This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: c0PlTZOAo/Ol6yiVK1getTblYsmySEsSsN0qwVkt1kM=
Subject key identifier: 6E:2B:BB:D8:CE:E8:58:8B:AF:72:D8:AE:ED:49:9F:75:A1:87:49:F1
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019AF12D5ED347F5AA2B765E1FBF59478D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 01:01:13 +0000
Manifest this update: Sat 06 Dec 2025 01:01:13 +0000
Manifest next update: Sun 07 Dec 2025 01:01:13 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: GgHDKjalQjq3U9wGC/kTwaLLMqxVrMIAmjBzUmELsl0=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
3: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:5e:d3:47:f5:aa:2b:76:5e:1f:bf:59:47:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Dec 6 01:01:13 2025 GMT
Not After : Dec 7 01:01:13 2025 GMT
Subject: CN=6e2bbbd8cee8588baf72d8aeed499f75a18749f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:4f:f5:57:37:ae:e0:e1:dd:2b:93:ff:33:
bd:4f:f6:52:f3:48:84:fa:a9:5c:4e:e8:59:0d:76:
c0:13:65:60:8c:5f:be:15:d7:a4:4e:03:1a:9f:c4:
16:f8:22:77:f7:a2:16:e8:b0:6c:04:1c:36:25:7e:
89:93:ef:c0:21:d2:ca:09:39:41:1f:c5:a4:f1:4c:
d0:5c:40:1e:24:d7:c9:08:32:84:15:2e:a1:90:26:
4c:81:d6:78:71:e9:ed:31:6e:42:25:e5:83:c1:88:
a0:67:c0:6f:bb:c3:c8:bc:f4:08:d4:c0:98:89:79:
72:73:b9:f8:59:37:5e:f1:0b:20:9a:48:c4:4d:52:
50:5d:76:4a:0b:4c:4a:dc:ec:b5:b2:81:5c:5e:d0:
d5:a8:7e:75:24:33:39:42:04:f7:b4:26:10:6a:c0:
24:02:70:51:cd:18:3a:29:71:4c:a6:4f:47:eb:5e:
b7:5a:f7:ff:4e:c7:d1:6c:3f:ae:ba:46:cf:f3:29:
f1:c6:0e:e6:36:a7:d8:12:69:74:8e:39:2f:e7:05:
71:85:b1:2e:1e:c2:be:5e:27:c8:38:bc:f8:55:c4:
c4:6a:f8:b4:00:bf:63:a4:12:b5:ce:98:cc:6d:1a:
36:2e:3e:39:f1:df:7f:ad:74:5c:42:68:fc:48:9c:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:BB:D8:CE:E8:58:8B:AF:72:D8:AE:ED:49:9F:75:A1:87:49:F1
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:cb:f0:21:f3:53:ef:57:fb:97:95:18:f6:52:36:e9:42:
85:e6:90:fe:f1:54:79:7e:e0:5f:c3:e9:ba:5e:99:0a:38:f5:
a1:d2:35:4a:c6:a6:f2:8f:0e:f8:5f:64:01:2b:db:7c:90:b3:
ae:c0:c3:d1:03:1d:94:86:1c:f6:7b:23:0c:cc:7d:cf:7e:8c:
96:3e:1a:c7:ef:48:12:45:0a:67:d2:70:9d:6a:8a:66:91:c4:
34:0a:8e:e4:e1:0b:ad:a8:35:0e:37:e4:09:20:82:da:a2:e8:
37:bb:d6:10:98:39:88:dd:fa:9a:43:63:e6:3b:8e:d1:9b:60:
ef:51:a3:0f:48:d1:3b:97:e7:28:55:c0:17:76:5a:74:b3:98:
64:73:f1:f0:92:9b:fb:bb:d6:73:b9:a7:b6:76:86:c5:16:0c:
27:02:12:4e:35:64:37:66:fa:e5:58:46:ac:85:8d:6e:15:4e:
78:5c:8d:44:ca:a8:89:a6:a5:25:cf:47:30:a6:50:1a:85:5f:
ce:ae:0f:c3:f0:c4:5d:24:4a:d4:4f:bb:c3:b2:66:ad:3d:01:
3c:13:d5:42:d1:9c:7e:4d:48:3e:5b:5e:98:0b:e0:50:cd:16:
35:32:10:9f:ff:56:06:ce:43:de:3f:99:6b:18:6c:65:ec:11:
36:cd:f9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLV7TR/WqK3ZeH79ZR40BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD
Eyg2ZTJiYmJkOGNlZTg1ODhiYWY3MmQ4YWVlZDQ5OWY3NWExODc0OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupBP9Vc3ruDh3SuT/zO9T/ZS80iE
+qlcTuhZDXbAE2VgjF++FdekTgMan8QW+CJ396IW6LBsBBw2JX6Jk+/AIdLKCTlB
H8Wk8UzQXEAeJNfJCDKEFS6hkCZMgdZ4centMW5CJeWDwYigZ8Bvu8PIvPQI1MCY
iXlyc7n4WTde8QsgmkjETVJQXXZKC0xK3Oy1soFcXtDVqH51JDM5QgT3tCYQasAk
AnBRzRg6KXFMpk9H6163Wvf/TsfRbD+uukbP8ynxxg7mNqfYEml0jjkv5wVxhbEu
HsK+XifIOLz4VcTEavi0AL9jpBK1zpjMbRo2Lj458d9/rXRcQmj8SJwIeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4ru9jO6FiLr3LYru1Jn3Whh0nxMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9DL8CHz
U+9X+5eVGPZSNulCheaQ/vFUeX7gX8Ppul6ZCjj1odI1Ssam8o8O+F9kASvbfJCz
rsDD0QMdlIYc9nsjDMx9z36Mlj4ax+9IEkUKZ9JwnWqKZpHENAqO5OELrag1Djfk
CSCC2qLoN7vWEJg5iN36mkNj5juO0Ztg71GjD0jRO5fnKFXAF3ZadLOYZHPx8JKb
+7vWc7mntnaGxRYMJwISTjVkN2b65VhGrIWNbhVOeFyNRMqoiaalJc9HMKZQGoVf
zq4Pw/DEXSRK1E+7w7JmrT0BPBPVQtGcfk1IPltemAvgUM0WNTIQn/9WBs5D3j+Z
axhsZewRNs35tg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:01:07 2025 by rpki-client