rpki-client