This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: JaaPIlyQUlZs1BLbEfv/Kk82iT2D7MAE+t+HcVxWK4o=
Subject key identifier: BB:C2:9F:95:B5:AD:40:FB:22:10:0D:B2:2D:BA:2F:E9:2F:6A:BF:02
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019AF208B8FF2FE7257EB60F0C00D75D7921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 145B
Signing time: Sat 06 Dec 2025 05:00:49 +0000
Manifest this update: Sat 06 Dec 2025 05:00:49 +0000
Manifest next update: Sun 07 Dec 2025 05:00:49 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: xjCY1oZgNAoET2PTCtGvdhcEoaG0DNly7zzrmgn8AxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:b8:ff:2f:e7:25:7e:b6:0f:0c:00:d7:5d:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Dec 6 05:00:49 2025 GMT
Not After : Dec 7 05:00:49 2025 GMT
Subject: CN=bbc29f95b5ad40fb22100db22dba2fe92f6abf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:37:0e:02:20:29:11:bd:6e:97:98:70:b1:
af:5d:1c:05:4d:62:43:72:14:e5:f0:0a:f4:80:a6:
51:a1:f0:80:5b:80:0e:7e:f4:1a:26:ef:af:75:1a:
18:23:ac:1c:a2:e6:13:85:c5:1c:90:8c:cb:bb:fa:
8a:37:8c:95:46:2d:78:df:3f:87:90:9e:f2:c7:c5:
bb:d7:8a:f8:8a:45:69:6e:bb:70:8e:64:86:f5:b1:
6a:46:e1:ed:24:b2:26:c0:43:92:cc:21:29:04:40:
a2:4f:2c:c3:9a:8d:b3:ce:61:34:c8:c0:b2:6f:23:
05:a1:02:ae:4a:84:fe:09:de:41:6e:19:22:6a:2c:
ff:05:33:72:84:05:7b:85:2c:24:8a:06:8c:c9:3f:
67:52:d9:c6:7c:89:c3:12:97:b0:ea:16:cd:33:d6:
3b:98:d3:73:bb:70:52:cc:6b:12:45:15:ca:1d:2d:
c0:6d:38:30:d3:0f:3c:5a:ee:a6:12:52:6e:3e:34:
5a:7b:69:9c:97:62:40:f5:fd:89:e6:c5:05:2c:02:
9a:18:97:43:8a:ca:85:88:05:3a:7f:3c:25:69:47:
01:27:f0:ac:04:94:d7:34:f8:c6:1d:f9:90:24:40:
bf:12:25:da:eb:d8:79:aa:97:90:88:fb:49:21:26:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:9F:95:B5:AD:40:FB:22:10:0D:B2:2D:BA:2F:E9:2F:6A:BF:02
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:f5:b3:99:5b:21:e2:de:e3:55:47:2a:8f:c7:67:b5:da:
74:a1:50:51:eb:28:4b:d5:cb:b9:17:1b:26:12:ae:1b:33:cb:
ec:eb:a3:bf:78:74:19:1a:44:56:b1:3d:b0:99:fd:5b:de:c8:
15:70:ca:2c:d6:72:07:cf:2e:db:7b:4c:53:a9:c3:6c:52:ea:
b8:ce:1f:a9:76:67:7b:38:36:62:21:93:bd:de:aa:e1:6e:17:
1a:ff:d2:f6:8b:89:a3:9d:1e:1e:28:2e:75:2f:df:2b:97:8c:
54:22:dd:3c:55:d6:c4:51:3c:8a:5b:df:66:33:e5:bd:11:11:
c1:95:de:9a:72:ca:28:73:50:b7:64:4f:d7:a6:d2:48:e5:99:
03:b5:6d:80:54:de:aa:1c:63:9d:36:71:6d:c8:4a:25:d5:f4:
0d:a5:76:61:00:35:58:a5:e9:99:04:54:e8:4a:f2:b4:19:2d:
d5:d9:a8:cc:f0:37:8c:7b:da:5f:96:46:62:c6:98:26:41:7e:
c2:21:8d:29:a5:b9:1a:70:d8:81:78:1d:1f:f5:74:7a:aa:97:
c8:32:c1:ef:76:07:98:0f:0e:d6:cf:a3:81:92:50:89:52:a6:
61:ff:95:ab:d8:93:a6:bd:59:ec:b9:20:18:f2:8c:40:b9:85:
a3:eb:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:59 2025 by rpki-client