This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: SEvx2Jmo6dSvAF6V4Z16F92vDiacfK0H7vZgQaYdWlQ=
Subject key identifier: 03:C5:56:DF:AE:31:DF:DA:42:B2:41:24:33:39:86:1F:60:42:54:8E
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019AF464FFA20FE1BCACEAA80CC461BE4AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0B11
Signing time: Sat 06 Dec 2025 16:00:50 +0000
Manifest this update: Sat 06 Dec 2025 16:00:50 +0000
Manifest next update: Sun 07 Dec 2025 16:00:50 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: s5gk3hF41jJ08kUNXYhOcHDNISfbsxe82GxemS6O5p0=)
2: 0t8O5fg1Ycbbc11AptBXKz8zo30.roa (hash: I6wB2R0RuuJIFFD2Q/4TtNXW1MxeFWyONoHibXaEdaA=)
3: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
5: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
6: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
7: JfF0v8eby0BQNtVREEaJFT1Zxcs.roa (hash: OQTTsSrZcqdOC8lDs04JBaSkoqVL61gLZ8I1J00GtDk=)
8: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
9: bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa (hash: 1N2udKCYu0d+0ddwjQonUl6aLmfYMfYwRiupNuK5mRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:64:ff:a2:0f:e1:bc:ac:ea:a8:0c:c4:61:be:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Dec 6 16:00:50 2025 GMT
Not After : Dec 7 16:00:50 2025 GMT
Subject: CN=03c556dfae31dfda42b241243339861f6042548e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:11:61:b4:33:ca:3d:ec:b1:d2:72:ba:39:
f3:39:9a:3d:b8:49:1e:f4:28:e4:46:fd:21:02:61:
96:18:e2:89:25:cb:cc:21:ed:0f:38:75:9c:49:a3:
fc:ca:41:16:b9:37:72:94:34:fa:b9:1c:6d:61:72:
d4:dd:7a:7a:74:4d:3f:97:bb:24:3b:e1:88:a4:b8:
31:78:e3:27:32:96:00:10:64:67:6f:be:dc:b3:f0:
72:66:a8:1d:7e:47:3d:f8:9e:a8:bf:17:cd:56:08:
51:ac:76:14:fe:c3:fe:9f:f9:bc:46:3d:31:82:ca:
ca:c3:d6:05:0a:bc:cd:fe:b3:32:c5:e2:a7:87:4e:
2c:dd:ff:97:83:1b:5c:6f:18:4c:cb:9d:46:69:98:
ce:f7:73:39:e5:f0:dc:bd:e3:2c:01:3c:e3:3e:f5:
9e:80:92:71:0f:e1:1c:b1:92:62:a1:08:be:d6:04:
fe:35:fa:11:d2:8d:60:15:68:5e:1e:f0:55:31:49:
fd:7a:cd:99:c0:51:b9:a8:87:2d:76:9d:2c:bc:48:
1a:00:31:30:bf:9d:15:12:7f:02:ec:d5:06:0c:c2:
95:c5:6a:90:56:54:bb:7e:91:9f:7b:73:c8:82:9c:
97:94:06:73:65:0d:cb:39:2b:5d:0b:31:bf:c8:fa:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:56:DF:AE:31:DF:DA:42:B2:41:24:33:39:86:1F:60:42:54:8E
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:59:9b:40:5c:4c:c7:0b:e1:fb:9a:85:8a:e0:1d:18:99:68:
37:39:9c:d5:b3:e3:4e:f2:ab:4b:0b:a7:80:65:ab:eb:a5:8d:
de:a3:e1:b5:c6:74:8a:0c:36:d8:cf:06:20:a8:f1:10:8f:ac:
a4:ae:70:44:dd:fe:5e:c4:3a:6d:a7:dd:c7:e9:4a:e7:14:da:
57:12:13:58:04:74:cf:20:6e:9a:44:5c:b6:4b:bd:c1:c7:71:
ac:46:7a:8b:51:d9:af:e2:2f:f4:ff:6a:01:1c:da:1c:bf:03:
ac:c8:92:9d:da:da:c1:d3:54:54:79:48:51:93:a7:dc:5f:92:
7f:f1:c2:c5:a6:68:9a:d7:9a:bd:a6:57:9f:8b:d8:b3:2b:f2:
8f:69:3c:39:9f:06:6a:ae:e2:91:a7:a9:25:88:ee:0e:de:c2:
93:8a:95:7c:b6:f7:ff:d4:43:27:a8:71:fd:01:88:fe:7d:2f:
89:cd:1a:15:3b:5f:3d:60:09:c6:66:26:56:c3:ef:ba:da:53:
6a:da:88:78:9a:25:ad:51:c1:c2:d1:f7:6e:08:54:c9:fd:34:
ea:ea:7a:f1:d9:b4:06:6a:6a:e7:57:b0:6b:98:e5:3d:8a:cc:
b7:b1:c5:54:91:b6:6d:bf:9d:42:cd:32:e6:67:a9:d7:1e:a9:
59:b6:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:31:26 2025 by rpki-client