This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: ogKcbY+jwWxo8y3dJlnAdTQBS95wfVDGcH32miKelZ8=
Subject key identifier: 4A:97:34:C0:7E:70:3C:BD:A3:19:02:4B:DE:2F:0E:1A:DD:2A:D9:C7
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019AF1643262F1EAB4642FF10D4CEC9AB060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 02:01:06 +0000
Manifest this update: Sat 06 Dec 2025 02:01:06 +0000
Manifest next update: Sun 07 Dec 2025 02:01:06 +0000
Files and hashes: 1: 04shIJz5IjFz6c1cY6KGhxSXODk.roa (hash: eHcSW44cbjs8QXew8FdRC0x6Ql4EYha3SISYT7NbzcI=)
2: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: nZVCASdrI5lp4vr21+vswPgU+QKZPIwNCsTE+qjDpSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:32:62:f1:ea:b4:64:2f:f1:0d:4c:ec:9a:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Dec 6 02:01:06 2025 GMT
Not After : Dec 7 02:01:06 2025 GMT
Subject: CN=4a9734c07e703cbda319024bde2f0e1add2ad9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:00:db:7d:17:d0:ba:24:56:14:5c:8c:63:ee:
95:3e:50:22:2f:2e:8c:78:28:52:2c:26:95:6a:90:
0a:31:e6:47:de:77:45:c4:c4:5e:8a:5a:6c:11:49:
41:7d:f6:47:56:48:7f:e7:71:52:9c:db:af:02:15:
79:cb:7c:d5:b0:d7:04:ce:8e:3b:76:1b:73:f6:d3:
60:22:ea:12:b4:97:8c:7d:1d:81:55:23:6a:e3:30:
c6:52:64:ff:83:d3:6e:df:9b:13:d5:00:6f:34:6d:
24:42:c2:72:91:70:ef:00:de:10:0a:a8:3f:f0:bc:
eb:de:e1:39:de:5d:03:fb:1b:01:4d:6c:cd:79:60:
24:f8:9b:e1:27:da:18:e7:6c:89:76:03:89:bd:f8:
82:a6:31:22:f8:4e:4f:b4:ed:9f:b2:c2:30:45:bc:
76:d8:d1:01:fe:21:3c:4e:ac:57:78:40:81:1b:12:
0a:bf:d5:73:e4:88:e5:97:6b:9a:49:8b:80:90:c9:
a9:08:19:40:c3:a0:82:67:8d:3f:d7:b9:da:09:e4:
b5:59:f3:99:7f:f4:71:41:bc:e8:63:38:f5:33:b8:
10:e2:96:18:8a:f0:11:2c:d9:c3:b7:c5:5b:90:aa:
30:ac:36:a4:cf:d0:31:bf:24:2f:f1:37:94:15:9a:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:34:C0:7E:70:3C:BD:A3:19:02:4B:DE:2F:0E:1A:DD:2A:D9:C7
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6a:8c:1e:12:d2:8f:2d:cc:14:6c:49:9e:e2:b6:12:14:34:
5d:d8:f2:fc:c7:ce:53:c1:69:83:10:20:41:a9:d6:3d:e7:17:
ae:7b:7f:c7:a8:76:e0:33:7d:81:c6:a5:30:61:0e:f0:3b:ef:
e1:b7:67:f9:d6:82:63:78:fa:b0:91:6a:89:d4:0d:c8:fa:f1:
47:97:89:75:0d:6d:95:66:fb:e3:a8:e0:5b:2e:6a:a6:2e:64:
74:72:d6:64:92:36:8d:c7:dc:bf:f8:22:b6:42:0b:d0:c0:25:
b1:2f:b7:c8:c4:86:9e:1c:ab:ac:d6:57:d0:15:cc:41:91:0a:
94:de:04:35:3c:3e:a5:64:ab:3b:a4:a2:33:7f:0d:84:8c:18:
8d:61:80:bb:6c:60:8d:af:35:c2:16:54:de:a5:d8:41:13:37:
21:b4:fb:24:48:86:55:7d:60:d3:4e:ab:55:69:ff:68:23:2a:
55:92:d3:00:1d:94:a2:d3:39:84:ef:e3:96:26:6f:76:37:33:
2f:3b:72:fd:78:c9:74:91:01:ac:6a:78:46:ba:2c:3f:3e:ef:
93:ad:47:9e:5e:42:83:08:2d:cb:7e:e4:50:95:74:8e:f9:cb:
13:c9:84:88:b0:52:a9:27:ba:b8:90:7c:b3:c7:0a:84:41:29:
b5:96:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:06 2025 by rpki-client