This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: OpYUdmsOf6A+xKkwVWa8xqcZj80yDMGBQbXfbpD3CPk=
Subject key identifier: 41:23:C8:D1:72:B5:97:2B:CD:73:C6:4A:AD:E2:C8:9B:78:B2:2B:2F
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019AF20935310060EAEED41378E15A34CB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 120A
Signing time: Sat 06 Dec 2025 05:01:20 +0000
Manifest this update: Sat 06 Dec 2025 05:01:20 +0000
Manifest next update: Sun 07 Dec 2025 05:01:20 +0000
Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=)
2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: 4/rq7IwkFtMNBCvZ/BBhNRDb+FOWru01z+Bb9DnV7XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:35:31:00:60:ea:ee:d4:13:78:e1:5a:34:cb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Dec 6 05:01:20 2025 GMT
Not After : Dec 7 05:01:20 2025 GMT
Subject: CN=4123c8d172b5972bcd73c64aade2c89b78b22b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d0:24:b6:6f:57:69:6a:bd:ea:21:21:71:35:
c9:df:aa:e6:fb:b9:18:c5:a6:83:3f:da:cc:cd:ba:
0a:b2:c2:00:6e:47:3b:38:f4:aa:be:57:cf:c4:d9:
fc:7a:cc:1b:a2:ae:34:fd:ac:47:79:3b:ac:d7:da:
d6:3f:a3:e5:b9:bc:d9:40:38:9f:00:f6:bc:3e:01:
43:20:ea:8e:68:5b:33:ef:b5:a0:31:70:29:90:21:
bb:a2:27:19:09:e8:63:83:1d:e5:c1:a0:80:81:c7:
fd:13:15:b6:d0:5b:14:4d:fa:67:3d:2e:f8:bb:49:
c3:a4:37:94:6a:36:31:a6:cc:38:73:86:2d:95:9a:
f6:21:0b:c0:2d:d3:12:9a:50:24:41:b1:80:40:f6:
90:6c:4a:ac:c1:c1:de:aa:f2:b2:e6:2f:5f:da:f1:
85:ea:d3:a8:05:00:2f:ed:30:fd:65:5c:83:d8:0d:
97:c9:8a:c6:40:c8:e1:ed:c6:cd:c0:60:ef:e5:55:
35:eb:83:67:ec:a7:e2:8d:a0:27:c2:c4:17:89:00:
3f:90:fd:55:52:70:0d:46:30:c1:d5:29:18:83:ff:
05:53:39:a0:f5:29:9f:14:67:2f:ea:90:69:a9:e2:
d2:80:f3:c1:76:50:ef:e5:83:70:ca:5c:61:77:c5:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:C8:D1:72:B5:97:2B:CD:73:C6:4A:AD:E2:C8:9B:78:B2:2B:2F
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:56:e1:5e:25:c8:d6:ee:1c:95:4a:8e:0c:90:c5:21:e2:34:
dd:30:78:e7:45:1b:93:9b:48:97:99:1d:48:20:2e:cc:f7:4e:
f2:98:27:26:78:75:df:ba:93:43:3a:ee:7d:8b:c0:f5:6d:60:
91:56:1f:e5:38:49:23:1f:0a:20:3e:3f:84:9f:81:d3:26:0a:
1d:f1:9a:c1:a9:00:12:c7:ac:32:81:3d:69:64:73:f3:54:1f:
46:be:d1:1d:80:58:b1:32:93:ef:f4:1d:a4:f5:ae:5d:91:ce:
34:16:d9:7a:57:5f:9c:92:c5:66:46:d1:e1:d5:23:d1:94:4b:
c1:54:93:0d:03:95:c2:eb:eb:bf:ef:33:8e:97:05:98:10:54:
4f:07:10:57:64:38:4d:96:ee:23:19:76:96:4f:68:a9:f9:12:
59:47:fc:65:a5:f3:78:f3:ef:fe:0e:51:71:ca:7f:46:f4:a2:
e0:ca:5d:b6:0f:f6:ff:db:d9:65:0a:88:d3:d5:de:66:1c:2e:
a3:92:87:d1:ae:fd:15:ad:68:fb:66:fe:da:84:33:99:2f:7d:
28:0f:e3:55:71:7e:39:ad:a0:9d:e1:db:bd:d4:74:f4:fc:bc:
01:5f:f9:5c:1b:88:ff:27:c5:15:34:77:2c:62:d9:11:df:be:
64:c4:87:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCTUxAGDq7tQTeOFaNMtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh
YWM4M2IwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD
Eyg0MTIzYzhkMTcyYjU5NzJiY2Q3M2M2NGFhZGUyYzg5Yjc4YjIyYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99Aktm9XaWq96iEhcTXJ36rm+7kY
xaaDP9rMzboKssIAbkc7OPSqvlfPxNn8eswboq40/axHeTus19rWP6PlubzZQDif
APa8PgFDIOqOaFsz77WgMXApkCG7oicZCehjgx3lwaCAgcf9ExW20FsUTfpnPS74
u0nDpDeUajYxpsw4c4YtlZr2IQvALdMSmlAkQbGAQPaQbEqswcHeqvKy5i9f2vGF
6tOoBQAv7TD9ZVyD2A2XyYrGQMjh7cbNwGDv5VU164Nn7KfijaAnwsQXiQA/kP1V
UnANRjDB1SkYg/8FUzmg9SmfFGcv6pBpqeLSgPPBdlDv5YNwylxhd8XHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEjyNFytZcrzXPGSq3iyJt4sisvMB8GA1UdIwQY
MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt
MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll
LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllbhXiXI
1u4clUqODJDFIeI03TB450Ubk5tIl5kdSCAuzPdO8pgnJnh137qTQzrufYvA9W1g
kVYf5ThJIx8KID4/hJ+B0yYKHfGawakAEsesMoE9aWRz81QfRr7RHYBYsTKT7/Qd
pPWuXZHONBbZeldfnJLFZkbR4dUj0ZRLwVSTDQOVwuvrv+8zjpcFmBBUTwcQV2Q4
TZbuIxl2lk9oqfkSWUf8ZaXzePPv/g5Rccp/RvSi4Mpdtg/2/9vZZQqI09XeZhwu
o5KH0a79Fa1o+2b+2oQzmS99KA/jVXF+Oa2gneHbvdR09Py8AV/5XBuI/yfFFTR3
LGLZEd++ZMSHLw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:05:32 2025 by rpki-client