This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: tOLt+y+apcC4CzFkvuq8KBGdmJH07yCdUOpcnbF9tzE=
Subject key identifier: E7:06:0A:6C:1E:E2:67:E1:A7:5C:C6:05:8A:6D:D4:A9:62:2C:6C:2E
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019AF31C8F467156945DF2F0077C6B5FAE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0C85
Signing time: Sat 06 Dec 2025 10:02:06 +0000
Manifest this update: Sat 06 Dec 2025 10:02:06 +0000
Manifest next update: Sun 07 Dec 2025 10:02:06 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: BkpkkM9ciT7F0l/Wg+Tvwo8C4emTKmlp/dvIpdNPYX4=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:8f:46:71:56:94:5d:f2:f0:07:7c:6b:5f:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Dec 6 10:02:06 2025 GMT
Not After : Dec 7 10:02:06 2025 GMT
Subject: CN=e7060a6c1ee267e1a75cc6058a6dd4a9622c6c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:f7:a6:89:85:65:3c:53:9c:41:84:18:33:
5e:c2:44:4d:a3:26:03:fd:a6:9c:30:c9:54:a0:2f:
6b:0f:b7:6c:76:7f:6e:ba:35:7c:cb:25:a0:7b:a3:
85:aa:14:43:cd:15:d7:74:12:5b:3c:ff:d7:ae:10:
af:53:65:78:97:63:7a:f2:c3:2a:6b:50:0a:ff:29:
b2:8a:5f:c1:39:5b:98:0c:e9:5d:1e:04:1c:24:2d:
1a:8d:d3:27:65:89:d0:42:4c:99:1e:47:76:4d:74:
0c:c4:81:48:2e:69:fc:2d:02:a1:d6:41:73:eb:41:
72:39:9a:15:2f:6b:4a:8d:01:1c:38:ba:ba:b3:8d:
9e:3e:af:91:af:8a:b5:20:6d:ae:f0:3f:1d:76:6f:
e4:25:04:c9:fb:fc:a4:f0:4a:aa:c8:80:07:4d:68:
9c:de:f1:a5:4f:f6:4d:f7:36:97:68:2c:9c:9d:6b:
9e:a2:42:dd:38:2b:11:7f:d9:19:ab:68:3d:ce:ea:
ca:28:52:63:0b:c6:44:be:d1:79:66:11:f4:9f:17:
09:28:35:95:13:9d:be:de:d3:20:af:61:fe:9f:6c:
11:c0:70:a4:9f:61:9c:2b:7d:b7:a2:38:d0:b4:f1:
1e:d2:93:82:f4:19:9d:93:26:e9:3c:ba:bf:3c:80:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:0A:6C:1E:E2:67:E1:A7:5C:C6:05:8A:6D:D4:A9:62:2C:6C:2E
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:d7:ce:c9:08:48:34:c9:66:43:f9:f3:70:6b:10:31:31:
2f:cd:3c:57:dd:62:58:b2:a9:8e:ec:32:5e:cc:03:5c:d5:e5:
32:a0:d7:a8:53:fd:73:10:1b:94:f1:a8:48:c2:d7:a8:00:c9:
aa:7c:4a:f5:2c:94:6b:92:f7:94:80:a9:fd:32:3f:bf:f7:8f:
f9:4b:dd:cd:d6:5b:a8:84:f0:ee:92:73:c6:a6:22:30:0b:22:
70:ae:5d:88:5f:59:f8:59:41:41:b1:c8:72:1d:54:1a:8b:c7:
14:35:c5:8e:38:27:2d:53:68:91:8d:cd:57:af:98:0d:6e:a9:
e0:29:6e:fd:1e:1b:e3:ea:62:e5:14:24:a1:ad:c2:f6:58:32:
66:d9:d2:3c:6e:85:c7:2b:9a:8d:47:35:57:e8:a1:93:d7:41:
3b:2f:51:3d:58:dc:90:46:2d:8d:61:c7:51:1f:12:8c:c1:f1:
ef:97:49:36:2d:be:5d:ce:af:5c:ce:63:52:7d:47:2b:d7:9b:
67:4a:30:9e:bc:bf:66:de:aa:1c:7f:16:5d:d5:85:12:97:e6:
74:93:e3:2c:16:63:61:e6:d3:6d:a2:42:3b:51:35:e7:78:50:
d2:9c:0e:52:d9:61:e7:b6:44:ac:40:2d:09:ed:3a:95:a5:0b:
94:8d:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:58 2025 by rpki-client