This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: 5GX90VGXl+Hsu7rN9U9Z5wLuqM3KvHPI85FiXheCxX4=
Subject key identifier: 4B:9C:0D:95:99:84:2F:01:2E:F6:1B:F2:B8:EE:E5:73:9C:42:4E:3C
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019B6467A4F1CF88B08ADC70947C8070FD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0E70
Signing time: Sun 28 Dec 2025 10:01:12 +0000
Manifest this update: Sun 28 Dec 2025 10:01:12 +0000
Manifest next update: Mon 29 Dec 2025 10:01:12 +0000
Files and hashes: 1: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: SWic9MpLc6K5JNRrBf/0yNc0pY3mBZFiPsKeqP1REPo=)
2: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:64:67:a4:f1:cf:88:b0:8a:dc:70:94:7c:80:70:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Dec 28 10:01:12 2025 GMT
Not After : Dec 29 10:01:12 2025 GMT
Subject: CN=4b9c0d9599842f012ef61bf2b8eee5739c424e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:e5:c0:c7:eb:ee:d4:11:1f:dd:e7:eb:a3:
67:4b:ab:31:c1:f5:1a:ee:cc:e3:20:14:3b:d4:85:
24:1d:63:3b:ba:6f:8e:7b:d6:75:aa:8a:95:29:a8:
9f:36:73:07:c8:83:aa:dd:0d:60:5f:b6:a0:14:3d:
4f:d4:69:88:b8:29:55:99:07:88:09:a1:2e:41:a4:
41:89:7a:8c:04:d9:9f:51:38:89:5d:93:9b:5e:4f:
d8:54:cb:12:6c:fa:f4:04:52:d9:a7:e1:5b:93:c0:
76:43:7b:c4:2c:58:f1:4c:eb:f9:a5:d2:0a:56:6e:
78:e4:b6:a5:ce:63:ca:7f:31:c2:b3:16:64:5d:21:
1d:08:cb:19:4c:69:4f:3e:4e:83:32:e4:b5:5a:e6:
79:8d:dd:09:9d:f1:17:bc:2d:60:fb:9c:89:62:d8:
d0:f4:e8:5d:c0:d5:3d:e7:20:6c:02:9c:f3:bb:e9:
ad:8f:48:5a:9c:6e:0b:07:94:e6:24:79:aa:f9:f5:
4e:96:13:38:51:37:24:e5:22:1b:29:e2:ac:26:43:
a0:78:a1:7e:8f:97:e9:16:e8:26:18:3c:2e:9a:86:
a0:ef:56:8e:a0:77:38:49:dd:51:ce:d9:02:2e:1c:
a2:5e:1b:64:eb:59:18:ad:ac:0b:92:6e:d3:cc:83:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:0D:95:99:84:2F:01:2E:F6:1B:F2:B8:EE:E5:73:9C:42:4E:3C
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:dc:0a:b3:83:eb:be:5c:3f:3d:da:ac:b6:c5:6b:0a:46:
b2:f0:24:48:53:73:2f:a9:53:54:57:05:f9:ac:34:ac:f6:f9:
f0:aa:90:9e:c8:b7:0d:b4:d9:00:d0:51:56:84:7c:e1:6a:e6:
ed:f1:a7:22:4e:7e:99:fd:19:12:83:d2:17:10:18:69:18:64:
47:2c:2d:e7:c2:c8:c7:85:66:c6:88:26:cd:a2:5a:98:b8:48:
9a:22:4e:00:76:36:94:f1:a0:bf:9c:cb:d8:84:12:ec:f1:d1:
3a:60:18:c6:64:8d:f2:ad:92:6c:76:a4:ad:cd:eb:62:62:6f:
9c:1d:67:a7:e9:49:e1:80:88:8f:4e:86:10:82:7d:8b:5d:02:
a2:58:91:1f:44:64:97:62:d6:43:18:fb:f2:61:d2:c1:0c:33:
b2:7b:50:27:37:4b:a2:37:63:da:55:5f:a0:f1:91:ca:3b:f4:
de:9d:84:6e:93:91:bb:12:9c:08:23:de:e5:cd:6e:ad:b3:f2:
53:6e:ae:7d:f9:03:1d:c8:ea:10:cb:59:1f:71:e3:33:b1:91:
45:fb:b2:68:d2:e8:90:57:54:49:bd:b2:45:11:4d:01:67:87:
1c:38:95:b0:e6:68:93:1a:52:d2:cb:d9:f0:ed:62:06:b1:a3:
48:f5:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 11:23:28 2025 by rpki-client