This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File: p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier: 7Hk+w5PZbNWYE988q2con/aDbUjGJzFVCWCqeoVSkI4=
Subject key identifier: 5C:9C:DE:73:14:7B:98:03:CA:48:34:CE:D1:35:49:5A:A2:41:81:7C
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 019AF2AD77737E2568681B9E8BB69A951B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number: 0D69
Signing time: Sat 06 Dec 2025 08:00:45 +0000
Manifest this update: Sat 06 Dec 2025 08:00:45 +0000
Manifest next update: Sun 07 Dec 2025 08:00:45 +0000
Files and hashes: 1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: y8JqZNB2jZSCYf9cChqmB6sZEa1H7hH89da7mqUZoeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:77:73:7e:25:68:68:1b:9e:8b:b6:9a:95:1b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Dec 6 08:00:45 2025 GMT
Not After : Dec 7 08:00:45 2025 GMT
Subject: CN=5c9cde73147b9803ca4834ced135495aa241817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:e1:d3:da:de:76:16:d2:25:41:8b:aa:61:
9a:fd:65:cf:c9:e4:3e:fc:52:c6:e3:cc:96:be:6e:
0c:bf:68:72:d0:a8:d1:69:7e:94:30:c0:14:c9:63:
29:af:1f:34:7e:52:89:63:fc:bc:cb:6b:7c:59:f9:
69:c8:2a:74:1e:76:87:88:a3:10:2b:b9:1e:1c:07:
52:f8:3b:7f:02:ee:b0:fe:37:1f:2d:a6:f6:3e:77:
4e:1c:77:99:85:53:b8:52:a3:cb:b7:d1:67:10:22:
ad:4c:69:8e:48:df:d6:b2:50:93:bf:a9:02:a8:ca:
9b:4e:58:2b:da:8e:ac:85:a4:51:28:5a:9e:be:14:
b3:e5:e7:c0:3c:e8:7b:58:87:37:1b:c9:fd:f0:0c:
3e:ac:c1:42:f7:6b:02:11:71:54:6b:b5:c3:d1:fc:
42:7c:73:68:8c:7a:f6:b2:00:3f:34:09:76:0d:e1:
d2:c4:40:b5:85:db:77:e8:6d:f6:ed:1a:d9:f9:28:
e5:cc:3c:c9:a3:aa:a0:45:c0:9b:59:5a:28:ef:0e:
2a:46:cf:c8:ba:fb:f4:e8:f4:a6:b5:cc:d0:2a:2d:
e2:68:40:ff:0d:60:1e:08:45:8c:4a:33:34:68:a1:
38:47:dc:34:0e:1d:09:40:04:0b:e5:ca:d1:42:aa:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9C:DE:73:14:7B:98:03:CA:48:34:CE:D1:35:49:5A:A2:41:81:7C
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:35:11:7a:6d:8b:86:4c:bf:7e:51:df:b7:96:2b:dc:bd:
eb:63:39:da:c1:2b:98:5f:d4:4a:b7:60:58:b8:35:23:87:10:
51:f6:7b:df:da:bc:e4:ae:d2:c7:1b:27:88:32:49:a4:14:13:
3e:18:78:f3:2f:58:5c:36:60:1a:6e:71:cc:19:66:09:c2:4c:
00:20:ce:1d:5e:de:20:15:3b:2a:cf:a9:47:d5:5f:fa:8e:cb:
a8:b0:3b:4d:8e:e9:95:9d:a4:0e:94:28:b9:85:b9:70:b2:b5:
b7:b0:1a:4d:5b:97:d1:50:58:a8:35:5c:eb:3c:ab:4c:fb:6a:
7f:c1:8b:0f:a5:75:c6:3c:38:30:83:78:ed:20:40:72:86:97:
c7:5f:15:b3:33:94:5f:c1:7f:4b:ec:5f:85:19:f8:32:cb:5d:
81:3a:7d:88:70:ae:1c:1f:e5:28:27:b4:d6:37:d0:da:aa:2e:
fc:82:5e:4c:30:bd:51:01:6c:6d:29:cb:89:f5:68:c1:bd:dd:
1b:d9:f7:85:bc:74:7e:c7:a5:ef:e0:9d:2e:62:82:56:82:5f:
76:34:f3:5d:99:c4:93:45:68:e7:25:1c:ba:47:05:1b:63:70:
96:0d:41:aa:d0:1e:44:b9:92:75:99:95:57:27:0f:b5:2d:8a:
70:2a:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:56:49 2025 by rpki-client