This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: Dao/8VoxeE1kMpyWZcNsgCFUH146rzRyiXD6SvYYmok=
Subject key identifier: 64:10:05:9E:FD:B2:A9:C5:7A:9B:18:F4:1D:1B:CE:4F:3B:F4:FC:82
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019AF5E5EC17029AF4BA429A2387C53076E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1768
Signing time: Sat 06 Dec 2025 23:01:17 +0000
Manifest this update: Sat 06 Dec 2025 23:01:17 +0000
Manifest next update: Sun 07 Dec 2025 23:01:17 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: jSobnxxUgAb8WA9mBwl4O8KLW4mIXAa8wJZL3MCk8nc=)
2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=)
3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=)
4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:e5:ec:17:02:9a:f4:ba:42:9a:23:87:c5:30:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Dec 6 23:01:17 2025 GMT
Not After : Dec 7 23:01:17 2025 GMT
Subject: CN=6410059efdb2a9c57a9b18f41d1bce4f3bf4fc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:08:a8:b9:f0:2c:cb:7a:cd:03:e1:1a:d8:
5f:38:8e:eb:96:80:72:88:bb:c9:1a:6e:99:f8:72:
27:2a:80:49:e6:63:84:e6:b6:ff:45:cf:b2:68:a3:
c9:49:57:d4:ad:10:c4:fb:11:f1:f2:67:03:e6:5e:
ec:e2:eb:8f:88:f9:35:cd:8b:8a:ca:23:92:0c:85:
5f:47:a6:b9:a0:b9:87:fe:95:f0:27:3b:32:a3:ad:
90:04:48:1e:80:82:97:ac:73:bb:75:bb:1c:71:58:
bc:9e:a4:80:c5:a2:85:c4:62:07:24:9e:62:eb:5a:
82:81:40:92:d9:a8:5b:6c:b2:72:9e:8c:35:64:67:
76:4a:84:1b:da:07:35:44:3e:a6:f1:a0:8b:60:3d:
91:95:9d:e8:09:71:81:54:42:44:66:09:d1:de:d6:
06:d5:b1:7e:98:ef:94:4a:83:a5:b5:dc:03:f2:8a:
e4:8b:fa:99:b2:38:f5:98:0d:bb:03:da:86:cc:7b:
48:88:e4:e9:e5:a5:e5:52:7b:66:4f:ec:76:24:1d:
ea:d1:32:1a:43:54:d2:c0:a9:a0:e2:07:20:fd:2a:
fe:d5:e0:9b:c0:03:59:0b:1b:1e:3c:e4:d1:ab:0f:
99:b2:57:62:67:c9:67:04:eb:d3:68:1b:eb:2c:4c:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:05:9E:FD:B2:A9:C5:7A:9B:18:F4:1D:1B:CE:4F:3B:F4:FC:82
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:be:a8:ef:85:41:e8:87:14:25:90:2e:ab:0f:22:bc:d9:
7f:e4:c2:ac:e3:a1:e7:c8:85:52:ca:16:d0:88:fc:d7:0c:d0:
fa:7d:e5:67:c6:89:c8:1b:b2:b5:72:5b:5d:12:22:e4:b4:b2:
94:d3:32:0c:ea:d5:ae:6d:0e:0e:46:df:c6:29:8b:ff:bb:eb:
63:79:44:44:c5:27:c7:56:4e:77:c8:ab:27:d3:60:0f:a2:3d:
2f:31:eb:fc:db:fb:32:9f:06:d1:28:86:39:9f:e5:5f:80:cf:
64:b5:bf:3d:e1:43:ae:19:f6:b5:a9:e5:72:da:ea:8e:9b:a6:
31:60:c2:6b:37:db:11:6c:d7:c2:b6:1a:9f:97:94:c7:e7:94:
30:a8:3f:8d:f3:17:b4:be:e0:85:2c:87:a2:4a:9e:ac:9f:9b:
e4:4c:3f:5d:81:4a:2a:ab:cb:91:89:18:ae:45:38:49:6b:33:
27:65:ab:10:ee:20:ec:a7:24:fa:1a:bb:e2:fd:8b:67:58:cc:
b3:ca:1a:db:bb:68:d1:8a:18:46:ba:30:3c:99:9a:aa:06:10:
ac:6f:63:86:7f:39:cb:7a:4e:7b:45:76:9e:30:9c:6e:bc:3d:
cf:b4:10:5c:2f:51:05:01:ab:bc:92:e7:f9:44:3c:96:48:75:
b7:e0:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:48:43 2025 by rpki-client