This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File: 6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier: WxP+mk0n+zA9chuU+0ZO+3krIOErU/lhSZzIarUHrcg=
Subject key identifier: 0C:9C:7B:42:B9:95:79:01:BB:AA:BA:50:CF:1A:4B:15:62:1C:57:96
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer: /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial: 019B41A41593FC28CE9B880F5035DB9D28BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number: 178D
Signing time: Sun 21 Dec 2025 16:00:30 +0000
Manifest this update: Sun 21 Dec 2025 16:00:30 +0000
Manifest next update: Mon 22 Dec 2025 16:00:30 +0000
Files and hashes: 1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: DTBnZDW+l7EQlERW2kmwXhtc8J2dSi4yNxo5FrnvVOw=)
2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:a4:15:93:fc:28:ce:9b:88:0f:50:35:db:9d:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Validity
Not Before: Dec 21 16:00:30 2025 GMT
Not After : Dec 22 16:00:30 2025 GMT
Subject: CN=0c9c7b42b9957901bbaaba50cf1a4b15621c5796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:5e:a9:0e:00:60:14:eb:19:16:27:48:e2:
a2:a0:ef:b6:a2:fb:18:f2:cf:e8:9d:1a:6d:92:8b:
4f:a7:74:68:34:98:85:2e:71:6a:ff:d0:4e:6a:40:
4a:32:5e:d7:89:c8:af:d6:e8:c0:15:e3:d1:54:ac:
81:a8:d0:c8:0f:e2:5e:96:89:a4:56:53:0d:79:34:
a3:4d:4d:27:9c:6b:89:e7:88:bb:24:d8:06:28:30:
75:75:9a:f7:59:d1:5e:ff:4e:e7:18:5d:63:fd:90:
93:8a:b6:a6:52:2b:c1:78:f8:6e:4c:22:0e:a4:ac:
64:69:f0:fd:84:e7:8d:29:3b:5d:fb:8b:20:59:a6:
b7:94:f8:56:e9:81:bc:d0:f3:33:24:27:bc:32:7d:
89:92:a0:12:e4:09:a7:8c:79:f9:59:72:83:3c:34:
8b:fa:55:0a:49:91:c7:a1:99:5c:26:36:87:5e:21:
d6:92:d2:e2:3e:7f:a8:bf:10:a1:34:f1:8c:c9:37:
17:54:c3:e6:2b:44:02:c2:e9:58:aa:20:3d:d0:86:
ec:3f:00:2a:d8:c7:11:de:1a:31:c6:9c:b7:2c:3e:
a5:c1:b6:f9:cd:19:64:4a:d3:a7:e2:70:d0:69:9d:
f9:f8:46:d5:c0:1a:d7:3d:d6:45:b0:ed:d9:86:7c:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:7B:42:B9:95:79:01:BB:AA:BA:50:CF:1A:4B:15:62:1C:57:96
X509v3 Authority Key Identifier:
keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4f:6c:01:b3:31:74:d0:8a:24:8d:c2:b2:55:11:b0:f3:5a:
21:a4:b0:93:02:cb:a8:2e:ed:1f:d2:29:1b:5c:25:d7:b4:4f:
0c:05:6b:86:03:7b:46:3f:b6:d4:84:3e:03:ec:0c:07:25:83:
c3:e1:97:c1:fe:4c:dc:09:70:2e:79:b6:2d:42:5e:fa:5c:89:
0d:b1:e5:ae:c5:34:f9:30:76:b5:ab:d6:be:78:db:c8:4c:1e:
aa:90:dd:8c:7f:91:27:ef:fa:b4:fc:5a:7a:9a:2b:f3:92:01:
2f:af:ce:b5:9e:c1:bb:bc:34:44:64:45:37:06:e7:c9:84:67:
64:77:6c:a2:80:17:1b:ab:23:49:6c:6a:e7:7c:7b:e8:70:7a:
ed:c1:1d:28:ef:10:b7:ea:b0:b5:e3:20:32:d4:8f:30:88:5c:
c9:38:da:63:00:2f:49:5d:ab:42:13:8c:48:5a:8d:5d:45:5a:
63:f2:46:94:05:d0:11:2a:80:90:44:13:9e:20:2f:e3:27:8b:
b6:f9:e7:8b:cb:d2:d2:08:28:cb:6a:6d:08:47:8d:ef:11:40:
12:56:39:28:fb:e3:95:ef:c7:51:9e:a9:e4:64:f5:62:bd:26:
7b:63:c8:42:3e:64:36:c7:fe:0a:a2:1c:84:40:e3:1c:c1:98:
8f:65:14:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtBpBWT/CjOm4gPUDXbnSi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWQyZGNmMmI2OWFiZGJkNjA5NDM2NDQwMTE1YTllNGVh
MTlhMDUwHhcNMjUxMjIxMTYwMDMwWhcNMjUxMjIyMTYwMDMwWjAzMTEwLwYDVQQD
EygwYzljN2I0MmI5OTU3OTAxYmJhYWJhNTBjZjFhNGIxNTYyMWM1Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sReqQ4AYBTrGRYnSOKioO+2ovsY
8s/onRptkotPp3RoNJiFLnFq/9BOakBKMl7Xiciv1ujAFePRVKyBqNDID+Jelomk
VlMNeTSjTU0nnGuJ54i7JNgGKDB1dZr3WdFe/07nGF1j/ZCTiramUivBePhuTCIO
pKxkafD9hOeNKTtd+4sgWaa3lPhW6YG80PMzJCe8Mn2JkqAS5AmnjHn5WXKDPDSL
+lUKSZHHoZlcJjaHXiHWktLiPn+ovxChNPGMyTcXVMPmK0QCwulYqiA90IbsPwAq
2McR3hoxxpy3LD6lwbb5zRlkStOn4nDQaZ35+EbVwBrXPdZFsO3ZhnwMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyce0K5lXkBu6q6UM8aSxViHFeWMB8GA1UdIwQY
MBaAFOgdLc8raavb1glDZEARWp5OoZoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEt
MjJlNTU0NzMxNmI1LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEtMjJlNTU0NzMxNmI1
LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPE9sAbMx
dNCKJI3CslURsPNaIaSwkwLLqC7tH9IpG1wl17RPDAVrhgN7Rj+21IQ+A+wMByWD
w+GXwf5M3AlwLnm2LUJe+lyJDbHlrsU0+TB2tavWvnjbyEweqpDdjH+RJ+/6tPxa
epor85IBL6/OtZ7Bu7w0RGRFNwbnyYRnZHdsooAXG6sjSWxq53x76HB67cEdKO8Q
t+qwteMgMtSPMIhcyTjaYwAvSV2rQhOMSFqNXUVaY/JGlAXQESqAkEQTniAv4yeL
tvnni8vS0ggoy2ptCEeN7xFAElY5KPvjle/HUZ6p5GT1Yr0me2PIQj5kNsf+CqIc
hEDjHMGYj2UUnQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:55:15 2025 by rpki-client