This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File: 6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier: 8l7Lb8KXotcjr09Wc+CvvGvTFedNBpZUnBFqmWZU76Q=
Subject key identifier: 8C:C2:55:5C:E3:0B:C3:A0:02:B4:CB:2A:00:DF:33:B0:A2:C9:59:16
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial: 019B3D9126E674E405CB1FAF1EB1B8F44B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number: 0331
Signing time: Sat 20 Dec 2025 21:01:21 +0000
Manifest this update: Sat 20 Dec 2025 21:01:21 +0000
Manifest next update: Sun 21 Dec 2025 21:01:21 +0000
Files and hashes: 1: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: O1uniRgOY4ug/6+Oz25FqjLmSEwu25jRBAbEV6SqVos=)
2: nwRwy-984bbHflwKusiJIVmAkq4.roa (hash: tOQkT5BXAu3wfc5aKZscWA4O4C5nLe2NnLsQNNV6duI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:91:26:e6:74:e4:05:cb:1f:af:1e:b1:b8:f4:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Validity
Not Before: Dec 20 21:01:21 2025 GMT
Not After : Dec 21 21:01:21 2025 GMT
Subject: CN=8cc2555ce30bc3a002b4cb2a00df33b0a2c95916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:a7:ff:7c:7c:ff:12:66:fb:ca:b4:12:e1:
e7:a9:90:5d:d9:ea:77:1e:02:3b:07:66:42:13:5d:
55:9e:ae:73:db:03:09:ce:88:84:fd:c1:d6:5b:51:
d4:42:ef:3c:80:ad:d0:54:89:c3:19:ea:91:04:ce:
96:76:10:43:24:c8:cc:7b:c2:09:bf:c5:7c:4e:71:
2b:a3:3d:d5:8b:bf:60:00:6b:30:6c:b5:7d:c2:10:
18:6a:58:38:ca:33:b5:fd:f0:80:38:0a:08:9d:70:
09:28:d3:f8:ef:d6:e9:4c:68:f1:c2:21:2b:0e:d0:
68:90:08:70:24:73:3c:16:e8:b1:3b:74:2b:14:93:
50:a3:a0:d0:98:05:1a:4b:ba:1e:71:dc:1b:74:b6:
a7:e9:d9:8e:be:a6:02:ed:06:18:62:c2:ec:bd:d8:
67:92:f0:8d:b9:1c:c1:ea:2c:27:c4:3d:ba:58:09:
07:56:75:be:f3:18:b2:ce:e8:45:bf:31:d3:93:e7:
51:c2:36:0f:74:34:20:5b:76:2d:6a:93:54:cd:43:
c0:97:71:56:62:5e:16:dd:89:e0:3c:eb:45:83:f0:
38:c3:b4:9d:af:19:c2:a1:87:70:61:d8:95:fe:33:
2b:66:48:ca:fc:3b:cd:04:c0:75:c2:52:b7:fa:c7:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:55:5C:E3:0B:C3:A0:02:B4:CB:2A:00:DF:33:B0:A2:C9:59:16
X509v3 Authority Key Identifier:
keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:d0:e3:eb:08:33:38:6a:15:b9:90:9f:e6:7d:c6:15:a0:
1f:27:5c:0e:9d:f2:c3:1c:82:44:60:61:68:b1:46:2c:26:6e:
46:25:7b:60:b0:8b:f3:9c:05:c5:ca:bc:2b:d5:ea:95:07:f5:
6b:12:55:96:a2:3c:47:83:3c:5c:7a:68:a8:ab:7b:ad:4c:19:
fc:21:b2:fc:85:b0:bf:cf:f6:3e:cd:2b:5d:7a:94:c9:e8:77:
91:e1:75:5d:57:6b:ca:ee:32:71:40:71:26:fb:d9:d0:11:e1:
c3:17:28:df:e8:d2:aa:03:2d:db:af:3f:d3:ea:6b:0d:0b:9d:
80:ed:fa:63:72:6e:f0:96:2f:02:b9:6a:3b:ed:2d:55:eb:71:
a0:44:9b:9b:dc:8d:7e:63:a9:35:fc:7b:33:48:60:56:93:42:
7a:ac:27:2f:b5:9d:72:67:97:1d:58:12:ed:6a:b5:11:8d:82:
6c:da:b2:7f:f9:60:60:f2:1c:d3:39:c7:69:99:01:a6:f6:7f:
08:e0:69:ea:46:26:3d:b3:bd:1e:94:31:ea:ab:09:07:e7:02:
ce:99:95:ba:e4:2e:de:18:76:42:ec:ab:c7:95:d1:7f:b4:ea:
da:e3:e8:c1:25:1f:31:f1:12:0e:e9:b6:7d:aa:05:99:00:f9:
df:06:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:00:51 2025 by rpki-client