This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: qkpKONcH1Ai+oI573UDw7wiJCAhfDUWB32etG35PfjM=
Subject key identifier: 90:F6:01:97:52:31:AA:30:1F:5F:04:58:21:E1:05:D8:5E:C1:52:00
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019AF49BD44D9F120A6BEBCEA2871757B454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 17B6
Signing time: Sat 06 Dec 2025 17:00:44 +0000
Manifest this update: Sat 06 Dec 2025 17:00:44 +0000
Manifest next update: Sun 07 Dec 2025 17:00:44 +0000
Files and hashes: 1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=)
2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: +gfSuWU/IjB4X69+tL6RNO7hBzXClQAwUaNLLTBsFDQ=)
4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=)
8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9b:d4:4d:9f:12:0a:6b:eb:ce:a2:87:17:57:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Dec 6 17:00:44 2025 GMT
Not After : Dec 7 17:00:44 2025 GMT
Subject: CN=90f601975231aa301f5f045821e105d85ec15200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:81:83:fb:86:6d:9e:39:56:cf:aa:40:a2:
7a:b2:90:d0:8f:25:6b:7b:d7:dd:7e:a7:0c:07:b3:
d5:8d:ed:e6:ad:d5:fa:8c:3b:3b:dd:f1:71:4e:ef:
de:fd:cf:35:d0:e3:d9:f5:5f:40:21:32:8a:82:72:
5e:48:a6:63:91:59:90:44:7c:91:0f:6e:e5:ab:8a:
fa:f1:97:5f:2f:ea:24:20:e9:a8:28:66:aa:9b:e5:
27:01:2d:77:f3:af:9c:46:f4:32:ce:07:99:54:78:
5a:61:46:9b:07:12:b0:34:d5:a9:55:2b:f8:de:22:
9d:df:a6:ba:29:79:92:0e:5f:56:46:d4:73:58:74:
ae:75:5b:3f:55:8a:4d:d0:65:db:47:2c:c4:de:94:
f0:f7:35:64:81:c2:46:a4:b9:54:bc:89:e6:15:8e:
55:97:0e:0e:08:15:6d:e6:d8:63:47:29:83:f8:79:
b6:62:05:f8:10:3e:85:22:00:a4:8d:02:f0:15:c9:
41:f2:a2:6f:14:e5:fc:29:19:24:4c:0a:df:80:4b:
de:96:34:bb:0f:7e:0d:40:e2:18:e4:11:4e:5f:ea:
5a:5e:b3:2c:bd:32:c9:cd:a4:f5:73:5a:cb:1a:7f:
88:52:61:40:c1:96:8d:ee:b6:78:c0:ae:bd:af:fb:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:01:97:52:31:AA:30:1F:5F:04:58:21:E1:05:D8:5E:C1:52:00
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:e1:54:5e:3b:c9:0e:0c:74:8c:11:ff:5a:be:db:ae:98:
eb:d2:7d:37:16:92:7c:2e:34:cd:dc:26:fe:7d:1c:40:98:05:
83:fd:52:db:c8:fd:ba:72:bb:62:a4:8b:ba:d3:f1:a4:4d:37:
b8:5e:ad:13:bb:e4:0b:25:c0:fd:59:99:e0:9d:34:03:8e:8c:
2a:1d:83:75:f0:1b:58:7d:02:43:c1:a0:d6:f1:90:7a:9d:a5:
64:a8:df:2c:5f:34:ae:7d:8a:a5:3c:f3:61:d1:52:5d:bc:3b:
56:17:c2:78:68:0c:1b:f1:0d:7d:56:e0:93:dc:6e:ca:94:26:
80:fa:65:62:f8:a4:1f:7a:c2:69:5e:bf:94:1c:75:70:f5:1f:
09:ac:b4:07:ca:a9:d9:5c:fd:0e:a7:3c:dc:89:b9:50:cc:85:
9d:a6:42:bd:73:5d:9b:26:2f:9d:9e:59:c8:28:2f:55:70:69:
4a:26:51:cf:0a:c2:0c:27:79:6e:84:ee:f5:0e:f9:58:e4:7b:
4d:a6:6d:05:ca:50:e4:0e:cd:0d:38:87:6c:fc:23:b4:81:0e:
a5:4f:d6:c3:cf:79:da:e5:c3:89:0e:eb:70:a7:1d:d0:16:cc:
db:32:b8:91:84:8d:fc:0c:3e:bc:97:21:71:b2:4f:da:5c:c6:
af:54:b0:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0m9RNnxIKa+vOoocXV7RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx
MmE4MTEwHhcNMjUxMjA2MTcwMDQ0WhcNMjUxMjA3MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg5MGY2MDE5NzUyMzFhYTMwMWY1ZjA0NTgyMWUxMDVkODVlYzE1MjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH+Bg/uGbZ45Vs+qQKJ6spDQjyVr
e9fdfqcMB7PVje3mrdX6jDs73fFxTu/e/c810OPZ9V9AITKKgnJeSKZjkVmQRHyR
D27lq4r68ZdfL+okIOmoKGaqm+UnAS1386+cRvQyzgeZVHhaYUabBxKwNNWpVSv4
3iKd36a6KXmSDl9WRtRzWHSudVs/VYpN0GXbRyzE3pTw9zVkgcJGpLlUvInmFY5V
lw4OCBVt5thjRymD+Hm2YgX4ED6FIgCkjQLwFclB8qJvFOX8KRkkTArfgEveljS7
D34NQOIY5BFOX+paXrMsvTLJzaT1c1rLGn+IUmFAwZaN7rZ4wK69r/uVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD2AZdSMaowH18EWCHhBdhewVIAMB8GA1UdIwQY
MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt
ZjQ0YTU3Y2VkNzNkLzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk
LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAognhVF47
yQ4MdIwR/1q+266Y69J9NxaSfC40zdwm/n0cQJgFg/1S28j9unK7YqSLutPxpE03
uF6tE7vkCyXA/VmZ4J00A46MKh2DdfAbWH0CQ8Gg1vGQep2lZKjfLF80rn2KpTzz
YdFSXbw7VhfCeGgMG/ENfVbgk9xuypQmgPplYvikH3rCaV6/lBx1cPUfCay0B8qp
2Vz9Dqc83Im5UMyFnaZCvXNdmyYvnZ5ZyCgvVXBpSiZRzwrCDCd5boTu9Q75WOR7
TaZtBcpQ5A7NDTiHbPwjtIEOpU/Ww8952uXDiQ7rcKcd0BbM2zK4kYSN/Aw+vJch
cbJP2lzGr1SwHg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:29 2025 by rpki-client