This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File: oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier: 30qvC2yv5jN9cVT0lNB6Y24P0qj7Qai4l+yIu4+Vx4Q=
Subject key identifier: BD:2C:10:2F:37:C9:51:A1:CB:23:00:D4:D8:48:60:62:C9:41:5A:47
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer: /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial: 019AF163F639887263FBE806879CD276D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number: 0368
Signing time: Sat 06 Dec 2025 02:00:51 +0000
Manifest this update: Sat 06 Dec 2025 02:00:51 +0000
Manifest next update: Sun 07 Dec 2025 02:00:51 +0000
Files and hashes: 1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: zqWF4g3zTp6t5M7tHvg2lrKSmHdWolp54R+Y20gz0BU=)
5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:f6:39:88:72:63:fb:e8:06:87:9c:d2:76:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
Validity
Not Before: Dec 6 02:00:51 2025 GMT
Not After : Dec 7 02:00:51 2025 GMT
Subject: CN=bd2c102f37c951a1cb2300d4d8486062c9415a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:34:9e:c9:0c:1a:30:be:51:87:75:17:55:
a0:17:4d:17:1d:98:b0:f7:bb:85:2b:dc:88:c9:7f:
45:bc:a2:11:db:4f:6f:e1:6d:0d:82:cb:81:9a:39:
d2:04:d4:2d:30:89:b9:55:26:cb:45:7d:aa:1e:e5:
8b:ba:92:f2:5d:30:4b:7b:58:c2:60:ce:b9:89:0d:
bf:1b:19:dd:47:a0:a7:bc:14:f3:f8:a9:d9:d0:dc:
f1:7c:69:b7:46:3d:14:f2:a1:9f:a5:97:d2:b8:4c:
01:a1:7c:80:2b:11:85:31:aa:c0:e4:2f:61:3c:14:
52:81:df:86:ce:6d:3c:cb:a1:32:43:66:08:00:d3:
dc:55:61:45:ad:8e:77:ec:86:0d:6b:05:9c:f7:4d:
4c:16:aa:48:23:1e:1c:6f:20:32:db:9a:bf:25:56:
bb:8c:12:df:83:a6:b6:af:f6:a9:30:69:71:c5:a6:
b7:f2:93:81:96:f1:e0:8d:22:95:b8:a5:7a:32:86:
a3:e8:b1:4a:77:ed:b5:0c:a1:98:ef:97:17:d1:5f:
b0:3f:5a:cd:2e:d8:5c:0a:7d:ec:45:f8:25:a4:0b:
a1:7e:51:51:f4:51:97:04:3b:45:3e:f7:0e:55:87:
03:8a:28:d3:5d:e9:e7:3d:02:28:cf:b2:04:90:50:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2C:10:2F:37:C9:51:A1:CB:23:00:D4:D8:48:60:62:C9:41:5A:47
X509v3 Authority Key Identifier:
keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:29:91:50:ba:45:46:e8:27:4b:35:c2:ca:1f:39:25:56:
45:f3:55:56:33:54:1a:88:c5:2a:fc:d9:d0:d0:2b:33:74:91:
0c:ee:ba:c4:7d:2a:3f:04:3d:ef:be:f9:fb:32:c4:45:c4:0b:
29:09:1c:8f:6b:35:37:52:58:71:aa:98:c4:e8:ac:88:c7:aa:
f0:ac:c8:2b:3c:b3:b7:5a:69:b9:db:3c:2d:96:a6:70:97:14:
5e:02:80:25:c9:57:39:6d:81:67:ce:61:39:cb:0f:75:96:37:
90:b4:d5:03:7d:30:60:e2:2e:3f:d3:1d:39:9a:71:f5:8b:8c:
86:bb:70:11:50:e3:8a:a3:9a:09:99:78:6a:d0:3f:01:ca:26:
82:3a:bc:3c:bd:ec:ca:ea:58:a4:b5:67:72:f4:4a:75:28:57:
1c:c5:bc:b0:8d:7e:6f:a7:4c:27:f8:ae:00:0b:3e:ca:d2:b6:
d2:71:e4:9b:95:dc:a4:a7:95:cf:2d:88:25:64:8d:23:d4:ef:
b7:9d:df:2e:3d:df:cd:87:e1:fc:52:88:c7:31:68:3c:2e:79:
55:07:7b:83:3f:d6:76:ac:11:af:83:84:b5:aa:51:62:47:35:
ff:2c:3a:2f:db:f8:ee:2f:0c:07:1e:9b:a7:f1:85:2b:9d:bf:
40:82:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:35 2025 by rpki-client