This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File: 6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier: js5AorpLVkmT4XD4OB5BE08NOZaVEoAgWtmjf5sc2gc=
Subject key identifier: E8:9C:72:19:B4:CD:7D:DB:1F:BC:A6:90:C1:4C:E2:27:3A:A1:C3:A6
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019B409178D6A265DC47879A5E223B6402AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number: 0A80
Signing time: Sun 21 Dec 2025 11:00:33 +0000
Manifest this update: Sun 21 Dec 2025 11:00:33 +0000
Manifest next update: Mon 22 Dec 2025 11:00:33 +0000
Files and hashes: 1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: Z8Svmp2jT9AN0ZzU7NmeIncgGi9vqOd045MiNmbIvr8=)
2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
3: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (hash: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:91:78:d6:a2:65:dc:47:87:9a:5e:22:3b:64:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Dec 21 11:00:33 2025 GMT
Not After : Dec 22 11:00:33 2025 GMT
Subject: CN=e89c7219b4cd7ddb1fbca690c14ce2273aa1c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:e2:ea:0d:e8:96:51:d8:cd:1e:6f:bd:06:
f9:b8:5c:e3:d4:cb:cc:01:9a:4e:f4:14:f4:b2:83:
7d:b1:0e:32:a4:6c:1e:a7:d7:a1:b2:8f:57:c4:e4:
00:69:6e:69:ff:c2:f1:0a:7d:7c:93:3d:16:f2:72:
45:18:76:26:8d:ab:2c:05:16:1f:73:ee:55:9f:41:
29:67:6e:30:97:8d:ed:b2:ae:d8:75:01:1a:c6:8f:
80:b4:9d:9d:0f:fd:ea:80:c8:43:f3:96:93:c7:99:
52:77:f6:a7:ed:cd:06:76:68:4d:7e:bb:c4:a2:5b:
23:93:a0:f6:39:16:60:27:21:5c:fc:84:a8:e5:83:
fe:e3:75:44:d1:57:c6:1d:7f:f5:ff:8e:7c:1d:68:
f9:d0:19:a4:26:34:47:51:0a:1d:86:fd:cb:d4:60:
c9:a5:7b:2d:a9:a3:47:dc:59:5a:96:95:39:a6:53:
06:98:19:48:ef:ac:59:46:b9:03:b7:27:64:23:8d:
f5:e3:2c:18:94:d0:aa:40:0d:5e:49:2d:b6:d1:6c:
59:e9:02:e5:85:96:f2:b1:be:38:52:ce:b5:1b:f9:
d8:7b:30:75:66:e4:38:0c:f5:4f:da:0f:14:a5:a8:
4b:76:fe:34:1f:c4:68:05:de:e2:2c:02:ed:3a:77:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:72:19:B4:CD:7D:DB:1F:BC:A6:90:C1:4C:E2:27:3A:A1:C3:A6
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:58:4f:83:75:7d:cd:c8:71:78:e6:44:0f:73:98:c8:9d:
c5:41:c4:79:95:6e:42:9d:f3:e7:d0:b1:ee:92:59:49:ff:1d:
c6:6c:5e:9d:31:df:5f:72:db:f2:d6:40:4e:8e:6b:e4:f2:27:
28:94:b4:fa:20:be:9c:e3:15:39:0a:a1:07:3a:65:bc:61:96:
78:67:37:9d:ce:32:1f:f2:fb:d9:75:bf:91:e5:a3:fc:31:c2:
59:81:6d:83:81:21:1b:bd:73:fc:14:a5:05:77:a7:1e:5e:dc:
f7:e8:db:96:51:6d:d0:fb:1b:7f:46:8e:84:00:93:94:94:3c:
ce:1f:d4:ef:66:99:b3:dc:00:1f:36:89:51:ec:08:0a:ca:4d:
3b:ad:55:e3:9c:64:49:90:79:d0:8c:d5:48:b2:9c:0e:e5:33:
ba:09:a4:9f:7e:34:a3:29:60:1a:c7:2a:96:d4:ea:1a:b9:25:
da:6f:0a:66:f4:30:eb:0f:7c:a6:f2:75:79:44:0c:c4:08:7c:
82:e4:02:ac:05:19:6d:3c:75:51:16:04:5a:38:8f:ac:a8:5f:
68:10:13:28:6c:6a:1d:85:f6:29:cf:40:71:1b:41:58:f9:33:
19:82:94:d6:42:cd:36:9c:6d:0c:c6:42:fb:c8:fc:ba:7c:99:
12:55:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:14:27 2025 by rpki-client