This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: cdo8a/4hKyIPpoomh35SrADLAYGLbQpfina786NDLQw=
Subject key identifier: A7:56:7B:36:D4:70:C2:A5:B3:B5:D8:EF:0A:80:7E:FF:98:85:3D:C4
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019B262D6F8AD0355848D4FCC80655314FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 1225
Signing time: Tue 16 Dec 2025 08:01:10 +0000
Manifest this update: Tue 16 Dec 2025 08:01:10 +0000
Manifest next update: Wed 17 Dec 2025 08:01:10 +0000
Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=)
2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: Hh/GrLIRuuI/LPsmic8xUObrzdl37fCQYwqXHif3n6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:2d:6f:8a:d0:35:58:48:d4:fc:c8:06:55:31:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Dec 16 08:01:10 2025 GMT
Not After : Dec 17 08:01:10 2025 GMT
Subject: CN=a7567b36d470c2a5b3b5d8ef0a807eff98853dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:b1:a9:cc:b7:d3:58:c1:80:c6:b2:77:16:
ee:41:52:e0:41:fd:39:df:a2:db:ff:8e:10:81:92:
1a:bc:4e:49:43:3b:fe:cc:22:73:38:7d:0e:42:f5:
48:cc:b0:04:85:02:1c:15:b7:b6:bf:79:9b:17:47:
de:a0:e4:e0:b2:10:95:91:ca:43:81:66:83:28:01:
72:61:fd:2a:2b:12:ef:de:84:f9:0b:4f:92:61:f2:
34:10:13:dd:ad:e3:bc:6d:df:5e:cb:6c:e6:c5:c4:
56:b9:9c:2f:ae:32:ca:9a:1c:53:0c:f7:ac:cd:c8:
4d:45:55:51:d6:5a:e3:5f:d6:0e:2b:7a:fa:39:2b:
11:c5:dd:f3:53:10:0e:cf:d3:53:7a:46:fe:0a:69:
60:67:9e:82:50:17:4b:aa:66:a7:c4:50:29:a8:8b:
a5:b8:e7:fd:14:4d:92:32:89:ca:e2:f1:7b:d9:25:
ee:9b:3b:96:e6:27:d0:36:ae:e3:7f:8f:f4:5f:43:
1f:a3:07:4e:3c:3b:ff:c2:85:90:09:db:0c:3e:a9:
78:9b:8b:bf:ed:e1:68:53:24:25:4b:b0:2a:c4:d3:
53:20:c3:24:ac:49:68:27:3e:bb:90:ab:af:e5:0c:
75:01:97:c7:79:7a:8e:56:62:d9:50:a6:7a:7f:ce:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:7B:36:D4:70:C2:A5:B3:B5:D8:EF:0A:80:7E:FF:98:85:3D:C4
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b6:e1:b2:4e:98:58:16:4e:58:4e:53:ae:5c:04:ae:f5:84:
8c:bb:43:bf:92:4c:c0:f9:3f:64:bd:e5:4c:71:25:b0:5b:18:
fb:79:f0:47:aa:4c:62:74:23:be:92:5a:70:a3:aa:8f:c5:b0:
7e:7a:59:bc:4f:38:75:a8:67:41:a2:70:a8:2b:8c:4c:01:53:
4a:d5:3b:4d:56:69:38:d2:5d:39:ec:7e:91:3a:8d:8c:bb:5b:
ff:fd:fa:1d:66:62:0b:02:78:0c:59:d5:9a:da:0b:3c:c3:bc:
96:b6:31:60:fa:fc:a0:42:53:a2:bd:da:d4:23:8e:4d:c5:fc:
ce:d8:f2:66:56:80:a4:be:16:ab:6d:45:f8:47:be:82:af:5b:
11:e1:bd:61:05:57:ff:b6:17:b1:19:92:e1:8a:84:4e:aa:17:
6d:16:ef:00:90:61:f2:1b:79:31:8d:31:c5:95:02:6a:9a:a8:
21:7a:2b:5d:f7:e3:ad:5e:ac:d9:fc:1f:3e:a0:4d:16:1b:98:
c3:55:57:c1:8f:eb:ed:3a:d2:b1:a6:e5:43:7c:19:9d:02:6b:
55:1f:84:d3:bd:76:53:8c:31:21:b7:a6:82:d1:5b:b9:69:4f:
ab:f1:99:cf:e0:9b:5d:9f:55:a6:dc:0f:ec:79:c2:c0:22:ee:
04:49:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 17:58:23 2025 by rpki-client