This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: FaYd0OXMumFuRtP83wSVHve4moTUo0Xu0YBm++N95Z8=
Subject key identifier: 51:68:DD:54:89:6B:52:D2:DF:1B:1C:82:0F:68:63:B9:85:93:B3:04
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019AF2401DFC8C3FF567810114F093DE34A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0A15
Signing time: Sat 06 Dec 2025 06:01:19 +0000
Manifest this update: Sat 06 Dec 2025 06:01:19 +0000
Manifest next update: Sun 07 Dec 2025 06:01:19 +0000
Files and hashes: 1: DSY_tMLY_PuezDrWPfm7LMOnuyo.roa (hash: KloBsoZk4NHNVmaD6omfRpGUI/4IYovSPRq5IHzlXHM=)
2: GZYNt-YP_7Hadt6qxc3RQHa1sYY.roa (hash: W0gvqyTsgxCPRfvxHQXq38ri2H0pX/uYL4J5Y5G9QMM=)
3: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
4: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: 4TxBHuTymoFR+8zagfPNVlkwWOltfJGM2jb7PpB/Fbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:1d:fc:8c:3f:f5:67:81:01:14:f0:93:de:34:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Dec 6 06:01:19 2025 GMT
Not After : Dec 7 06:01:19 2025 GMT
Subject: CN=5168dd54896b52d2df1b1c820f6863b98593b304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:d7:ae:1e:57:f0:72:77:34:22:ce:10:78:
95:cf:58:2a:70:5e:40:af:a3:55:fa:88:90:e7:d8:
45:85:4e:6f:68:5e:ee:e6:84:c8:8d:58:7f:c8:c6:
86:3b:8b:cb:4f:b3:56:15:bd:7f:03:3f:16:9b:c8:
69:1e:ae:4a:fc:b3:ea:59:5b:80:4a:a2:4f:a6:4b:
f3:73:3e:5d:18:d1:82:5d:70:2a:19:40:53:18:a7:
0c:45:00:69:9d:a4:65:5c:b4:83:9d:42:f6:66:a3:
ba:15:96:96:31:1f:83:87:b4:52:d0:70:95:bc:b3:
09:7b:8b:7b:e1:40:08:c4:c3:ce:dc:94:30:74:f5:
27:a8:4a:75:5a:0f:c3:33:53:09:cc:4b:ac:54:5f:
03:d0:a2:de:d9:ad:b4:a0:44:5c:05:4c:95:af:fd:
2e:81:19:1c:26:07:d8:1a:b2:d9:97:c4:c4:a0:47:
0a:0b:77:66:f9:6b:a9:c0:38:00:26:3a:b4:8d:39:
3e:6e:92:9d:8c:57:30:36:09:78:ab:e4:3b:e4:60:
cb:d8:37:9b:b1:4a:d6:aa:1b:e0:43:39:8c:4d:ed:
b5:33:3a:22:7c:13:ae:f9:c6:0a:2f:49:fe:9d:de:
39:60:5d:45:39:02:16:b2:41:aa:21:d3:7c:93:9a:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:DD:54:89:6B:52:D2:DF:1B:1C:82:0F:68:63:B9:85:93:B3:04
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:f1:bf:95:2d:c6:13:07:80:fa:75:45:09:53:9f:be:34:
cb:4e:22:8a:8c:88:f1:6c:cb:68:8d:3f:6c:3c:a9:70:66:f5:
e3:1f:9c:ce:5a:2c:08:79:73:f3:e2:0a:b9:04:6e:eb:1b:9b:
d0:1a:c6:58:79:26:a9:f6:86:23:22:47:55:47:63:66:da:cf:
b6:7a:e3:b9:c2:ff:ca:9d:19:0e:f8:be:21:05:8a:ae:72:fd:
48:c0:78:36:ea:f6:c2:32:e8:65:c5:1a:7b:ac:8d:f8:23:d7:
f4:01:35:7c:62:04:6e:d0:08:20:d7:78:c8:22:8c:22:6f:4c:
34:22:63:75:b1:3c:eb:be:a2:85:f5:1d:d5:56:29:c9:9d:0a:
69:eb:79:61:5e:49:d1:9b:61:07:ea:60:28:3b:2a:21:2e:bd:
76:e1:fa:60:59:43:6a:46:bb:39:ff:39:d1:e0:91:4e:85:bf:
5c:8c:21:0d:06:86:1e:10:10:25:7a:5a:32:76:b1:f1:05:74:
48:f7:99:bd:a6:af:f8:ea:1b:b2:76:dc:16:c6:6b:f6:a8:a9:
53:ce:df:af:37:79:5b:24:f4:16:64:59:c9:e5:57:7c:3c:1d:
56:17:a6:57:a0:7f:ca:d6:20:a0:eb:47:8d:13:62:c1:83:d1:
28:68:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:30 2025 by rpki-client