This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: zE1inPz2KTAzl2ClQnhK8qtknRgE/3CvJCI7wFsN1Ms=
Subject key identifier: 0A:7E:45:5E:E1:C2:2D:38:35:1B:69:67:0E:75:AC:0A:F6:80:16:D3
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019AF50B9FD2669EE70F6186901E945A7BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 176F
Signing time: Sat 06 Dec 2025 19:02:50 +0000
Manifest this update: Sat 06 Dec 2025 19:02:50 +0000
Manifest next update: Sun 07 Dec 2025 19:02:50 +0000
Files and hashes: 1: 8Zj24jfn9S8WI4ttBUHVoIAXMMo.roa (hash: cTf4aMsPBbGTihgOeG5/giseUSW7pXyGx7wJeH1Zs1U=)
2: H0ohXS9X5CuNmdABAZo7QVngevg.roa (hash: AyyjXDae21dR+HrIf+wOHMkNqlVzHUDtXhdzOaCJinw=)
3: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: bjEsKemthxWQCFo6UUYm9z5Nk/Mv+bRSNf5BGMlR7yY=)
4: SkAOEDeuA2PQ-A10S9FavkFhiAE.roa (hash: kVOuXVUzFINGvVbrPdqSgnfvVUvQgBv0NhdbBuvyTSo=)
5: TrNuqWdgLhGTxn5VxoYeyfzOKkg.roa (hash: Rqi2Sn0fAAAxy2y3ILi9hXub3082liYhSLIo32eP1Fg=)
6: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
7: mSAOwTsVaHd8118WnS4cvGYvNUE.roa (hash: M5exegiwCD9wq+6OVWAn+L9v8TUuNlEDvaTanUNJsnw=)
8: zsAzizQNzq-nU7DBqjyFfFYYJlY.roa (hash: lPKM4UQ81kuyk83v9B3QSeG105m6Qhy3mK0i/rPSzW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:9f:d2:66:9e:e7:0f:61:86:90:1e:94:5a:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Dec 6 19:02:50 2025 GMT
Not After : Dec 7 19:02:50 2025 GMT
Subject: CN=0a7e455ee1c22d38351b69670e75ac0af68016d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:5f:dd:f5:33:0e:69:c1:9d:2e:3d:da:92:
2e:20:67:68:5f:a1:7d:d0:9c:1c:52:75:f6:7f:92:
95:d7:9e:87:d9:d4:a9:0b:93:cd:50:1d:08:79:ac:
f2:b5:b3:a7:82:95:e4:bd:64:8b:ad:64:76:80:67:
5f:0e:18:0a:a5:1c:74:52:58:ff:b3:1f:5a:0c:03:
11:57:ad:07:00:3a:a0:eb:63:34:fa:cb:7c:6e:1c:
78:79:5f:b3:d2:74:86:60:59:37:4e:c2:98:77:f5:
12:dd:38:c2:16:e2:0b:d3:c3:c2:d4:cc:52:90:f9:
d4:99:d0:53:80:fd:94:eb:a9:b5:ff:7b:21:a6:d2:
3e:b8:df:62:b4:0d:90:0e:2d:5c:9d:3c:68:3b:cd:
f9:11:7d:68:f3:c6:c7:ac:e2:62:61:59:d4:50:9d:
cf:71:d4:f8:ae:a9:a0:09:8d:7d:e0:34:15:cc:cb:
48:97:5a:74:1c:66:e0:86:79:82:db:eb:e8:92:69:
13:b1:42:2a:53:0a:20:f5:5b:48:5c:22:f2:a5:d3:
52:19:5d:04:aa:eb:17:55:2e:27:c8:33:2d:3d:cc:
cf:d9:53:18:95:20:5e:36:b9:12:ef:fd:f4:a6:4d:
d5:a9:a5:48:27:1d:4c:b2:cd:42:a9:24:71:8e:0a:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:45:5E:E1:C2:2D:38:35:1B:69:67:0E:75:AC:0A:F6:80:16:D3
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:98:5c:d8:0f:67:21:63:49:7e:11:2c:1d:b9:a6:0d:0b:
50:03:00:f7:2c:78:31:dd:6e:3a:1c:ff:b8:a5:08:b1:af:fd:
f7:8f:71:bf:bd:a9:4c:2c:37:18:48:6d:3f:0c:39:59:ba:9d:
46:47:f7:74:2c:e2:54:d2:92:66:69:6a:bc:d2:3b:6c:84:13:
82:a7:af:f5:05:bc:46:73:80:34:fc:77:e8:55:fd:2c:5b:94:
8a:7a:17:e8:a4:e9:1f:2e:a3:56:fd:83:72:71:d2:54:f6:a1:
66:28:02:79:c3:eb:f8:b0:07:85:ab:a1:88:7a:c3:2e:be:29:
a5:66:13:49:04:32:85:63:c5:f5:8a:45:61:a4:f0:4a:89:16:
d3:64:a6:e9:22:67:e3:cd:bf:ab:75:fc:1b:b6:88:98:68:0f:
56:d9:91:67:fa:2e:ef:05:a9:dc:6b:c1:47:c1:92:af:90:41:
41:08:28:cf:db:43:45:a5:a3:ca:b0:4e:d0:c5:69:65:47:53:
70:a7:ff:de:bf:02:80:6c:19:d0:c4:d8:f9:2c:cc:79:39:e8:
e1:fd:70:f3:ed:20:53:24:e4:36:c9:4f:f6:28:e2:9b:f7:94:
df:3b:04:7d:83:69:ed:32:10:92:82:0c:21:06:f5:af:f2:e6:
18:6c:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:11 2025 by rpki-client