This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: uzMja4+WYqRlAwqdTFyve4TS3pb+0ufk3SKAWw23RtU=
Subject key identifier: 88:32:7E:11:47:32:7C:B2:15:C6:CB:BE:50:23:64:A5:A2:CE:F2:51
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 5558B696FDB3403E0DC6DBEE65F44FE3713CA7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 059A
Signing time: Sun 21 Dec 2025 19:42:38 +0000
Manifest this update: Sun 21 Dec 2025 19:37:38 +0000
Manifest next update: Mon 22 Dec 2025 21:30:38 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: WrwS+3ehqalHuyyWiVCN+b4IWX1OgYd65NQ8i/rHxSU=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:58:b6:96:fd:b3:40:3e:0d:c6:db:ee:65:f4:4f:e3:71:3c:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Dec 21 19:37:38 2025 GMT
Not After : Dec 22 21:30:38 2025 GMT
Subject: CN=88327E1147327CB215C6CBBE502364A5A2CEF251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:d4:b4:c3:bb:75:72:c5:f1:7f:8c:1f:a8:
33:a3:2f:e5:a8:88:9f:0d:99:fa:e2:ff:81:85:21:
f3:87:26:d1:41:f5:33:29:01:03:ca:f1:89:59:71:
81:a3:ce:26:11:81:c4:24:ce:cb:1b:38:53:f2:ab:
57:9f:44:af:02:25:64:f1:e4:14:b4:7d:d7:80:31:
9a:b7:ca:ea:f9:e4:76:02:a3:2b:58:d1:48:dc:e4:
36:42:ad:6f:0c:5a:1d:f4:35:7c:21:4b:3a:28:9a:
b1:e2:ea:37:7b:d3:e9:2e:b3:35:15:1d:27:1a:e3:
35:6e:76:ab:80:a2:48:e0:c5:5b:f1:d6:ba:a0:3a:
cf:bf:d0:05:2c:9f:49:aa:60:49:f6:bb:c1:17:3b:
45:a4:a5:4d:30:79:ae:8c:53:e6:66:4b:39:b7:45:
5a:32:3d:76:3d:66:63:97:ed:97:96:96:72:f7:1b:
8e:e6:3a:b5:5a:93:7b:8c:da:74:43:23:eb:1d:be:
35:99:9f:61:ba:64:22:d6:31:de:49:33:89:5c:34:
f4:7c:a0:ad:59:fa:da:f7:3b:9f:63:8a:7b:2e:a4:
77:99:95:77:0b:b6:18:83:ec:f8:24:ac:8f:e0:bb:
4c:d9:50:f2:dc:02:13:94:14:0e:62:1f:82:03:b9:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:7E:11:47:32:7C:B2:15:C6:CB:BE:50:23:64:A5:A2:CE:F2:51
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:67:ad:02:4f:b1:65:7b:08:82:d4:4e:19:5d:28:87:db:
dc:c1:d6:46:fe:7e:fe:dd:64:cb:3f:88:ff:ee:51:2e:93:bd:
ea:98:46:5f:a7:1c:e2:28:48:a5:72:03:76:11:22:f1:ed:59:
20:44:f1:ad:d2:7f:fe:da:63:1b:96:aa:ee:e3:68:e4:a1:9a:
b1:92:51:24:75:38:82:b8:46:d4:29:b7:b1:69:50:2a:57:c3:
d9:0e:9b:c7:d0:d7:6b:6f:37:38:48:c5:6d:06:47:79:d9:11:
5f:d4:8c:fb:26:ff:ce:14:e2:b3:7d:58:0e:c2:64:63:ed:8d:
f2:03:e0:74:4a:3e:0d:ac:66:05:11:8a:80:5c:e3:d3:c7:43:
fb:9e:6a:72:fd:2e:53:98:5b:05:6f:e9:ee:74:68:be:c4:50:
c5:76:65:ac:f2:9e:f1:3a:5a:1d:e8:5e:dc:e4:f1:30:e4:00:
91:a7:dc:1f:b6:15:1f:c7:39:4b:a5:3d:35:fa:3b:37:da:e2:
0b:0a:15:93:6e:de:82:c4:86:51:b3:f8:22:d0:01:14:3f:d8:
e1:df:98:99:1a:ba:25:16:f0:ca:bb:39:50:85:1c:51:06:c6:
e3:61:7d:2b:93:4a:c3:4d:6e:20:cc:ba:ad:97:12:60:05:9b:
3f:12:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:26:44 2025 by rpki-client