This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
File: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft (raw, json)
Hash identifier: SqsFfqvsDLoEyWEnrsrWoniaZMeKIvsH19qX0w5JlAI=
Subject key identifier: D2:69:3B:A9:B0:32:D5:75:90:DB:0C:B9:74:52:BD:99:27:F2:F0:A7
Authority key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3
Certificate issuer: /CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
Certificate serial: 019B3EA342F8BA2E8C840B382409B657DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
Manifest number: FC
Signing time: Sun 21 Dec 2025 02:00:45 +0000
Manifest this update: Sun 21 Dec 2025 02:00:45 +0000
Manifest next update: Mon 22 Dec 2025 02:00:45 +0000
Files and hashes: 1: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl (hash: SnZkt1pdajARfDl9Xtx5BvINTivVNkExAI1SNFeO/u4=)
2: qS9lbWxycbZu6RoyXldJwuJR6TM.roa (hash: qx382/Be7wHuXq5Yjg5wuqIZocz2BMbKerwk1urC5hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:42:f8:ba:2e:8c:84:0b:38:24:09:b6:57:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
Validity
Not Before: Dec 21 02:00:45 2025 GMT
Not After : Dec 22 02:00:45 2025 GMT
Subject: CN=d2693ba9b032d57590db0cb97452bd9927f2f0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:76:f5:19:57:c1:1a:a2:c5:ca:7d:84:c1:
71:91:44:41:0a:19:6b:eb:6a:bf:d9:d8:36:3e:08:
04:f5:d9:58:8b:ac:d8:b5:10:16:c2:1b:74:d1:20:
f8:ec:f1:4d:07:ab:d3:41:14:75:55:1f:2f:06:87:
59:d2:cd:90:9d:bd:a6:9e:39:39:15:c1:36:c8:6c:
04:7f:ba:84:43:f6:17:67:8a:93:d5:98:4f:ce:ef:
f5:2c:cf:b2:ec:ec:d8:3e:ec:2c:aa:8b:76:68:03:
59:78:c5:c9:69:42:47:d7:22:b9:34:81:58:6d:72:
67:13:c0:25:6e:2e:cd:37:68:e8:a6:67:20:50:70:
7a:fd:35:7d:61:d3:09:f7:fc:0f:51:7e:41:77:44:
5e:32:ef:e9:1b:2e:8e:1c:74:ec:54:de:ef:51:c6:
31:6d:a7:44:0e:80:61:0b:8b:31:3d:f1:ca:9b:6f:
e5:ee:0a:81:d2:6c:74:9f:03:a3:ea:17:c1:b9:2e:
99:c0:8c:fc:7d:0b:90:3b:03:e3:a5:71:12:64:d1:
eb:36:23:52:eb:53:e4:cb:ea:40:76:1c:d2:be:2a:
c6:16:f1:c2:af:f2:75:cd:93:d0:fd:93:a0:3f:b7:
85:66:02:33:4e:cd:e2:69:5d:90:5b:e3:55:f5:2d:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:3B:A9:B0:32:D5:75:90:DB:0C:B9:74:52:BD:99:27:F2:F0:A7
X509v3 Authority Key Identifier:
keyid:6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:94:cb:8b:3b:e2:06:15:69:6e:3f:09:a6:e0:a0:95:cd:
62:39:7a:80:b8:64:29:4e:86:4d:40:d1:88:c3:a6:29:6f:ff:
15:0a:21:ba:60:6b:67:74:18:13:80:ba:bf:4a:65:32:ed:a5:
22:d3:0f:20:06:7c:33:9d:d0:5b:19:52:4d:47:aa:52:36:c1:
dd:d0:99:c7:84:87:e8:d1:f2:be:6c:a8:41:87:24:0c:78:13:
b1:93:6b:82:12:b3:b8:58:12:1a:81:a7:31:12:aa:50:aa:d5:
34:7c:56:6e:61:83:f7:f4:b7:0a:44:bf:8f:1d:d8:3f:ae:da:
4d:98:3d:0f:45:e7:6f:d8:38:61:19:e3:c8:c8:5d:ec:cf:d8:
fc:e2:e4:86:e1:86:54:3e:b9:ac:0a:e4:ad:0e:d3:c2:1d:b5:
96:b2:d7:05:46:c4:db:ac:48:9b:a1:be:52:d1:83:ac:c7:f7:
36:51:db:18:99:f1:10:a2:12:29:be:e6:97:fd:39:12:b7:c4:
7e:0b:ca:72:48:18:17:d5:e2:fc:f1:bf:18:66:90:c6:44:e4:
ff:a5:75:6d:ca:f4:58:39:fd:4e:0c:84:11:e5:c0:c9:a7:91:
e5:e5:70:82:c1:38:20:77:4c:7a:65:9d:ed:30:64:84:44:ee:
53:ed:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:47:17 2025 by rpki-client