This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: YSVwkUJjjwS2lfp4MjKlYcDmn2ZNBO8Aik2EV3Rq93A=
Subject key identifier: DC:72:77:A7:45:34:EF:BF:DC:93:9E:49:A4:D1:FF:37:0A:06:1C:40
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019B32312CFC626C04E5D045B656E15DC1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 06C1
Signing time: Thu 18 Dec 2025 16:00:42 +0000
Manifest this update: Thu 18 Dec 2025 16:00:42 +0000
Manifest next update: Fri 19 Dec 2025 16:00:42 +0000
Files and hashes: 1: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (hash: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=)
2: iV5FZuMGLlixAMw0jkwzk7P8BYc.roa (hash: C9ucIF2yO9TSTl7qwXNqjkxkNJQX9XDq0UvZWNrPjQU=)
3: inOwk0rr2hBBrYALexzKTS-HXaE.roa (hash: BGYPbxUWdEW8PUtIUA1rv4TAk1J/uLjxsHUKD6zhw0w=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: imLVWqtSh7luOtOgfBbzd5cvbVigDHbBF4ci25nhbtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:31:2c:fc:62:6c:04:e5:d0:45:b6:56:e1:5d:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Dec 18 16:00:42 2025 GMT
Not After : Dec 19 16:00:42 2025 GMT
Subject: CN=dc7277a74534efbfdc939e49a4d1ff370a061c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:ee:f6:01:21:cb:b1:ba:0b:53:af:fd:cd:
1b:ab:24:91:d4:6e:39:fc:5b:6f:46:07:4e:42:34:
30:c4:44:b3:44:32:c0:50:0a:c7:03:be:88:55:43:
b2:12:d9:1f:73:54:70:24:31:86:d2:9f:72:a2:e3:
bd:17:ea:5c:6e:44:97:75:3b:0e:7a:4b:df:40:17:
ac:3f:e2:d5:dc:17:f6:40:e5:8c:d1:39:1b:a4:88:
d1:50:6a:eb:aa:cf:79:d9:bc:2c:77:5b:1e:f8:82:
5c:af:ea:d2:8a:34:bd:1e:44:28:63:ee:b1:82:7e:
18:f0:47:47:02:b9:31:09:91:3f:39:be:bc:49:40:
39:eb:87:59:b5:be:76:e9:73:16:b8:68:67:49:b1:
3c:d6:01:99:e3:42:33:e5:fb:ed:45:a5:1e:08:00:
d3:96:a7:9e:9a:35:ee:05:09:df:a0:77:53:72:1d:
0d:ec:3d:88:f0:54:20:e8:8a:5a:4e:5c:06:da:d0:
f5:af:d9:0b:97:fb:9f:8b:9f:76:2b:85:4a:1d:1c:
7d:9d:47:46:1f:79:6d:03:e4:77:48:81:6d:c5:78:
8c:57:b3:15:5a:67:74:49:8c:d7:ec:54:73:65:c8:
ec:54:00:0d:6e:5f:ac:d0:1e:86:4f:f9:d9:ac:9a:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:77:A7:45:34:EF:BF:DC:93:9E:49:A4:D1:FF:37:0A:06:1C:40
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:9c:33:51:4b:a8:a8:91:76:d6:f9:2c:12:05:b9:d5:22:
21:10:29:41:62:b8:8b:1f:cd:d3:2d:74:8b:0e:87:bf:6e:8c:
5b:a0:c4:3c:10:d0:b8:84:65:42:04:b8:4e:db:26:e0:1c:13:
50:ee:67:8f:45:34:98:7e:50:fd:24:23:05:77:34:73:ed:74:
08:4c:0e:0b:34:b5:85:e3:30:d9:d2:88:5c:21:1c:91:0f:3e:
c4:5a:fe:08:15:0e:ba:7f:0d:09:9f:9e:69:1f:5b:c3:ac:b3:
3c:55:c3:86:7e:b6:6a:c9:9a:8f:05:85:c5:92:60:a2:24:c3:
09:dd:56:08:8a:a4:9e:51:dd:9f:f5:e7:47:04:8e:ae:01:3b:
de:44:9e:2a:50:f3:32:89:8b:28:f2:ca:1a:7e:13:f9:3b:24:
75:14:8b:de:32:5d:47:0d:62:9d:ac:1d:21:ed:3b:e7:77:ba:
71:f4:69:0e:1d:41:00:fb:59:00:b4:aa:70:fb:4c:9c:f4:91:
52:c0:cc:2a:f5:62:39:a2:9c:3e:79:fe:be:8e:cc:28:a4:a2:
64:5a:a5:db:21:1b:ec:c8:c1:10:6c:ac:de:c1:9f:76:ec:9e:
80:a9:14:7f:4b:4b:5e:1d:23:87:5e:70:71:96:bc:92:c4:82:
1e:c4:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:07:19 2025 by rpki-client