This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: nQHLemsW6MEoJXzfInAbMAReMsHCxRHQXhyYInDOC58=
Subject key identifier: 60:50:8F:2D:EF:59:4F:59:F6:D9:44:72:E4:93:D0:9B:7D:FC:75:84
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019AF2AD40F8DBD22CC8E251A1D5906510BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 03E4
Signing time: Sat 06 Dec 2025 08:00:31 +0000
Manifest this update: Sat 06 Dec 2025 08:00:31 +0000
Manifest next update: Sun 07 Dec 2025 08:00:31 +0000
Files and hashes: 1: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (hash: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=)
2: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: +jJj/R/jnlo0nWxfhFQEr491XWRZTUn4Df5JSRhU3Sk=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:40:f8:db:d2:2c:c8:e2:51:a1:d5:90:65:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Dec 6 08:00:31 2025 GMT
Not After : Dec 7 08:00:31 2025 GMT
Subject: CN=60508f2def594f59f6d94472e493d09b7dfc7584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:da:f8:72:a6:24:79:42:c1:cd:e5:de:2b:
d2:30:a9:94:b2:8a:a0:7d:ee:aa:84:bb:93:c5:0a:
03:3d:b3:28:d3:19:1f:f8:f8:a7:2d:42:6e:75:22:
ee:93:f1:8c:64:0a:69:50:c3:23:40:30:c0:35:42:
19:06:d0:94:67:cc:06:0f:bb:d9:d3:44:c5:67:ae:
3e:c4:ae:02:ee:44:54:d4:b6:a2:ea:b6:8a:fa:67:
12:6f:56:cb:26:08:fa:cf:a8:2f:41:94:7d:30:2f:
c0:c4:be:6d:04:64:22:3c:df:5e:ce:8f:d3:f5:fa:
0b:0d:be:49:a0:6c:a8:86:22:b0:39:a1:cf:31:5f:
55:4e:1d:82:9a:85:83:fe:35:7e:5d:2c:35:8e:2c:
be:50:dd:9c:e8:fb:6a:4f:04:21:79:8f:e3:60:87:
ce:71:ee:11:c1:88:a0:17:99:b4:a7:f8:a5:57:41:
0d:60:18:f7:ac:31:ea:12:cc:e5:cd:2d:6e:90:e4:
cb:85:79:9c:2e:fd:6a:cc:32:9d:4a:56:cb:5d:2d:
5b:6e:05:8f:11:9c:5e:68:8b:12:5a:a0:e3:a4:e6:
bb:b5:5d:59:1a:7f:b9:9b:d0:a6:42:39:9c:61:5a:
f4:5d:42:96:c3:4a:64:1d:3b:cf:e1:56:8a:e3:a5:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:8F:2D:EF:59:4F:59:F6:D9:44:72:E4:93:D0:9B:7D:FC:75:84
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:96:69:00:f5:c3:71:82:07:5e:87:73:13:9e:e3:30:36:6f:
9b:ec:b0:36:f1:48:f9:92:4a:d2:de:40:bd:5d:fd:b5:cc:12:
10:28:23:58:28:4e:d4:85:ad:49:fd:23:70:9c:fd:97:66:7e:
7f:54:6e:1e:76:b8:82:ed:62:28:b6:18:06:30:f6:d2:70:1f:
ca:a0:e0:f3:ac:39:02:92:4e:4d:ab:c9:2c:3e:14:9d:73:f4:
62:3f:f4:07:fa:71:da:fe:b5:4a:f6:b6:2a:68:69:71:9e:fc:
81:ce:df:e6:cb:98:0f:5a:fe:ed:b2:b3:d7:8e:f3:ea:40:c6:
e3:ff:88:14:30:d3:69:83:b0:83:f0:85:d4:01:24:97:32:cd:
36:70:84:86:1a:3e:7a:97:5a:b6:3b:4b:b6:c5:c4:12:7a:de:
13:b1:15:df:1d:b7:b8:b2:04:f1:e7:84:e8:d9:a8:a5:a7:45:
93:ec:9c:5c:b7:3b:33:2f:11:17:61:d2:2c:99:d5:5a:81:8f:
41:91:31:35:be:48:5b:6c:2d:0b:9b:a7:bb:a0:4f:be:7c:25:
8f:f5:d5:f1:f2:f0:1c:ee:d8:a0:71:7e:93:bf:17:d0:20:23:
18:84:0a:52:44:a9:a8:f1:0b:c0:40:3b:14:14:9d:a0:32:8c:
14:b8:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:34 2025 by rpki-client