This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: ht91qUeBQEDEZ2XIxmJLD1MS5QJGsygCWSwdNJ3hbWQ=
Subject key identifier: 3B:53:78:4C:7F:15:06:82:BA:E7:8D:57:DB:10:E9:9B:33:DD:C4:08
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019AF27663F27ACF3B911D83F1F2780F806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 16F5
Signing time: Sat 06 Dec 2025 07:00:36 +0000
Manifest this update: Sat 06 Dec 2025 07:00:36 +0000
Manifest next update: Sun 07 Dec 2025 07:00:36 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: kAvbzAT/I/3Arp7PPHgjUSLMtwpQkAQ7dRKbpo55kUs=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:63:f2:7a:cf:3b:91:1d:83:f1:f2:78:0f:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Dec 6 07:00:36 2025 GMT
Not After : Dec 7 07:00:36 2025 GMT
Subject: CN=3b53784c7f150682bae78d57db10e99b33ddc408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:a0:2b:12:b0:be:83:5e:cc:c8:70:b0:b2:
fa:fd:63:4c:eb:54:9c:b7:cb:2a:8a:58:64:a6:97:
c1:e5:00:cf:a6:e1:3b:d3:bf:60:ce:50:b5:37:51:
ba:94:9d:d2:2a:4e:7b:e9:98:90:a8:e6:b7:0c:4d:
a2:d8:c7:e5:30:5c:aa:da:ab:1f:eb:f2:a1:a6:db:
0b:1f:ab:26:2b:3b:6c:16:3a:86:35:cf:6a:fd:76:
a3:a6:99:4c:d1:50:a7:7a:e4:8f:e4:2a:99:5d:3f:
c6:01:45:3c:f5:79:05:44:10:bc:83:b8:a2:85:a3:
4a:f0:41:f3:dc:fe:f2:23:64:e5:9d:84:f8:80:9b:
3c:57:84:13:50:c1:61:a2:85:cf:5b:88:71:6a:75:
53:2d:29:b2:9a:60:c6:ee:61:b8:c0:f7:0e:e5:09:
bc:d2:13:07:82:33:b3:05:85:8f:8c:18:53:ba:dd:
26:ff:ca:15:e5:a7:f8:7e:01:bf:61:06:96:97:d2:
10:0a:8a:a2:8f:f0:77:b0:bc:30:83:d8:ec:39:5c:
cf:33:b4:e5:3d:d1:28:9d:f0:9c:fb:9a:b5:ea:67:
80:b6:b0:6f:02:10:a6:5e:d4:d0:1a:2e:11:43:71:
4b:a4:ee:58:56:72:fc:ab:ab:a5:3e:fc:b4:ee:29:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:78:4C:7F:15:06:82:BA:E7:8D:57:DB:10:E9:9B:33:DD:C4:08
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:db:1a:c3:2d:13:f9:74:16:a4:57:96:d3:81:84:f4:5b:
b3:53:2e:56:cf:a1:ea:e8:7d:7c:49:47:c4:57:e8:4d:0e:9e:
d5:db:15:df:dc:d6:ff:94:09:04:3c:71:b6:7f:0a:94:5a:b9:
3a:3c:fa:f6:db:6c:df:67:ec:67:ff:a3:37:1c:d0:0d:37:5a:
5f:74:6e:96:87:82:97:09:61:09:b7:5d:4b:1c:84:e5:1e:b8:
97:f1:b2:d5:9b:4d:ec:91:9a:74:20:18:eb:85:ca:8b:fc:69:
d6:22:31:5c:9f:61:0a:c4:31:f0:2f:c9:40:78:f3:4d:89:88:
f0:b8:5e:93:6e:4d:8c:04:86:9c:1c:22:49:1d:42:8f:c7:10:
2e:d4:e1:ba:6b:61:f9:31:c2:77:f8:65:8b:db:ea:fa:ee:a9:
37:43:74:03:5f:f0:21:c7:3f:1c:81:73:38:23:5c:21:1b:38:
f2:16:19:b0:3e:b9:2d:19:66:01:aa:0a:49:8a:ff:b3:13:3a:
da:79:81:d8:97:1e:ae:74:ab:a8:c2:d2:2b:a5:2f:d3:cb:53:
e3:87:8a:c4:c8:9c:48:de:03:64:2f:71:fc:e8:7b:b1:a1:15:
1c:21:54:79:66:b7:6b:54:63:bf:43:ea:cb:6f:80:18:49:60:
a5:b3:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:59 2025 by rpki-client