This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File: QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier: OsqQWZ+TL6G22sb2D1j7EBYMMzj6W4JwWnZLrabGJx0=
Subject key identifier: 3B:31:63:23:33:58:6E:58:64:DE:1D:86:90:ED:CC:C5:03:A7:56:45
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer: /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial: 019AF19B7D97350218F40864F9EFB6C71501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number: 0630
Signing time: Sat 06 Dec 2025 03:01:30 +0000
Manifest this update: Sat 06 Dec 2025 03:01:30 +0000
Manifest next update: Sun 07 Dec 2025 03:01:30 +0000
Files and hashes: 1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: l8RxUdviJc4n1J6CUJeqUitCakAnUFi4WP72ERJMMHw=)
4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:7d:97:35:02:18:f4:08:64:f9:ef:b6:c7:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Validity
Not Before: Dec 6 03:01:30 2025 GMT
Not After : Dec 7 03:01:30 2025 GMT
Subject: CN=3b31632333586e5864de1d8690edccc503a75645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:3a:69:4c:96:7b:9b:08:0d:51:35:3c:be:
d9:aa:bd:0e:08:7b:1f:e0:d8:55:60:1f:2b:23:15:
f0:a5:42:2f:dc:85:88:ce:ca:5d:f0:60:8d:31:2a:
23:e8:fb:8f:0a:94:8c:c9:6a:64:ca:fd:03:f0:09:
5d:e1:8c:31:aa:ff:6b:ba:81:ec:2d:d9:45:e0:c0:
f1:07:9c:52:91:8e:c5:c0:02:67:69:a1:5d:1f:d5:
5e:4a:78:48:53:70:6d:37:14:3a:ba:a2:3f:3d:a7:
ef:1c:f3:e2:6a:72:81:92:a2:17:cf:23:cd:50:c2:
fb:2e:b7:b3:7a:c3:e6:bf:73:16:d5:40:ff:90:b1:
f5:28:a4:0c:84:98:f9:2f:9c:3e:90:00:27:86:09:
94:58:5b:b8:8a:89:04:c5:84:d5:03:7b:3a:67:98:
38:70:64:39:6f:a6:c8:78:06:5b:d8:2c:78:56:11:
b2:84:6d:6f:59:17:77:ce:b9:1d:9c:17:1a:56:a3:
a0:50:a1:39:9f:22:bf:67:2b:93:6c:0e:07:d5:b8:
82:18:92:00:c3:bf:43:c4:36:a5:ef:fe:71:ab:64:
ab:46:9f:99:c4:3e:43:34:03:38:9d:d7:c6:e7:e2:
c8:93:a4:10:6a:c0:97:f6:09:ca:87:b6:9c:ae:31:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:63:23:33:58:6E:58:64:DE:1D:86:90:ED:CC:C5:03:A7:56:45
X509v3 Authority Key Identifier:
keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:89:1f:81:b6:85:00:fd:77:c1:57:42:e7:d6:f7:23:68:ea:
bb:bb:ff:b5:b4:d6:92:9c:6a:07:63:38:ce:78:bb:26:88:41:
fe:90:39:2e:93:eb:43:8b:2b:29:15:dc:0f:84:7b:38:52:f5:
5a:83:4e:34:6d:22:d2:82:58:d1:9f:b1:9f:ac:2a:fa:f7:5d:
2b:3a:c1:2c:b9:e1:aa:30:0d:98:3c:1c:43:96:ca:c7:fa:16:
06:6b:69:13:7d:a8:2b:6d:d3:38:19:07:c5:28:43:00:5b:87:
49:34:39:14:3d:2d:55:b5:98:1d:3a:42:4a:e5:a3:3a:07:9f:
57:ff:03:c6:92:e8:f2:42:d8:ea:6a:3a:3d:07:1d:7e:87:38:
03:e1:a2:c4:5d:19:2b:58:f7:57:ce:f0:7b:d3:e6:fc:bf:41:
ef:37:c5:23:11:70:13:cb:77:7a:49:af:94:b0:17:8f:e6:4a:
5b:43:98:e5:13:71:e2:a2:a4:97:f3:d1:23:34:fb:cc:25:57:
52:b6:2d:18:ce:99:26:6e:f4:b6:5f:33:e2:df:39:eb:d5:8f:
cf:12:38:b8:a0:3c:2f:52:d6:55:71:0b:4b:56:65:86:e6:92:
a2:d8:c4:39:13:3f:ae:87:72:3b:fa:d7:61:94:39:1c:9b:ec:
fe:a9:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:45 2025 by rpki-client