This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: snb1VghfUnrhpcm9M1blDUUxRoHT7ZI3mH5XflJPiug=
Subject key identifier: 07:34:B4:47:4A:17:30:B0:F9:F9:58:78:31:8C:CA:B1:7E:D9:ED:F7
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 019AF2097B9D41B90113E70A05F62E90E01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 05:01:38 +0000
Manifest this update: Sat 06 Dec 2025 05:01:38 +0000
Manifest next update: Sun 07 Dec 2025 05:01:38 +0000
Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: UQRsuaRYm+tpvlFFpoqbF2JFjA4lk6yBA7ohHRKUqiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:7b:9d:41:b9:01:13:e7:0a:05:f6:2e:90:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Dec 6 05:01:38 2025 GMT
Not After : Dec 7 05:01:38 2025 GMT
Subject: CN=0734b4474a1730b0f9f95878318ccab17ed9edf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:0e:74:48:3c:33:5b:da:e0:f7:af:4d:c9:
ea:12:db:80:52:8c:32:ed:85:a9:1d:9e:ed:c1:b5:
23:66:f3:fc:43:89:67:ab:d7:9c:e2:ac:a3:d0:af:
df:6b:f8:29:75:3f:02:9c:d4:76:64:12:e3:52:43:
26:e6:a0:33:d4:d3:a8:64:e5:37:18:c6:7c:48:15:
21:b8:53:19:aa:a3:d8:26:fd:80:aa:3c:39:90:95:
e4:91:0a:0e:8e:6f:54:d8:db:de:68:f1:24:1f:9a:
40:5f:6b:c7:d5:6a:b2:6c:d5:e6:38:e0:76:0b:45:
d4:57:95:32:99:77:ce:7f:17:cf:a0:93:ef:52:01:
bd:a3:3a:15:17:b3:3e:d8:d3:b9:76:4c:8f:b0:31:
00:d7:bd:ed:39:1b:66:9d:d1:d1:1b:17:6c:06:8f:
6a:8e:e7:29:ff:64:0d:ad:84:69:c6:8f:a0:bb:b6:
59:fe:b0:9f:1b:af:a5:0e:b6:f8:17:ff:0a:05:d9:
b5:4c:d2:44:73:78:c0:79:0b:d5:e2:13:f0:41:97:
ca:4c:ab:fb:ae:05:f2:62:4d:d8:8e:98:6f:9c:cc:
06:0a:e4:a9:de:05:13:0e:2a:57:1e:71:dc:ef:5a:
26:19:d6:c5:8d:b1:66:a3:de:aa:6a:f3:0d:f2:55:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:B4:47:4A:17:30:B0:F9:F9:58:78:31:8C:CA:B1:7E:D9:ED:F7
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:d0:9a:34:a2:11:b1:30:d5:dc:d9:92:5b:50:b3:54:3a:
26:64:35:66:3b:f9:4a:68:3b:a5:91:39:9b:b6:ec:ae:18:25:
ab:ae:54:20:d3:df:7e:da:c8:96:0b:b7:2d:15:f5:66:30:a0:
a7:b7:3e:7f:ae:02:a2:eb:66:35:ec:bb:11:98:6c:bd:77:9c:
5f:0e:14:8b:0d:06:f7:d0:2d:f4:14:2a:93:df:5c:a2:e7:e5:
24:93:92:fd:4e:1c:ab:87:7c:85:99:55:40:24:dd:a8:cb:26:
28:1e:43:57:ba:af:7e:db:fc:d9:7b:dd:ae:e1:b3:f3:8d:52:
6a:8e:3f:9e:0c:d8:47:51:4a:18:ce:d7:06:50:54:a7:b9:77:
b8:8c:a2:70:bf:94:e9:4e:da:fd:55:93:bc:d9:c3:bd:be:4f:
0e:59:ff:03:37:6d:d9:47:93:fd:ca:4e:b0:b5:d7:73:b6:95:
58:9e:59:57:2b:cf:32:9e:67:7e:0d:c8:be:20:08:bc:fa:7d:
31:a2:50:48:30:cf:67:b7:e0:ca:e9:b2:cf:0f:7f:a2:ec:a9:
72:d2:3d:a7:8d:8f:31:c1:ac:11:c5:c9:d6:eb:b1:91:87:65:
16:86:d8:49:e7:da:4b:7c:de:66:c1:e5:ce:30:b6:02:b5:b5:
27:06:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:10:06 2025 by rpki-client