This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: R9+y2yVwhkFsecZSSUHw/TlPDeJD+4OTz5sK+y3DVfE=
Subject key identifier: F6:83:5C:9C:24:53:D8:C0:F9:74:F8:BB:9A:01:9F:AA:D8:4C:57:1F
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019B3A589451CEFF9907AE66EC01164FB708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 06F7
Signing time: Sat 20 Dec 2025 06:00:42 +0000
Manifest this update: Sat 20 Dec 2025 06:00:42 +0000
Manifest next update: Sun 21 Dec 2025 06:00:42 +0000
Files and hashes: 1: NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa (hash: Qmu587A5vz0QqePux9/8aXshlrfRjr3JIejbf/nnhGw=)
2: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
3: T58xMDbLANQb9Kgw893xpFau1Fs.roa (hash: 6zsxCyqe8IvUF3KmmNmoDeEUsdW8rKFl85HR/TG08js=)
4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
6: x9gEvmLiqp6QXnPTPsa-6i-pFyo.roa (hash: keFMGhxuV8MLlgHVwMp/d+A+4wpJiYJvnC3NEijngr0=)
7: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: T7HenNzClNFp0pV6U/f5F5+QAVRmyzE2T89eSFCfF+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:58:94:51:ce:ff:99:07:ae:66:ec:01:16:4f:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Dec 20 06:00:42 2025 GMT
Not After : Dec 21 06:00:42 2025 GMT
Subject: CN=f6835c9c2453d8c0f974f8bb9a019faad84c571f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:1f:7f:c4:22:e4:f8:f1:bb:45:0b:88:8c:
e0:45:ed:67:1f:63:1c:1b:0e:5a:db:2f:ce:1a:22:
a8:9f:df:9e:83:f6:13:95:bc:3f:15:ec:a5:b8:de:
43:77:2e:00:a6:30:2e:03:14:9e:34:4f:01:68:ad:
94:e6:38:0f:c5:9d:c9:d0:48:ab:69:ec:5d:2d:39:
b5:cf:15:a9:8c:2e:f8:99:16:df:a1:ed:51:38:41:
3f:1d:d5:25:82:60:0d:43:f8:32:1f:77:b6:3b:6a:
c1:b7:3b:3c:7e:a0:10:98:6d:1a:75:e4:e0:f5:b0:
48:30:69:d2:db:92:cc:85:22:c9:0c:00:04:e3:44:
0a:0b:13:2d:10:65:d2:df:27:49:e0:c9:c8:73:9c:
54:43:be:32:0d:2c:fe:51:59:04:4a:4e:71:cd:5d:
3a:08:0f:da:c0:66:06:c2:64:3b:3c:db:9e:52:ce:
da:f8:4f:f7:62:bb:cb:93:da:de:41:3d:8e:99:92:
d9:d2:74:49:65:44:9e:9f:7d:28:02:c9:5e:17:7f:
92:51:6d:2e:87:b3:fc:2f:01:e4:1e:c3:a3:6b:c0:
ae:34:49:4e:df:83:40:4f:3b:e9:e8:8c:54:32:55:
40:da:79:85:3f:9f:13:f1:51:fc:9c:53:e6:1f:d2:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:5C:9C:24:53:D8:C0:F9:74:F8:BB:9A:01:9F:AA:D8:4C:57:1F
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fa:0b:2c:20:aa:c2:20:3b:cf:09:c2:eb:f4:9d:fa:fc:e5:
f8:91:d1:e6:6a:a8:16:f4:99:f2:3c:20:e7:dd:bb:98:98:a4:
9f:39:5c:d9:5e:f1:8d:9b:0a:70:d2:2e:10:a4:fb:7f:12:44:
c3:0d:bd:b6:7a:d0:88:df:6b:90:7f:24:44:4a:fa:0c:a3:4c:
ea:1d:a5:e8:79:71:30:f6:c5:1e:9b:f5:f7:a9:0d:36:15:0a:
52:c3:73:5a:66:31:16:ad:9c:f7:6f:fb:c0:10:a0:8e:ce:dd:
12:cc:73:30:3b:b9:44:d0:25:e6:57:a4:44:49:4e:b9:59:35:
8d:5a:cb:f9:a3:c3:a6:3e:01:8e:7a:bd:9a:1b:bd:9a:5a:81:
5e:a6:41:39:a1:24:cc:01:84:2a:7f:c2:65:ab:1b:bc:c8:7a:
57:d4:47:1a:f5:7e:9a:72:1c:e4:1c:37:fe:62:ee:df:5b:97:
f2:2f:5c:a5:e7:4c:f6:97:66:4e:7d:3b:ca:04:70:86:07:50:
e7:a1:34:e1:93:0f:d1:56:95:3b:42:67:da:a3:a8:bf:22:03:
19:90:a3:26:f8:32:21:9a:a2:90:5a:d1:6a:9b:a7:a7:11:e4:
04:42:ec:35:e3:15:9f:26:a5:7b:bb:ef:85:52:70:fe:6f:32:
b8:a6:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:35:25 2025 by rpki-client