This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: UUM+LGO9Bhr1qbHDFTCgZJ2mG1b5qZtdHvrQZ0FLGgU=
Subject key identifier: 3C:DD:5F:A2:B0:0B:60:12:C2:34:55:72:82:1B:4C:67:14:8E:A9:68
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 019AF1D180B34A8024E7256B40218D8F4CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 04:00:30 +0000
Manifest this update: Sat 06 Dec 2025 04:00:30 +0000
Manifest next update: Sun 07 Dec 2025 04:00:30 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: VauT3K3S4GZ3VWHehfWPPFDYn7NhhGMkeNEf3QQ9fMM=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:80:b3:4a:80:24:e7:25:6b:40:21:8d:8f:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Dec 6 04:00:30 2025 GMT
Not After : Dec 7 04:00:30 2025 GMT
Subject: CN=3cdd5fa2b00b6012c2345572821b4c67148ea968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:c9:c0:1a:3f:55:89:5a:7c:41:62:06:49:
d5:c9:d1:79:25:b1:9d:81:8b:88:cb:98:c2:f1:6b:
d8:d4:41:db:bc:39:e7:ec:11:9c:bc:89:6c:af:21:
2b:e8:c7:96:64:8d:f9:4b:92:2d:de:10:02:e4:6a:
19:a8:89:21:4f:eb:2d:bc:f2:5e:c9:d3:e8:ba:10:
fb:78:12:65:58:2b:7f:78:47:b9:2c:fb:cf:42:dc:
36:7c:23:6c:a3:87:35:f8:ce:e3:e1:a9:6e:97:e3:
2a:10:b0:d7:f5:72:3a:88:ff:1d:c4:2b:d1:b8:92:
63:c4:f5:45:78:04:a6:b8:ae:d0:5d:31:64:5c:51:
5e:b4:fa:af:c3:7a:2a:fe:b4:5d:8e:6b:13:d9:00:
33:05:1d:40:ae:95:72:f3:80:50:03:c9:2b:1d:0f:
2d:60:b8:04:d8:29:fe:0d:cd:6a:83:d4:20:ac:35:
73:b9:06:51:c9:b2:4b:fe:3f:d6:3f:b2:20:3e:35:
6a:be:9b:e8:05:29:cf:d5:09:d4:9d:15:dc:a2:9a:
02:c8:1e:00:51:77:19:76:b9:0d:65:28:40:6d:a7:
ac:1a:6e:e1:af:a4:48:34:b7:9b:29:74:a8:0e:33:
1e:49:00:3a:a2:36:1a:e4:27:b5:8d:dd:e3:e9:75:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:5F:A2:B0:0B:60:12:C2:34:55:72:82:1B:4C:67:14:8E:A9:68
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:87:c6:a9:60:b3:19:91:89:21:8e:bd:f4:c9:b3:7a:f5:
65:6d:e8:2a:5f:60:f5:5f:77:b1:95:55:a6:18:55:55:66:03:
27:1c:d4:16:d1:55:92:1c:69:0c:a7:da:b9:dd:b5:27:fd:8e:
83:ed:b9:e2:28:be:d4:2c:94:b7:4c:99:a3:a1:48:bb:ca:47:
bd:9a:ed:8e:2c:16:f6:1d:30:59:75:95:fa:79:c6:9a:16:7d:
95:ef:3e:2a:64:b7:0f:3a:20:ac:a7:2a:87:1a:5d:ed:4f:ba:
6f:97:99:68:3a:1b:81:89:99:c1:7d:99:05:f2:5b:c7:6a:73:
60:75:83:af:e1:ee:e1:96:3b:13:e4:1d:39:c5:bb:e8:ac:70:
e3:5b:dd:b9:73:2e:49:c0:0b:15:85:3f:0d:92:9d:ce:0f:07:
00:6a:d4:ac:da:8e:60:b8:ed:2e:c7:0e:d6:d4:81:16:89:f8:
bc:3e:69:9c:ca:de:5f:27:b0:0f:33:f3:52:9f:2d:20:13:08:
5c:2d:84:2d:cc:d7:3a:27:1b:d7:96:6d:a8:1e:38:8b:5e:24:
2f:40:e5:0d:b6:69:ec:9e:73:80:2b:6f:fb:25:ba:b4:f3:ef:
ca:4d:c6:e8:65:51:e8:cb:7f:09:b0:ed:47:06:a1:53:a1:2b:
3e:39:9c:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0YCzSoAk5yVrQCGNj0yrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MjQ1NDM4YTJiNjIwOWM4MTY3NWVmMzU3ODNkODlhMTli
NzA3ZmEwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD
EygzY2RkNWZhMmIwMGI2MDEyYzIzNDU1NzI4MjFiNGM2NzE0OGVhOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFPJwBo/VYlafEFiBknVydF5JbGd
gYuIy5jC8WvY1EHbvDnn7BGcvIlsryEr6MeWZI35S5It3hAC5GoZqIkhT+stvPJe
ydPouhD7eBJlWCt/eEe5LPvPQtw2fCNso4c1+M7j4alul+MqELDX9XI6iP8dxCvR
uJJjxPVFeASmuK7QXTFkXFFetPqvw3oq/rRdjmsT2QAzBR1ArpVy84BQA8krHQ8t
YLgE2Cn+Dc1qg9QgrDVzuQZRybJL/j/WP7IgPjVqvpvoBSnP1QnUnRXcopoCyB4A
UXcZdrkNZShAbaesGm7hr6RINLebKXSoDjMeSQA6ojYa5Ce1jd3j6XVz+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzdX6KwC2ASwjRVcoIbTGcUjqloMB8GA1UdIwQY
MBaAFHUkVDiitiCcgWde81eD2JoZtwf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAt
NWVlMTg1ODhkZjU5LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAtNWVlMTg1ODhkZjU5
LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCSHxqlg
sxmRiSGOvfTJs3r1ZW3oKl9g9V93sZVVphhVVWYDJxzUFtFVkhxpDKfaud21J/2O
g+254ii+1CyUt0yZo6FIu8pHvZrtjiwW9h0wWXWV+nnGmhZ9le8+KmS3DzogrKcq
hxpd7U+6b5eZaDobgYmZwX2ZBfJbx2pzYHWDr+Hu4ZY7E+QdOcW76Kxw41vduXMu
ScALFYU/DZKdzg8HAGrUrNqOYLjtLscO1tSBFon4vD5pnMreXyewDzPzUp8tIBMI
XC2ELczXOicb15ZtqB44i14kL0DlDbZp7J5zgCtv+yW6tPPvyk3G6GVR6Mt/CbDt
RwahU6ErPjmc3A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:24:25 2025 by rpki-client