This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json)
Hash identifier: yYK3OeN5SQTEDuPPCsu47+ORkdCoI2+fEHRKWoZ0ZDo=
Subject key identifier: 2B:6E:46:57:FE:6C:49:24:E8:A8:0B:92:1F:3F:3D:3B:C8:65:FD:64
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 019AF2096A7B8B53F193A7AD4AEE6699CF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
Manifest number: 185F
Signing time: Sat 06 Dec 2025 05:01:34 +0000
Manifest this update: Sat 06 Dec 2025 05:01:34 +0000
Manifest next update: Sun 07 Dec 2025 05:01:34 +0000
Files and hashes: 1: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: g/6nVeGH09t/p+DBHAm3p3e7FqgPAeY4sUUP1MT7ZrQ=)
2: BY6vuao8dzcdWvFAFv0TrK8gbcs.roa (hash: ZDN7wXgq4/TF65FlyVO+h6CqqGxfq850Jit0suO59Nc=)
3: Gy4BQkIL8-jo1JkeIH41QUjBDjM.roa (hash: GpUKXk0u0UsVOL/OxmPGoTdxb+oJOueuidELp/hZqyI=)
4: Svvhgo8X1drpMq_QokkBFa4W80w.roa (hash: eEM6GVW64ZPHTJr6mZ27nOJM8iax+cOishqtH69OQFE=)
5: USyW0O_6fcBP2bF0PoHV0RL6-Y8.roa (hash: rYcvR45gztdgTjrFLAUTrj+3T6dDm1wWFyZUivL/lkQ=)
6: UqESFWwPTzjbApEAfUlqEqe0RQE.roa (hash: s8ahaYu2umakIkOHunLEsrzEdAIsc7vrgdaPFAJX/B0=)
7: UwuhHIRc9qSfEX6XGunAr85dyEA.roa (hash: v6KOr1rmHDt+GxwNeTG+w6jxSzGnr+bSVua9Q4OO8C0=)
8: VkkvGMtenz96Ubj3KDzXyym1LzY.roa (hash: E/GDo41oktFV73vvuiDk3fNXk8LkaX2ghEwTcizgkaw=)
9: gUrUyKlaxz6aQIR9owp7HgtROdE.roa (hash: Sn2ZbhkGVUO1p5ik4KeZ3uzqjHGzkxr7fWeO48lFYvE=)
10: kLCDMTUTRbJeJajr_KP2p663xqk.roa (hash: Cd9LBaXNUzFq1myVM5COYVtjKiIjTzwaQ7rIDyhpbzE=)
11: mS1g5aNaOIe32m5_FgfjTc6VbP4.roa (hash: DRqrjZnRKpeQWBmj82tLSsN99MhvkwnNbbxykbvBnVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:6a:7b:8b:53:f1:93:a7:ad:4a:ee:66:99:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Dec 6 05:01:34 2025 GMT
Not After : Dec 7 05:01:34 2025 GMT
Subject: CN=2b6e4657fe6c4924e8a80b921f3f3d3bc865fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:14:3a:4d:69:21:e5:88:57:17:43:b9:70:
36:24:62:a3:71:fc:37:49:7f:04:aa:9f:ea:09:e7:
ba:d0:b6:b5:1a:f5:6e:50:6f:20:42:53:93:37:45:
3f:68:e9:d6:81:b3:5e:3e:cf:36:8a:3f:7b:7d:d5:
20:5b:d1:ac:08:25:7f:f8:dc:57:34:e0:cd:9e:ad:
50:0f:ad:bb:9e:f8:58:78:b8:5f:e9:be:f9:37:f7:
0e:dc:8d:60:7b:d6:fe:c7:12:76:67:2b:f8:ef:14:
f4:e2:af:33:72:9f:b9:ad:9b:49:bc:be:53:c7:15:
f5:fb:1a:6a:dd:25:9f:d7:85:46:c0:3c:15:bd:91:
94:b2:4b:cd:fc:4b:71:b3:74:1c:f9:91:82:69:b9:
b3:c5:64:23:57:e7:22:36:90:cb:86:55:e9:1d:a5:
