This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: d7y1o3eU2Tzy959fhNju92a/dusH0dFzzpoqm0nFtGI=
Subject key identifier: FE:C8:D9:26:20:D9:9E:AE:77:5F:FA:89:83:9F:FB:5E:83:6F:CA:4A
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019AF46595EC8958952105E7E6C3056A8A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 1598
Signing time: Sat 06 Dec 2025 16:01:29 +0000
Manifest this update: Sat 06 Dec 2025 16:01:29 +0000
Manifest next update: Sun 07 Dec 2025 16:01:29 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: PQxrl1fyAIPOi2vNtwSrnHiqBaaWgu/zEhao417cWaA=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:65:95:ec:89:58:95:21:05:e7:e6:c3:05:6a:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Dec 6 16:01:29 2025 GMT
Not After : Dec 7 16:01:29 2025 GMT
Subject: CN=fec8d92620d99eae775ffa89839ffb5e836fca4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:bc:a9:15:e5:74:7f:89:5c:28:6c:6c:63:
a8:fb:d7:e7:c7:bb:35:3c:b4:22:54:41:45:e9:af:
f9:5c:5e:4e:cf:a2:1a:c8:71:aa:8a:c1:75:66:1c:
6e:46:e1:3e:30:d7:5b:c3:d9:1e:63:00:98:69:2d:
01:a7:3a:5d:7b:76:9b:e4:77:05:6b:aa:fe:5e:73:
dd:3c:87:9b:ca:5e:e8:f6:68:30:95:82:44:b1:4c:
0e:b7:00:c3:50:b0:55:0e:c9:0d:c5:1b:48:de:cc:
b2:0c:37:e2:7e:51:7e:74:71:48:7d:ec:82:18:34:
18:e5:4e:5f:a9:45:a3:68:2a:6a:37:04:2e:be:64:
05:eb:23:d9:6f:a2:ab:79:a6:27:c2:95:85:f7:43:
76:b6:e7:9f:66:5d:3c:00:73:21:a0:76:49:1f:49:
e6:69:d0:ec:92:84:2e:8c:bd:18:01:77:08:b2:82:
b2:38:a3:85:8c:f0:29:cc:56:da:15:8e:d9:f0:6c:
07:a7:51:45:d9:a4:c7:e9:b8:79:06:91:4f:d8:6d:
8a:52:10:f7:4a:fb:53:03:5b:2b:58:41:95:d2:a4:
48:b3:45:8e:6b:a4:46:c6:00:ed:f7:68:48:9e:77:
63:f6:a5:fa:ce:49:d7:9e:59:91:da:87:11:33:61:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C8:D9:26:20:D9:9E:AE:77:5F:FA:89:83:9F:FB:5E:83:6F:CA:4A
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:d0:ed:9a:7c:fb:9a:83:77:c9:00:03:7e:30:85:bd:75:
72:ba:34:24:91:e6:90:c5:9c:90:9c:3f:40:58:bc:2d:6d:5b:
f4:9a:62:48:ba:4e:0b:27:8b:75:e2:0d:f1:ff:2a:47:60:23:
fe:67:2e:8f:1b:60:94:18:1a:9f:fd:53:23:29:e8:1d:40:8b:
61:0b:20:86:f2:f4:27:a0:f5:19:47:21:17:af:ce:d8:d1:f0:
39:2b:cd:2f:a1:8a:bf:03:a6:fe:b3:1c:42:21:23:89:42:0a:
d0:f4:fe:f5:53:68:57:1e:26:17:e4:82:bb:7c:20:4b:a5:65:
b0:5f:2a:eb:73:0d:91:05:35:d4:33:96:45:77:aa:50:88:e3:
d0:3a:9f:42:a6:77:44:81:c8:8e:1a:83:aa:8b:38:9b:61:cf:
f7:58:9b:84:57:00:80:48:8c:d7:8b:77:c1:96:84:9b:4e:37:
fe:1f:67:5b:e3:08:74:53:cf:2b:4f:65:ae:78:f7:47:b0:1a:
26:d1:9a:1f:42:07:d7:44:f5:a3:8b:59:47:ae:d0:2e:85:ac:
7b:50:c6:8a:3c:0f:68:51:fc:55:24:16:18:d7:a0:30:b9:09:
37:bb:3d:60:48:51:56:3b:50:6f:a5:6e:b9:a7:3a:31:ad:55:
54:09:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:53:56 2025 by rpki-client