This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
File: oBZYi9HMst0iHG-Hg4VnR11-8ps.mft (raw, json)
Hash identifier: Z8SNPPiauVubt4SrywxGvRiOLtSq7XrBhuckSyVXcOA=
Subject key identifier: 05:C7:DA:55:7B:C2:C2:8B:25:DF:B6:B1:77:68:48:64:CE:B6:E6:43
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 019AF209A3D9DE6FDA8677E679FE15B4A7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 05:01:49 +0000
Manifest this update: Sat 06 Dec 2025 05:01:49 +0000
Manifest next update: Sun 07 Dec 2025 05:01:49 +0000
Files and hashes: 1: 7uBhUg1U8OiL4mgssHYwPwkKJrs.roa (hash: qe2rw9SjAhTjzWJWyO7/LvmX898Pe709+tHdC1jP6UA=)
2: P--cyCsEXWTpmdtjtbooGfKZW34.roa (hash: NViLGPpX2PnuVnmOA56Cf2Dp8n102H0opZdujn8vzcs=)
3: aUv0oKe6R2btvCdtOSYfT8WFAF0.roa (hash: lEgJxjlP6AlXHpqLTYKzkLDQsVq+Pi3xpQibZH/Rsds=)
4: gAUG9nMSNjQsq1tequutH3immt8.roa (hash: LCBTiYiGcwL+NIVJ6V4OXpEoNBb3bNUukyOlGZ8oVgM=)
5: kx7UofzIMm_m_XlnrQs2X_ZwrTs.roa (hash: FMY4CRQkCPFhXww6V/ELCA3IQUBWPklogLha1wHTo1w=)
6: oBZYi9HMst0iHG-Hg4VnR11-8ps.crl (hash: GJlnzOM6G3KnU8woPL7c/XJQUv3K9waTO65PdGGCuWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:a3:d9:de:6f:da:86:77:e6:79:fe:15:b4:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Dec 6 05:01:49 2025 GMT
Not After : Dec 7 05:01:49 2025 GMT
Subject: CN=05c7da557bc2c28b25dfb6b177684864ceb6e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:c4:d2:8d:ef:b2:d6:47:aa:97:7f:3e:d8:
96:f8:5b:49:0b:20:9b:ee:64:82:00:e6:69:5b:69:
ec:99:6b:1f:76:39:77:a1:0a:ca:c3:61:c1:49:f6:
ea:05:05:d0:62:90:d2:2c:6c:fa:10:e4:d8:0a:5b:
ff:e4:59:d3:6a:55:9c:9f:1b:37:89:d0:0d:81:4a:
24:27:d7:25:1a:81:1a:d0:5e:0a:e3:05:00:66:d8:
1c:b1:72:ec:c7:9a:df:02:7a:ab:ee:33:16:cd:12:
70:8f:58:6a:6c:a3:f0:7b:99:aa:da:18:d4:ea:da:
b6:7a:d5:51:68:52:c1:8f:d0:03:28:ed:7c:f3:45:
f8:cb:8d:d9:7d:91:91:f2:31:53:bc:72:da:0b:20:
f6:16:99:ba:55:44:bf:54:f6:cf:c1:12:25:f8:66:
ca:27:8e:a3:94:60:4a:a9:17:ae:3b:b6:50:46:4d:
f0:e2:c0:da:cc:9c:ec:b7:bd:20:53:b3:d5:1a:bc:
f8:7f:4d:41:ae:aa:39:5c:80:52:1b:83:0f:67:be:
1b:15:5c:14:75:5f:5c:b6:7c:15:2a:e0:d3:7f:c7:
dd:e7:79:97:e8:b2:31:3b:d4:53:05:87:cf:16:d7:
37:17:8c:82:10:9a:11:4e:b5:50:1e:11:58:31:4e:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:DA:55:7B:C2:C2:8B:25:DF:B6:B1:77:68:48:64:CE:B6:E6:43
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:25:cf:f5:6c:8b:4d:7e:a5:eb:03:ae:3e:2e:82:d7:f6:7b:
48:58:ec:e0:cb:21:14:da:54:e9:5a:14:38:63:1e:d9:09:78:
f6:06:10:7b:bb:3b:79:47:74:38:da:94:3d:4b:fe:2a:03:ca:
b0:2d:28:cd:52:fd:a8:5c:2a:8e:ad:8e:10:b8:46:94:5d:22:
7d:19:a7:81:b3:45:72:ad:39:f7:43:6f:ff:fc:61:2d:53:c2:
fb:31:9c:6a:f4:c2:21:4f:a9:86:5e:57:36:62:00:70:37:72:
f3:ee:4a:2c:55:4f:3b:ca:fd:e7:ea:29:d8:b2:73:80:69:f9:
a4:23:9b:dd:17:63:22:35:be:73:47:1e:a7:90:1b:ac:50:e4:
1a:d2:02:17:25:f5:ff:82:c9:e9:22:90:a4:55:13:1b:75:3f:
c1:d2:9f:3e:a5:29:ff:8f:9b:ff:1b:2c:44:3a:56:6e:db:c4:
59:c6:da:f4:b7:31:cd:06:a1:f1:7f:d3:6e:85:24:50:0a:51:
e0:ad:7b:2c:06:f3:fe:c2:89:77:03:a4:2d:f9:7e:c3:dd:c3:
47:00:09:a5:0c:30:c6:4e:db:99:5f:66:3f:e8:c4:06:a7:bf:
28:d7:b8:43:93:ec:12:f6:5e:69:9e:e5:9c:0c:dc:cd:d4:e4:
d4:4f:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:18 2025 by rpki-client