This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: o6sPXtDZWXRaP6/UIp+L/LqD5ChpFz0ExdQAHxDmpys=
Subject key identifier: 68:4A:7F:B9:4F:E0:A2:6F:F9:BE:BD:77:1F:4F:87:E7:A7:36:CE:4E
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019AF209198E0E289C6B648D7EAF330AD415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 05:01:13 +0000
Manifest this update: Sat 06 Dec 2025 05:01:13 +0000
Manifest next update: Sun 07 Dec 2025 05:01:13 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: 0/GCockbUhvkQYx45zZPMK2O7T7ONzGc6boKuwrP2wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:19:8e:0e:28:9c:6b:64:8d:7e:af:33:0a:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Dec 6 05:01:13 2025 GMT
Not After : Dec 7 05:01:13 2025 GMT
Subject: CN=684a7fb94fe0a26ff9bebd771f4f87e7a736ce4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:ae:2f:c4:2f:22:67:27:fe:e8:30:cf:0e:
98:31:5f:66:fe:08:b6:63:f7:9e:ab:fa:7a:b9:35:
65:21:8d:60:a5:3f:cf:f5:29:53:38:a5:b1:2e:ce:
35:e6:db:ce:f2:d4:de:90:82:14:bb:5f:be:ea:2b:
a5:9c:e4:f3:b2:42:d6:dd:5e:b1:d0:1f:47:18:0c:
b9:83:d5:4a:a7:07:f2:8d:01:56:94:ad:0d:ea:db:
4e:80:d6:88:8a:f3:ef:84:c4:5d:36:a8:45:d3:b4:
d1:2b:f2:88:b4:fc:7b:55:49:ea:21:9f:fa:c5:c8:
eb:e8:50:59:e6:fb:60:18:88:5b:f3:a6:ed:5f:8d:
fa:ed:30:e8:83:e7:34:51:2a:b4:01:33:be:5f:69:
a4:22:3c:8e:8b:d8:f5:a5:17:49:9b:57:cc:cc:c5:
ec:b5:42:cd:ee:29:ea:4d:9f:e3:e5:8e:2d:56:bd:
84:1c:e4:43:4e:3e:ec:56:76:16:85:1a:8b:36:85:
93:a7:c6:3a:af:06:b9:1d:db:25:be:d8:5f:3a:0e:
4a:4b:8e:29:6f:4d:cb:20:ee:ce:b7:86:84:1a:7c:
bb:13:2a:1e:3a:ad:ba:b8:9b:41:0b:68:52:d1:c4:
4b:49:bd:86:59:c5:af:6e:fc:43:27:49:f1:45:31:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4A:7F:B9:4F:E0:A2:6F:F9:BE:BD:77:1F:4F:87:E7:A7:36:CE:4E
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:81:9a:12:2c:9f:e3:43:bb:e9:54:45:ce:38:05:1e:8c:d3:
9f:cf:0a:ac:da:2c:eb:22:f9:2e:84:3a:49:c5:a2:d7:5d:c2:
cc:9e:78:65:97:c1:b4:78:65:cc:17:71:72:53:09:c0:4b:db:
d2:b0:6f:07:c8:21:7b:10:b2:a2:01:14:3a:11:ef:17:a4:44:
2b:6f:6d:c7:45:87:99:9c:4f:b5:65:c6:2a:32:7d:a1:d1:c5:
4d:a9:c0:b5:5c:ae:27:de:99:86:01:16:86:a2:6a:56:ab:cb:
8f:5f:80:cf:3d:f7:1e:ed:30:18:be:0d:76:38:13:9f:2b:cf:
d7:a5:93:73:6e:34:e6:3b:77:51:a4:ff:73:99:b4:21:58:b1:
4d:c2:68:f7:80:5c:f6:4c:61:4f:a9:7e:1d:63:88:06:ef:37:
fa:89:6d:53:0d:54:ed:59:7f:7d:ae:8b:6a:d5:99:9f:b5:d0:
64:63:cc:67:ea:92:c2:9b:c3:4c:7b:27:a0:52:56:26:d5:94:
09:a4:1c:77:d7:93:0c:07:9d:fe:8a:9d:e4:30:8d:d1:d8:66:
fd:e7:85:50:34:75:91:c6:2d:0c:83:25:a0:32:58:05:50:3f:
59:62:de:76:cb:47:d3:7a:38:cd:40:e3:14:65:67:92:98:24:
48:c1:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:33:57 2025 by rpki-client