This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File: w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier: lqmO5WAb6HRsgA1NX8jYR5OFPFRjukIpLc5SIaWHYRY=
Subject key identifier: F5:9C:B5:40:CA:60:D3:45:DC:BE:74:F8:74:04:89:5E:66:94:6B:72
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial: 019B39EB6C223EF0ABA143A335DC254B2054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number: 10D6
Signing time: Sat 20 Dec 2025 04:01:28 +0000
Manifest this update: Sat 20 Dec 2025 04:01:28 +0000
Manifest next update: Sun 21 Dec 2025 04:01:28 +0000
Files and hashes: 1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=)
2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=)
3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=)
4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: 42M4TOPkvWf2/iHUTy5PaRFynz6nsXnN25qnVZLtR9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:eb:6c:22:3e:f0:ab:a1:43:a3:35:dc:25:4b:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Validity
Not Before: Dec 20 04:01:28 2025 GMT
Not After : Dec 21 04:01:28 2025 GMT
Subject: CN=f59cb540ca60d345dcbe74f87404895e66946b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:86:5d:4c:30:f2:86:16:fb:a2:01:44:ff:
4b:f8:05:ad:c0:0b:e3:36:a8:9c:c7:03:d5:04:89:
7e:b3:33:f6:91:41:40:3e:a5:79:cb:85:d7:7f:81:
33:e1:bc:6c:fe:15:1a:88:4a:6a:c4:15:5c:36:cc:
9c:b7:48:b1:d8:31:aa:28:e0:b5:94:c5:f0:68:30:
36:5a:c6:c2:b4:92:19:44:21:83:c0:6f:24:8d:69:
21:46:d9:e1:0a:8f:58:66:b0:e3:cf:97:dc:7b:b7:
c4:19:a7:53:66:a1:ea:ce:69:50:24:03:3f:7c:3e:
40:72:d1:ca:00:14:d5:f4:af:2f:f1:67:1b:fa:4e:
51:71:5c:79:cf:7c:74:4f:c9:3a:44:5e:f1:cc:ee:
83:ce:44:47:85:dd:e3:ef:1a:75:72:e0:98:36:3d:
6f:9c:5a:ce:9d:c7:ea:d3:57:92:73:36:31:e6:85:
0f:f8:65:87:52:02:95:ca:f6:5c:89:21:62:ab:ec:
72:6a:6f:a5:1e:57:a0:48:04:90:eb:c7:12:64:27:
2b:b8:76:b8:50:0e:b8:fa:e2:49:50:69:14:00:0e:
00:f0:b9:b9:f0:b3:4f:e8:49:1f:a5:25:43:5d:c8:
47:94:8f:a8:63:e0:fe:68:cc:bc:e4:d2:01:d7:71:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:B5:40:CA:60:D3:45:DC:BE:74:F8:74:04:89:5E:66:94:6B:72
X509v3 Authority Key Identifier:
keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:d0:85:7b:ab:ec:bf:2c:b4:97:fd:5f:66:d7:75:b2:df:
4c:f7:4c:82:97:63:f9:c2:b4:e6:ed:bd:69:3d:ae:f9:b0:a9:
dc:4a:11:64:33:cd:e8:31:e2:a0:d5:fc:55:99:48:56:10:9b:
f1:5e:8e:ce:68:00:ff:7a:5a:67:39:12:bd:b7:33:13:1e:81:
e6:ff:de:4d:8a:d3:b0:6b:06:63:09:0b:01:ee:c6:7c:fa:7c:
86:29:e5:fd:35:30:8e:f5:5d:67:cc:df:a8:a7:7e:81:d7:a9:
42:a8:5e:3f:4c:3d:f6:e8:37:09:18:09:80:b8:22:3b:38:bb:
75:b4:28:b0:7f:43:bb:e3:60:a4:e6:eb:87:63:d5:76:50:1f:
e1:e0:7f:a5:6f:09:84:eb:ac:63:84:03:08:f7:02:d7:db:ff:
1a:f9:35:00:1a:a5:32:d3:78:85:8c:ba:bb:0e:e4:37:fa:1a:
d1:0e:f5:ea:b0:6c:59:82:67:3f:c6:36:41:0d:90:26:0e:2f:
4f:1d:61:2c:0f:93:eb:7a:11:66:45:2b:fc:c4:81:27:92:08:
e2:91:05:7b:be:5b:0f:f9:12:11:9a:33:d7:78:b2:b0:76:0d:
2e:04:01:fd:58:7e:fa:a5:22:7d:22:0f:46:8c:e0:b9:82:49:
dc:4e:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:37:18 2025 by rpki-client