This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: pUvJPOA97Quvll3KCzgdYagELUN/ONXqvJER3utIGss=
Subject key identifier: C2:E7:AD:A9:04:0A:27:3A:79:B8:D2:E0:01:5A:BA:22:18:E9:7F:34
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019AF12CBEA536151822A3B777B325EAD87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 151F
Signing time: Sat 06 Dec 2025 01:00:32 +0000
Manifest this update: Sat 06 Dec 2025 01:00:32 +0000
Manifest next update: Sun 07 Dec 2025 01:00:32 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: lNg7RocSUEKlNsIg80MJM/eA4/gU3wAy0Z3fxFGYveA=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2c:be:a5:36:15:18:22:a3:b7:77:b3:25:ea:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Dec 6 01:00:32 2025 GMT
Not After : Dec 7 01:00:32 2025 GMT
Subject: CN=c2e7ada9040a273a79b8d2e0015aba2218e97f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:ff:77:e2:08:6d:37:34:a3:16:61:d9:74:
29:5a:d7:f3:d7:61:1c:95:01:c1:47:9b:79:7b:4f:
4e:39:44:bc:74:99:67:4b:49:ab:31:91:ab:8e:ba:
f5:99:c5:cd:8d:01:55:16:90:a0:9d:7c:10:4a:4d:
72:b7:d7:73:cc:3f:c8:93:98:36:c6:49:36:ea:ab:
ac:a3:66:48:51:df:bf:d3:5a:28:44:8c:41:6c:fb:
ee:a9:97:c0:1f:0e:4b:c2:45:fe:fc:65:f7:08:b0:
90:aa:59:c6:0e:b0:44:83:34:8f:fd:14:99:15:8d:
83:e6:7d:d8:61:bf:ab:b3:24:58:a5:a4:d2:47:4c:
2a:f5:f9:d8:ea:a9:8c:20:21:d9:77:a5:30:4f:e7:
26:ea:dc:d8:c3:66:6e:9c:21:c2:8f:d2:6b:2c:f1:
26:c1:e5:ff:42:79:6c:c6:74:9d:a9:45:f8:14:76:
85:f4:d6:ae:9c:d5:ec:fd:c4:d8:5d:77:6c:ef:a1:
84:1d:c9:db:d8:3e:16:11:6e:e2:78:fa:0b:fd:c4:
3f:1e:5f:6c:d6:b9:16:eb:c6:4e:32:44:9d:66:9c:
59:bc:47:3a:ff:7d:48:8f:69:af:a4:4a:f7:8f:1f:
a6:af:27:df:bc:66:1e:cb:35:19:63:89:2d:70:37:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:AD:A9:04:0A:27:3A:79:B8:D2:E0:01:5A:BA:22:18:E9:7F:34
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1c:61:e8:76:7e:55:e4:57:78:71:cb:33:3c:fa:fe:e2:13:
5a:d2:fe:e4:b9:de:79:04:2a:cd:a1:da:41:87:11:36:fa:44:
1d:a7:be:8d:d7:e1:07:e5:1f:a1:ab:3a:42:6e:21:a8:0f:2f:
5d:32:af:aa:ea:1b:70:57:e5:6e:f8:fc:09:8d:6e:56:72:88:
62:ea:e4:b6:2f:65:5e:d3:a1:0a:4c:ac:93:35:88:d7:a5:b5:
33:6d:17:07:df:4d:a2:ea:d5:35:9a:84:a1:c1:96:77:7f:4f:
77:78:55:0c:e2:36:41:cb:a4:b1:17:63:b9:f8:fd:5b:a4:fa:
56:6d:43:18:e9:ce:c2:b0:be:ea:57:85:6a:e1:13:f7:c1:c8:
df:aa:bc:45:c8:f6:8f:6d:d1:13:ac:02:3b:21:f9:32:9f:f7:
5d:77:3d:2e:0e:4c:d2:51:dc:6c:ad:1c:89:bf:f5:79:b3:57:
f4:42:9e:37:93:8d:01:fd:ff:fd:43:04:b5:3d:2e:70:d6:a9:
f6:b7:42:39:02:ce:c8:47:5a:fb:23:b0:7a:d6:b3:7f:19:c6:
bc:a8:54:95:f5:a9:fc:bc:be:ec:cc:51:c2:fc:f3:d9:6b:f5:
c5:69:d9:a6:83:32:f7:ee:80:f3:53:5c:a3:be:f2:65:3d:0b:
c4:cd:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:40 2025 by rpki-client