6e:1f:e5:fd:cf:08:a1:8c:9f:be:66:e6:55:77:0c:
73:53:a1:b1:8a:1e:1d:7b:65:98:c6:88:c9:9b:d3:
2b:36:ae:1b:43:52:aa:56:49:5a:88:fe:0c:f8:78:
49:ad:59:85:fc:e9:dc:57:5c:29:c3:ff:c4:04:18:
22:fd:f1:39:79:bd:ea:b0:4a:8d:8e:6e:e6:b5:5b:
d1:52:51:1c:68:e9:2c:ad:8d:a8:cb:29:6c:83:41:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:46:57:FE:6C:49:24:E8:A8:0B:92:1F:3F:3D:3B:C8:65:FD:64
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:4e:03:a8:73:24:6a:5e:80:a6:01:91:1e:6c:07:f1:54:
88:fb:f8:a5:ac:6f:74:72:78:e9:ba:61:6d:46:e5:5b:b0:75:
a8:08:21:69:9a:56:cd:a8:6b:cc:e2:7e:e8:a3:ab:bc:68:31:
97:83:d0:62:39:ed:7b:d5:9b:88:23:b4:6e:b5:b9:84:0f:0a:
a0:16:94:32:50:4c:be:14:c3:72:5d:7c:f2:a3:3e:4b:9a:8a:
06:b6:fa:9a:87:e0:dd:b8:de:d8:30:ef:6d:6e:3a:f5:ee:d4:
c0:a2:01:2c:df:bc:04:8a:e1:03:3a:60:9b:b5:07:e3:48:47:
da:af:dd:a5:7b:b5:60:50:c2:1d:d5:4d:d0:11:c9:a1:07:39:
77:0e:8b:df:88:77:90:25:87:4d:f4:5e:58:67:3b:56:0b:40:
6a:a8:46:72:41:75:96:e5:78:a5:c0:35:d3:e3:9b:d4:4a:33:
3c:cc:50:9f:23:ce:e9:10:e0:c6:84:a6:96:95:32:ee:9c:1b:
5c:7e:a9:fb:a2:f6:7d:59:be:4b:0b:94:fe:df:e0:64:eb:c7:
ab:9b:47:c9:d1:38:20:90:26:6e:7b:87:4d:f1:ae:cf:21:fa:
aa:c3:fc:73:12:f5:c0:71:f0:69:0f:39:63:86:a1:d0:2c:ec:
96:38:a1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCWp7i1Pxk6etSu5mmc8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD
EygyYjZlNDY1N2ZlNmM0OTI0ZThhODBiOTIxZjNmM2QzYmM4NjVmZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgkUOk1pIeWIVxdDuXA2JGKjcfw3
SX8Eqp/qCee60La1GvVuUG8gQlOTN0U/aOnWgbNePs82ij97fdUgW9GsCCV/+NxX
NODNnq1QD627nvhYeLhf6b75N/cO3I1ge9b+xxJ2Zyv47xT04q8zcp+5rZtJvL5T
xxX1+xpq3SWf14VGwDwVvZGUskvN/Etxs3Qc+ZGCabmzxWQjV+ciNpDLhlXpHaVu
H+X9zwihjJ++ZuZVdwxzU6Gxih4de2WYxojJm9MrNq4bQ1KqVklaiP4M+HhJrVmF
/OncV1wpw//EBBgi/fE5eb3qsEqNjm7mtVvRUlEcaOksrY2oyylsg0GczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtuRlf+bEkk6KgLkh8/PTvIZf1kMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwclOA6hz
JGpegKYBkR5sB/FUiPv4paxvdHJ46bphbUblW7B1qAghaZpWzahrzOJ+6KOrvGgx
l4PQYjnte9WbiCO0brW5hA8KoBaUMlBMvhTDcl188qM+S5qKBrb6mofg3bje2DDv
bW469e7UwKIBLN+8BIrhAzpgm7UH40hH2q/dpXu1YFDCHdVN0BHJoQc5dw6L34h3
kCWHTfReWGc7VgtAaqhGckF1luV4pcA10+Ob1EozPMxQnyPO6RDgxoSmlpUy7pwb
XH6p+6L2fVm+SwuU/t/gZOvHq5tHydE4IJAmbnuHTfGuzyH6qsP8cxL1wHHwaQ85
Y4ah0CzsljihZg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:09 2025 by rpki-client