This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: 5PcdOkb/A7z9PTqjTmFnXLjQlJBqEQuGbHmIDdiydu4=
Subject key identifier: 93:D6:56:BD:C9:00:7B:00:53:62:B3:95:FE:86:A2:4A:39:E3:8C:81
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019AF0F5EE585BC1A077F665C4CEAF8AD9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0386
Signing time: Sat 06 Dec 2025 00:00:40 +0000
Manifest this update: Sat 06 Dec 2025 00:00:40 +0000
Manifest next update: Sun 07 Dec 2025 00:00:40 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: cLMfms1sgjnE17H0nLcpxYgxus5vpX1ABe6gCKN6XRU=)
2: nQ2QOCXNiBhA_oIbltotIC2riD4.roa (hash: 1MmZzBOdKL/dvmTjwcqKsATX+RAPJW/TTlWipI0mLW4=)
3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:f5:ee:58:5b:c1:a0:77:f6:65:c4:ce:af:8a:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Dec 6 00:00:40 2025 GMT
Not After : Dec 7 00:00:40 2025 GMT
Subject: CN=93d656bdc9007b005362b395fe86a24a39e38c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:04:1f:c9:12:01:50:e6:96:42:a7:89:da:
1c:4c:56:e7:fd:0a:d3:db:de:fc:62:93:08:00:5d:
c3:d9:8b:9e:74:4a:f8:5b:68:6d:0c:8c:55:3e:f7:
f9:44:65:0c:95:2f:9a:a8:05:3e:2f:88:61:cb:35:
a7:cd:7e:00:da:21:0d:44:a1:e8:9d:15:13:85:a7:
d2:40:6e:b5:c3:c4:4f:b3:7e:a8:c1:f6:31:d9:50:
c4:38:c5:3d:54:44:d1:b4:a6:32:1f:7d:35:a3:13:
73:34:ad:41:b9:79:a1:64:16:b7:6c:bf:2a:a6:76:
26:9a:b9:9e:2b:1e:0a:6b:77:a7:78:42:ef:ee:74:
dd:96:84:af:00:15:0f:93:f7:0c:c7:cc:d0:c8:16:
ba:2e:3a:f9:0a:f2:ef:7a:31:56:f9:30:bf:eb:77:
c9:2f:3b:db:4a:ce:f0:dc:c8:3d:c5:c9:b5:30:f2:
1d:2d:c7:2d:90:97:48:7b:7b:97:ec:84:ac:29:31:
91:cb:57:cc:74:9a:09:bc:8e:2e:53:b8:ee:da:8e:
1b:c4:b2:99:7e:e2:f8:7b:ec:14:17:04:84:58:e6:
fc:95:6c:8e:b5:47:f0:8c:2a:1a:5f:17:56:56:e4:
0b:d1:2a:c9:e0:80:43:51:6d:15:89:21:33:ef:60:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:56:BD:C9:00:7B:00:53:62:B3:95:FE:86:A2:4A:39:E3:8C:81
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:08:b0:97:be:f0:07:cc:41:74:ef:22:45:ac:16:56:5c:
e5:a8:91:b3:5f:13:9e:f7:2b:82:7e:2d:f3:34:39:62:e6:24:
42:44:6c:6b:47:ee:88:41:b6:fa:5a:56:7b:1a:bd:c8:fd:81:
f9:0f:eb:c6:d0:0f:9d:e5:a3:c8:2c:62:37:60:c1:cd:c9:16:
89:02:38:63:0d:16:53:d4:65:e9:d3:76:20:c7:4f:7f:e1:c1:
80:c4:b8:25:45:67:48:bb:8f:c6:8c:6f:d8:3c:ff:3c:f3:2f:
ac:a4:3d:e9:77:f0:7c:2f:a8:ec:78:dd:42:78:c1:e7:88:d0:
65:f1:bf:37:35:76:1d:86:fe:2d:a9:95:57:4b:7e:34:8d:ff:
0c:83:11:5e:cc:90:c2:4e:38:d5:f6:9b:f1:1d:a9:c7:e6:4d:
47:2a:05:7c:f3:4f:40:80:0f:b2:d4:49:25:88:d2:46:77:38:
60:21:bb:03:60:6c:b6:00:95:49:37:e0:16:8b:d8:ef:71:20:
84:4f:0d:96:a3:e2:4e:97:9c:ea:c4:cf:0b:2b:83:ab:51:a5:
91:48:ea:2f:75:1e:16:ea:07:41:71:1f:7c:60:e8:f0:f3:87:
ed:e7:c1:20:44:08:2e:3d:a9:05:97:3b:a2:25:41:32:43:a8:
c2:7d:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:32:58 2025 by rpki-client