This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: 4m9E+57NTwRHLgHuw504sG2VFQ5l0JX43tthiOAlQ7c=
Subject key identifier: 4C:35:A1:D8:79:24:7D:69:DC:67:94:2C:CC:FD:40:B5:3E:EA:C6:8C
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019AF0513EE21AAA6177F3DCCF00656E2A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0B65
Signing time: Fri 05 Dec 2025 21:00:47 +0000
Manifest this update: Fri 05 Dec 2025 21:00:47 +0000
Manifest next update: Sat 06 Dec 2025 21:00:47 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: 7BPIoGx9wOm4jO4a2Z6GzhGUJPH3asaEXawv9KnMQHU=)
2: V1kohq7P4ydapDB7EU11fRLeRUg.roa (hash: TxOniEW/xxFZY5KmO7UC+sdZGH0WDC/W/Livh3vHUfw=)
3: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:51:3e:e2:1a:aa:61:77:f3:dc:cf:00:65:6e:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Dec 5 21:00:47 2025 GMT
Not After : Dec 6 21:00:47 2025 GMT
Subject: CN=4c35a1d879247d69dc67942cccfd40b53eeac68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:84:5c:f3:08:e4:63:74:10:a9:8d:a0:6e:
2f:7f:a6:00:b5:a2:24:28:30:93:83:4e:d9:d7:75:
75:04:b8:e6:60:dd:ab:18:79:8d:68:eb:a3:1d:24:
e6:46:f1:f5:96:aa:d8:d0:71:3c:a5:c1:5b:4c:a4:
4a:b7:89:a6:77:ec:ab:cd:f9:6c:72:9f:61:49:87:
3e:e9:8a:3d:be:f4:07:34:3e:4b:e6:a2:ff:b0:36:
0e:52:29:57:39:66:73:54:20:9f:db:4a:e0:3d:73:
11:e0:4b:33:e7:a5:4a:97:f7:9d:0b:42:96:a4:12:
88:c0:a6:2c:ca:a4:2a:f7:c7:62:69:66:5e:b5:7e:
e5:51:3c:61:c2:02:49:71:bd:88:ba:eb:7d:f7:98:
d6:0d:f3:39:49:20:5f:69:1d:9f:6c:ca:3d:77:59:
c0:9c:53:a3:d4:33:06:52:a5:ba:cf:bc:c8:b9:4c:
d8:de:1c:77:b3:0c:ce:d1:c6:f2:62:bc:90:73:3b:
09:b4:ba:d7:e0:b7:ff:76:4a:b4:f6:e9:dd:36:97:
1a:cc:47:1a:42:75:98:3b:55:4c:98:2d:13:4e:1b:
4f:b2:42:00:8b:b1:1c:3a:b9:bc:69:72:6e:e6:8d:
8b:f1:56:ac:66:4c:57:d7:55:79:ae:d4:2b:ee:cb:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:A1:D8:79:24:7D:69:DC:67:94:2C:CC:FD:40:B5:3E:EA:C6:8C
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:d4:0c:a1:af:5f:98:4f:56:65:b3:53:d6:4e:2d:0f:7d:
4a:59:93:2c:b7:67:0f:3f:0f:27:54:57:0f:a9:19:97:c8:a7:
1c:e6:b3:0f:8c:96:34:0a:cd:38:1d:a3:ec:b6:2b:e6:56:91:
3f:ef:83:f8:92:9e:79:a2:87:4e:9f:aa:8d:f5:e7:c6:0e:18:
ae:af:b4:9c:e7:d0:6c:44:dc:53:24:6b:d5:e0:a3:1b:ff:31:
a8:6b:7c:26:25:27:3a:04:7d:d9:c6:1d:d1:3e:c6:3b:d1:b5:
06:33:ad:46:ba:2f:ad:ad:d2:33:65:c3:38:dd:4f:10:0a:25:
f0:8b:02:c9:5e:ae:db:0a:07:fc:5c:7a:31:ed:fc:09:0c:01:
e1:21:a3:f8:92:63:d8:e8:2f:1f:13:6c:e7:e7:32:df:62:85:
d2:bd:af:04:75:94:0d:39:a6:38:5c:60:2b:71:28:a2:c6:fe:
65:b5:57:9d:a1:ab:31:ea:ab:4f:41:bb:d5:ba:25:cd:b4:f3:
e7:9a:d4:43:b7:e4:1c:7a:43:40:ea:f6:01:ff:b7:9a:20:67:
cf:3b:8c:0e:27:d8:88:6e:ae:1a:4e:da:3f:df:b6:10:25:9b:
5e:2c:e6:fd:8b:4b:26:ff:16:f9:e3:ba:ff:62:ba:66:bb:a7:
28:e4:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:38 2025 by rpki-client