This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier: kPpw5Hh5HvJPACl040LjKWE3/+lpHnOv5tMuVwEjJVk=
Subject key identifier: 31:AC:0D:75:65:F9:7F:3C:6F:47:F7:25:B7:41:0C:A6:EA:3B:A8:4D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019AF19AA083E994C788A9E657334166619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number: 1976
Signing time: Sat 06 Dec 2025 03:00:33 +0000
Manifest this update: Sat 06 Dec 2025 03:00:33 +0000
Manifest next update: Sun 07 Dec 2025 03:00:33 +0000
Files and hashes: 1: 1-4n255q-GmhvWguY8knOSWxwWOE.roa (hash: SpMPf2vIKuvnbl4s5E51poi38FquEwM10w09zg2yecI=)
2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
6: DiojNNQH08E8VT8z31hy5NWp8N0.roa (hash: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=)
7: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
8: E628OGnKWXsWV6h8__lmYOw0VuQ.roa (hash: 0Qyyg2JckxtcQsRmrYcG0CbwVr4IoeBXt3vaGkjRMF4=)
9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
10: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
11: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: aiV2//h7KefVJDh/4TTjMYUnEwXt1TawKAya+lRH7qA=)
13: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
14: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
15: R2DhxkhJKynVq23HdTKG0z5fWJU.roa (hash: nG6WCjylMd8h79NDHMZUFgdfvCePLcuKEsqpEgLBkv4=)
16: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
17: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
18: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
19: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
20: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=)
21: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=)
22: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
23: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=)
24: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=)
25: jmsaJLgFgv0pE5HAtZEW2L4T9Rs.roa (hash: V0bEaj3C7tdAL5hfru57w0KCpkUkdH5e60oMAhwg6r4=)
26: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
27: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=)
28: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=)
29: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=)
30: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=)
31: vvf88GgWIXzkz27KzReib56wTnw.roa (hash: mexIXafPODNJ/VdJ+Am5z5IEHLOmDpbTiyu+ASbiaXg=)
32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:a0:83:e9:94:c7:88:a9:e6:57:33:41:66:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 6 03:00:33 2025 GMT
Not After : Dec 7 03:00:33 2025 GMT
Subject: CN=31ac0d7565f97f3c6f47f725b7410ca6ea3ba84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:f6:27:e0:f0:89:fb:5e:27:1f:6b:21:14:
4b:ad:8f:cb:da:53:00:2a:d5:42:47:26:0d:15:de:
93:67:1f:eb:af:16:d8:ae:9c:8e:87:83:bf:68:d7:
18:34:d5:69:ca:1a:3b:cb:e2:18:0b:7e:9e:fd:90:
d2:b5:32:b7:f8:fc:32:99:da:3b:0a:cf:61:36:18:
2d:5c:15:c6:08:a2:64:71:ce:7c:1f:84:50:e4:55:
9b:29:2e:05:17:e3:a9:6e:84:66:dc:ea:5d:e6:81:
5d:41:a3:c0:98:3b:dc:ea:da:83:44:34:3a:db:c0:
a3:ac:50:78:c2:fa:9b:71:38:4d:f8:25:60:50:7b:
8b:01:db:aa:a6:36:28:02:21:72:95:64:b3:02:c7:
ae:c9:29:06:f9:52:f4:49:c3:07:93:29:3e:65:72:
b4:4d:56:e8:e6:c1:d2:e5:d5:5b:3f:a4:10:36:ce:
0b:6c:34:11:29:2a:34:ca:a0:55:1b:b9:5c:d3:1a:
67:74:8d:14:12:4b:8c:c4:96:e4:49:2c:60:e0:7d:
aa:42:a2:67:50:33:10:23:50:d3:95:ca:22:08:9b:
f2:c5:9d:4e:b7:1e:5c:46:32:05:6a:9c:bf:7b:de:
04:f7:e1:74:40:cd:c7:4e:7a:1a:b3:e9:ca:af:76:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:0D:75:65:F9:7F:3C:6F:47:F7:25:B7:41:0C:A6:EA:3B:A8:4D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:cd:17:f0:1b:8d:19:b9:84:bf:5b:3e:60:b7:03:53:f9:
c9:9b:0d:42:dc:c4:e3:9f:5e:29:21:b9:1d:08:1d:01:3e:0f:
de:de:d5:bd:a6:e2:a1:ff:61:a8:51:54:d2:59:60:ce:9f:b3:
19:d0:f2:94:56:54:08:03:2d:66:32:cd:66:a0:39:48:5c:0c:
be:ee:0f:64:ee:cf:20:07:0f:ed:86:20:70:7c:36:3c:b2:a8:
a9:74:8c:10:98:9e:8d:d5:10:c5:cf:16:0a:0c:1c:67:fe:3e:
6b:25:7d:11:cd:44:43:ae:d8:c5:8d:92:10:ea:f0:9d:56:d0:
37:69:29:08:39:43:14:65:13:76:20:19:18:7f:65:2d:da:d0:
a8:85:10:50:3b:e6:2e:cc:0b:0a:24:73:90:2f:66:42:e8:7b:
65:eb:31:00:42:b3:9a:5c:3e:f7:51:c4:a9:05:72:ba:81:89:
02:43:9b:51:ad:0c:b0:ad:82:4a:be:0a:c7:49:59:c1:b0:ee:
af:97:89:8a:54:cd:91:6e:47:27:24:ae:84:cf:e6:fa:d9:0a:
47:dc:76:7a:6f:29:05:fd:b7:13:cf:70:38:26:e5:27:b2:b1:
32:27:29:54:fa:e7:5f:23:e6:88:ec:72:82:5b:47:37:08:e4:
65:a2:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:20 2025 by rpki-client