This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: 2b9YwjIOO7LTSJF1l9mMJ8elMcsSDjOakyZaAxs2Id0=
Subject key identifier: DD:6C:F8:D8:37:46:12:CE:7D:E6:41:F8:DA:D5:D4:65:F3:32:78:DB
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019AF12EED3826595EBDEFE78D9A8557E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 01:02:55 +0000
Manifest this update: Sat 06 Dec 2025 01:02:55 +0000
Manifest next update: Sun 07 Dec 2025 01:02:55 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: bbXYxG7YSnPIMayW65EA/+DQhp9GFDY89F5gRYYmDn8=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:ed:38:26:59:5e:bd:ef:e7:8d:9a:85:57:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Dec 6 01:02:55 2025 GMT
Not After : Dec 7 01:02:55 2025 GMT
Subject: CN=dd6cf8d8374612ce7de641f8dad5d465f33278db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:63:dd:09:f6:f5:59:b7:27:1d:b8:2b:db:
1e:bf:54:e6:92:ae:5b:3a:99:7a:75:e2:5c:86:7c:
26:9e:01:29:0d:88:6c:57:92:d8:0c:1e:56:11:f4:
e6:6a:a4:84:d8:4b:80:33:ec:a8:20:01:3b:93:b9:
df:03:d2:80:da:4c:43:97:c7:d5:fd:ec:76:3a:a0:
34:d7:8f:ea:33:43:05:77:4e:4d:66:ad:de:f3:34:
e9:45:c9:03:2d:94:7b:e6:72:25:70:c2:ad:54:0a:
c6:da:88:49:a1:41:8b:c4:79:39:31:27:d1:00:c1:
e1:ec:25:b2:c7:2b:25:df:07:b0:91:8f:c2:53:8c:
e5:30:5b:38:be:db:5d:8a:66:dd:fb:f8:94:cb:73:
3d:a3:ce:f9:1c:10:83:14:69:c1:1d:90:87:4b:55:
c8:d7:ef:cf:32:3e:92:7e:69:1e:a4:47:46:42:30:
0b:e6:df:3f:94:73:c9:54:1d:f3:43:db:a2:23:f1:
82:02:a5:ba:a1:a6:0d:2b:39:d9:2d:ad:25:1c:00:
b9:61:7b:e4:70:46:b4:6b:dd:0c:d0:16:45:29:9b:
b5:b8:c2:e5:3a:d9:5a:0f:ea:f1:ee:b0:c8:44:38:
aa:0d:06:f5:59:7b:a2:bf:92:65:af:92:e5:f1:b4:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:F8:D8:37:46:12:CE:7D:E6:41:F8:DA:D5:D4:65:F3:32:78:DB
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:4a:0e:7e:93:b7:10:17:8e:e7:89:e8:f1:8f:1a:12:5a:
e5:62:06:9a:9a:e5:54:3f:e3:18:29:08:1e:1a:b9:32:4f:bb:
76:1c:29:f6:91:b9:2b:c9:ce:df:d4:33:6f:85:d9:de:ef:69:
1a:e3:ad:b5:9b:4e:dd:fa:95:5e:bb:e0:3f:7f:2d:6d:34:61:
32:9d:39:cb:f4:1f:d8:a0:cd:4d:6d:df:b1:2d:79:b2:5b:6f:
18:d0:fb:e0:43:b0:1f:53:4d:7b:b8:d1:1e:c0:6b:53:d1:81:
1b:74:37:82:f2:79:87:29:f7:4f:82:b6:79:ff:a2:df:0d:df:
90:19:a1:46:6e:c3:ad:bd:6f:55:e0:e6:78:0d:f7:e7:2f:47:
6f:5b:f1:7b:3e:03:5c:a2:45:ad:6d:f2:11:99:3d:a5:48:69:
19:6e:84:67:85:4f:bf:05:39:22:4d:1c:ac:00:b2:fd:02:d9:
42:6a:ca:74:87:f4:f6:4f:de:79:74:0f:37:1f:77:66:80:57:
53:46:5c:90:c3:2d:67:75:10:8b:0e:54:92:7d:9b:0d:86:2d:
0d:d5:ea:d3:fd:cd:17:0f:17:e2:2c:b2:c6:93:48:73:11:df:
1a:65:a4:78:5f:15:47:4a:11:f3:93:8f:c1:c1:1d:c5:e4:f2:
48:dd:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:45 2025 by rpki-client