This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: c5O7QiAqH24og1XZYR0xnTjaZwMidb3tTT0oAMULEiA=
Subject key identifier: 43:41:45:33:3B:BB:1E:C3:08:F5:EC:F8:27:E0:6D:55:4F:A8:75:96
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019B39B446A2FEE6F608BE8DDBD360AB4528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 36
Signing time: Sat 20 Dec 2025 03:01:14 +0000
Manifest this update: Sat 20 Dec 2025 03:01:14 +0000
Manifest next update: Sun 21 Dec 2025 03:01:14 +0000
Files and hashes: 1: JH_uJjM4YEPIo1o7h_DCak_pJWw.roa (hash: hczsEbFQanUBp2Rewcvx/ScQWwwhz9uBunaFmi89C/k=)
2: My4ZYlmWq5xzJJRo3aSOQHgAIFE.roa (hash: Lm0iLMb+ZMY5dREuT/5yKUYez1dcNUbHn2YSgFkm1RE=)
3: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: 1kNVTwmKuV59JCdkB3Ko0njeUdtl3hmlE97FwDf6Dvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:b4:46:a2:fe:e6:f6:08:be:8d:db:d3:60:ab:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Dec 20 03:01:14 2025 GMT
Not After : Dec 21 03:01:14 2025 GMT
Subject: CN=434145333bbb1ec308f5ecf827e06d554fa87596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:fe:81:90:cc:e2:3e:43:8d:66:d2:4b:7c:
91:de:c9:89:a9:5b:61:f9:fe:39:7f:98:a5:47:25:
74:e6:a4:6f:5f:37:11:c8:56:a2:a2:1f:ec:45:05:
c5:d5:94:b9:14:4a:ce:c6:77:e0:d1:e0:f0:06:bb:
32:33:7e:59:e8:35:6e:65:1c:85:e2:c1:1a:c0:4b:
df:18:b9:c8:0f:09:ce:b4:d3:4c:6f:6a:0a:24:a9:
6e:ab:3f:43:48:44:f8:ca:1e:1a:a3:e6:e6:1e:cd:
78:31:5a:42:09:cd:34:11:43:f0:a1:7e:00:0c:7a:
da:c9:8c:62:52:4b:47:eb:87:95:00:41:f2:06:17:
f0:91:81:90:ad:55:26:21:e7:0f:c9:52:ec:ec:29:
6f:39:e4:b7:56:89:11:5a:66:dc:9d:ef:75:bc:34:
21:2d:45:15:1e:85:91:43:98:b9:c6:5c:52:89:d0:
65:9d:84:50:97:65:56:a6:1c:e7:de:60:25:da:d3:
22:bb:78:f0:90:7a:00:8a:d6:75:ab:17:57:7d:a4:
08:2a:06:f2:58:46:78:7d:52:82:b9:be:69:06:93:
e8:9a:9a:63:60:b5:f3:9b:92:bb:3b:e9:b2:61:ee:
86:b0:80:c4:46:a9:57:8c:14:70:75:0d:dd:5c:5e:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:45:33:3B:BB:1E:C3:08:F5:EC:F8:27:E0:6D:55:4F:A8:75:96
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:45:66:e6:52:f8:0e:06:6f:11:6b:55:8c:bc:cc:f4:96:d5:
e5:84:67:27:0e:3c:8d:cd:be:6f:ba:20:f9:7a:02:08:98:b5:
54:ea:7f:70:0c:2f:33:cb:bc:2f:44:36:4e:e1:4c:79:45:ff:
a4:a0:2b:a0:6b:bb:4c:b2:6a:92:e6:d9:de:8e:fb:3a:5b:93:
0a:ac:78:27:d2:f8:52:ba:98:d3:7e:10:a4:b2:b6:66:67:e5:
54:4a:80:21:ae:74:d8:8d:e5:27:0c:91:30:13:1a:08:ab:9e:
a0:36:29:93:9a:f4:f6:d6:af:d9:f6:b5:e2:02:ed:fa:b5:f6:
a8:c1:8f:f9:10:2a:62:d1:ef:df:13:86:98:88:2a:96:7f:a3:
33:e8:02:3b:fb:e8:ad:ee:02:c4:43:e3:3c:24:45:1c:01:dc:
d2:ee:70:27:a9:61:de:72:bb:85:35:ab:90:3c:36:eb:5a:c8:
27:8e:23:4b:3b:57:b8:3a:15:4f:b3:04:c6:d0:e5:05:63:6a:
81:49:b1:d2:8b:80:d7:74:c4:cc:ab:16:ab:d8:6b:ee:eb:2b:
b8:d9:58:aa:61:1d:24:3b:d9:ca:52:c3:7b:4d:7f:a0:16:fe:
55:38:f4:f0:70:50:b3:5f:1c:20:d9:c4:ce:55:78:a2:e6:b4:
27:27:90:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5tEai/ub2CL6N29Ngq0UoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTAxOWE1YzE5NmJiZDFjYzE3ZDFhOGQzNmM0ZDY1N2Yz
ODE2YTAwHhcNMjUxMjIwMDMwMTE0WhcNMjUxMjIxMDMwMTE0WjAzMTEwLwYDVQQD
Eyg0MzQxNDUzMzNiYmIxZWMzMDhmNWVjZjgyN2UwNmQ1NTRmYTg3NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunT+gZDM4j5DjWbSS3yR3smJqVth
+f45f5ilRyV05qRvXzcRyFaioh/sRQXF1ZS5FErOxnfg0eDwBrsyM35Z6DVuZRyF
4sEawEvfGLnIDwnOtNNMb2oKJKluqz9DSET4yh4ao+bmHs14MVpCCc00EUPwoX4A
DHrayYxiUktH64eVAEHyBhfwkYGQrVUmIecPyVLs7ClvOeS3VokRWmbcne91vDQh
LUUVHoWRQ5i5xlxSidBlnYRQl2VWphzn3mAl2tMiu3jwkHoAitZ1qxdXfaQIKgby
WEZ4fVKCub5pBpPomppjYLXzm5K7O+myYe6GsIDERqlXjBRwdQ3dXF7jbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENBRTM7ux7DCPXs+CfgbVVPqHWWMB8GA1UdIwQY
MBaAFP+gGaXBlrvRzBfRqNNsTWV/OBagMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzct
OWU1NmY5NzVkN2U2LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzctOWU1NmY5NzVkN2U2
LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEVm5lL4
DgZvEWtVjLzM9JbV5YRnJw48jc2+b7og+XoCCJi1VOp/cAwvM8u8L0Q2TuFMeUX/
pKAroGu7TLJqkubZ3o77OluTCqx4J9L4UrqY034QpLK2ZmflVEqAIa502I3lJwyR
MBMaCKueoDYpk5r09tav2fa14gLt+rX2qMGP+RAqYtHv3xOGmIgqln+jM+gCO/vo
re4CxEPjPCRFHAHc0u5wJ6lh3nK7hTWrkDw261rIJ44jSztXuDoVT7MExtDlBWNq
gUmx0ouA13TEzKsWq9hr7usruNlYqmEdJDvZylLDe01/oBb+VTj08HBQs18cINnE
zlV4oua0JyeQ8A==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:40:38 2025 by rpki-client