This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: w++hB65Y/Auk9mGKTEUJdGGOLKnPqGxsRbaU4rq7PRE=
Subject key identifier: C9:F5:6E:14:18:2D:C2:45:07:70:94:F4:D8:76:3B:09:6E:D5:A3:99
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019AF0BF7AD68A8E616F59313ABB095FF5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0380
Signing time: Fri 05 Dec 2025 23:01:11 +0000
Manifest this update: Fri 05 Dec 2025 23:01:11 +0000
Manifest next update: Sat 06 Dec 2025 23:01:11 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: u6e/VebGJGSNgIA21MP28MEYPYBd0WPshuDNxbl/Ofw=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:7a:d6:8a:8e:61:6f:59:31:3a:bb:09:5f:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Dec 5 23:01:11 2025 GMT
Not After : Dec 6 23:01:11 2025 GMT
Subject: CN=c9f56e14182dc245077094f4d8763b096ed5a399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:7c:30:07:11:1a:25:f7:0f:02:ab:96:d3:
5b:fb:de:cf:84:6b:96:79:93:9c:4f:e5:36:79:46:
c1:65:76:11:34:f6:c9:25:27:90:a1:81:ac:86:24:
42:d8:ee:30:46:65:15:ac:bc:77:d5:97:29:c3:45:
c6:bb:92:63:84:89:6a:6c:b5:c5:08:9f:8c:59:d0:
69:bb:2f:f2:90:f4:94:b2:5e:7b:72:03:a1:f2:94:
8d:e5:04:8f:66:a2:21:6b:e7:e7:a8:f8:f2:1b:7d:
d2:44:ae:69:8f:98:13:31:b7:da:f1:cb:9e:e5:aa:
bf:b5:d5:8c:98:4e:a5:6e:1b:6f:f3:72:0f:36:fa:
ff:2c:a6:2d:b2:2d:5a:f1:2f:bd:57:c3:51:9e:ea:
0e:76:6e:3c:25:ad:2f:9a:ff:a2:9d:23:88:c0:75:
d2:69:78:0f:a2:de:90:9a:6a:95:1b:ac:a7:74:50:
9a:fe:f5:b5:fe:ae:8e:97:76:38:2d:59:dd:71:37:
24:d8:8d:87:24:be:b4:67:ab:d4:22:c9:2d:ac:f2:
d5:83:93:f9:84:69:8e:45:9c:0b:64:17:d5:74:ad:
0d:c6:7d:aa:fe:03:a7:3a:02:cb:bd:3e:ef:e7:1f:
c0:fc:b1:2d:38:9c:4f:15:ce:d1:8c:6d:47:50:f6:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:6E:14:18:2D:C2:45:07:70:94:F4:D8:76:3B:09:6E:D5:A3:99
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:45:f8:ab:0c:aa:2a:fd:ea:03:f6:ee:ac:a9:71:d1:45:86:
99:f7:a2:8f:0d:78:cf:c7:db:d0:e3:cb:1d:8f:55:2f:36:51:
57:a0:28:b1:8a:09:d5:32:fb:70:75:a5:be:48:c9:b5:f7:b7:
d4:fd:84:59:1a:e7:0d:14:d9:30:82:f2:22:52:22:a6:53:f8:
ca:0a:ea:ba:3c:94:59:47:43:6e:ef:93:7e:7d:fe:da:32:da:
27:af:b1:af:b3:6b:a0:8f:09:2c:32:61:95:33:a1:5f:cd:d8:
8e:c1:c5:22:a6:82:6e:e9:89:d1:21:6b:54:a5:71:d6:13:1d:
a8:ed:47:fd:0c:00:32:e0:71:24:4a:89:9a:ac:2b:90:75:ad:
6b:46:3a:31:d6:41:27:40:2d:26:e6:fa:d0:e1:98:7c:d6:ce:
30:a2:ab:57:e1:82:a3:55:03:8f:95:9e:a2:16:4b:85:69:25:
ca:78:f4:0c:f3:5c:8d:0e:99:3d:72:1d:3f:de:fd:61:9e:3b:
2e:8d:ae:01:86:dc:5d:37:2a:4f:e6:7c:1e:c5:d7:13:0c:ea:
78:b1:ad:2f:04:fc:04:53:7b:2c:69:e1:af:76:d2:b8:5d:2f:
37:10:2e:eb:02:5e:5f:45:48:2d:76:be:fc:a7:8f:9b:5a:8f:
4c:ff:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:24:54 2025 by rpki-client