This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier: KTroUjZsltz/9upJidi8sB+5X/EsdgemwOJkZxCWCvo=
Subject key identifier: 89:D9:73:E8:16:E8:CA:A2:FC:9D:EE:31:E9:ED:72:D1:E8:DD:D6:36
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 019B2BF82FFD1667C60E0646792825F8B089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number: 0D12
Signing time: Wed 17 Dec 2025 11:00:44 +0000
Manifest this update: Wed 17 Dec 2025 11:00:44 +0000
Manifest next update: Thu 18 Dec 2025 11:00:44 +0000
Files and hashes: 1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=)
2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: 03XPEXJTv/mquKUxqPB4bBKR/YdLDbxkrbnDnK/ztGk=)
3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=)
6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:f8:2f:fd:16:67:c6:0e:06:46:79:28:25:f8:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Dec 17 11:00:44 2025 GMT
Not After : Dec 18 11:00:44 2025 GMT
Subject: CN=89d973e816e8caa2fc9dee31e9ed72d1e8ddd636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:06:f2:ff:ed:63:45:e2:5e:b2:d8:75:a6:
ec:2c:28:55:18:7d:86:a1:ff:47:ef:6c:55:6b:9a:
0f:33:8e:85:fa:36:75:0b:cb:03:2e:9e:40:dc:ee:
a0:4b:19:c4:97:4c:cc:d5:64:a3:bd:de:8f:8c:f8:
11:18:f7:34:03:a4:7a:b6:29:e7:a3:6b:f7:92:c5:
e5:0d:ae:74:95:2c:5f:58:1b:00:d7:a8:c1:d7:f2:
cd:82:5f:6a:0e:7f:7e:7d:5b:d3:fe:66:d1:af:bd:
4e:e0:79:28:1e:0d:d0:d2:30:3e:65:ed:c3:9f:a7:
4d:f0:60:b9:64:05:4e:2f:f9:4d:af:d7:d7:77:50:
c7:b2:60:8b:2a:51:f8:90:83:bf:b7:cc:9a:ad:9f:
af:53:7f:91:ff:a5:fb:77:59:e8:dc:c4:ad:94:9f:
28:12:80:6a:e5:84:51:6f:55:90:b2:83:f5:a8:83:
e4:9e:7a:65:0b:b2:58:bd:2a:96:e5:44:f6:86:8a:
1f:69:8d:29:b5:86:70:d9:d1:64:43:43:5d:9b:e7:
9a:8d:81:4f:92:50:7a:79:58:14:61:98:29:41:89:
9a:02:53:6e:67:3b:8c:4c:28:2c:e8:6c:87:84:3f:
98:bc:7c:2c:a2:8b:2b:03:2c:58:bd:9d:b5:80:da:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:73:E8:16:E8:CA:A2:FC:9D:EE:31:E9:ED:72:D1:E8:DD:D6:36
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:8d:3f:0a:04:cb:e2:45:57:98:b5:de:52:2e:1d:7b:c2:
e3:75:4b:1c:fc:f1:a2:e9:38:94:d9:a3:27:1b:c6:21:18:cf:
98:57:9b:c5:5b:67:0c:f7:a8:a5:e7:e3:07:a5:03:31:81:ea:
04:92:74:78:46:85:e5:cb:b2:6a:e2:32:ea:ce:90:cd:cb:c2:
95:54:7a:7c:33:99:3e:32:79:39:37:52:f4:3f:12:90:e5:84:
25:da:88:fb:7b:2c:ea:6a:cd:63:7d:51:5a:6f:37:70:a0:33:
09:00:e1:18:77:2d:e8:86:5f:d8:98:23:18:9a:af:f8:e7:19:
1a:5f:b2:89:1a:f4:62:d0:c4:59:78:ab:71:5e:73:23:8a:a9:
32:b8:a2:72:e7:31:fc:0c:d1:63:2c:20:c0:f9:07:76:db:e5:
dd:da:ec:f0:7a:06:cf:0d:c2:5c:cd:be:0d:db:33:9b:7f:be:
9e:0b:94:a6:16:3e:97:48:28:a0:b7:cd:af:a9:e2:9c:6f:70:
a3:32:ef:db:68:cc:36:19:31:e6:e7:95:6b:7f:15:39:b5:e8:
d9:2e:c1:0d:d3:3a:89:00:fc:8d:32:b0:41:e4:51:e5:00:25:
97:6a:62:45:5b:58:2b:98:dc:2b:b7:aa:9d:d5:85:18:ec:38:
67:12:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:38:13 2025 by rpki-client