This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File: 0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier: 8pnspHCIdZGTYGYLt6A5OMOiLY4cFVe8NeMbafzA0fw=
Subject key identifier: CF:7D:51:BB:51:59:44:4E:33:47:66:DB:6C:D4:64:16:1C:3B:34:7E
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer: /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial: 019B3FB5C0BAC662593CA0353405D0CAC760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 07:00:34 +0000
Manifest this update: Sun 21 Dec 2025 07:00:34 +0000
Manifest next update: Mon 22 Dec 2025 07:00:34 +0000
Files and hashes: 1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: 5U+99DalIndsep99R0BEIJMcX/N+NDFq0il+8sK5muA=)
2: 8XGnOFo1FHSecbZbo8eEhjcVsfE.roa (hash: andmj5YDiGTGVfrRQg/eep/3FAAkG8C2BqXOT6WzLpo=)
3: qRGjLQntvBAqN_Xt7aIS90yUBHc.roa (hash: 2bXJCM8WwuebfGJQ/9C7eiLENqlhXscF/6cLG5KAEvE=)
4: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (hash: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:b5:c0:ba:c6:62:59:3c:a0:35:34:05:d0:ca:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Validity
Not Before: Dec 21 07:00:34 2025 GMT
Not After : Dec 22 07:00:34 2025 GMT
Subject: CN=cf7d51bb5159444e334766db6cd464161c3b347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:e5:d7:41:26:04:a4:eb:a9:c8:64:a4:91:
96:c1:61:43:6a:e1:1c:88:e5:3d:89:ab:f4:79:d0:
5c:ba:f2:e0:d9:67:81:16:20:7a:1f:e9:e1:8d:c2:
e6:a5:48:ff:08:1d:5d:17:3a:97:51:ec:64:15:4e:
c9:fd:8f:15:b4:ea:b3:2e:fb:43:46:da:05:25:99:
ad:92:7e:c1:bc:05:53:ce:25:0d:65:59:86:61:85:
0e:2f:b3:61:01:41:ca:65:76:23:11:ee:52:90:07:
f5:84:92:7e:87:11:63:aa:3b:8d:92:b6:6e:b9:cb:
70:49:4d:f9:75:b7:bd:06:18:2c:da:af:e8:ba:7e:
68:3a:90:b0:2a:68:01:ba:09:2d:c3:94:51:6c:4f:
8c:40:2c:3f:f8:60:d6:89:6b:f5:dd:41:1d:1b:e7:
23:2c:76:da:c0:fa:24:00:dd:d5:47:6e:df:b6:f0:
b7:8b:82:1f:01:c2:4b:af:36:79:38:a5:40:bf:f8:
13:b0:a4:91:e1:b7:d5:5e:7d:5a:21:8a:a5:2a:70:
de:c1:4f:db:6f:2f:f3:cf:4b:6f:e2:9e:88:f5:71:
bd:25:6f:25:84:56:75:3b:41:92:2e:3c:d1:9e:d8:
54:da:a1:bf:3f:33:04:35:81:23:b7:3c:e7:1b:1f:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:51:BB:51:59:44:4E:33:47:66:DB:6C:D4:64:16:1C:3B:34:7E
X509v3 Authority Key Identifier:
keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:08:57:1c:2e:f3:2a:85:a1:e0:76:35:12:bc:91:3b:95:
a8:2e:bc:33:03:29:56:f5:2b:9a:02:44:a0:4c:39:ee:56:74:
a5:73:cd:d8:85:64:90:33:c5:e2:71:52:7a:a1:a3:ce:65:c9:
52:99:0f:1b:b3:77:d7:e9:a3:eb:2e:d6:a7:88:58:de:4e:3e:
a2:e0:c5:34:b7:2b:1f:20:5b:b1:f1:6c:89:5d:e2:8a:43:a3:
9e:bc:8f:fb:03:12:db:6e:75:90:22:e9:7b:06:02:1c:7c:26:
96:5f:ea:ff:3b:a2:ff:a2:b9:12:8b:cb:0b:3d:73:8c:07:2d:
2a:f1:fa:8b:8d:81:e2:c8:04:23:a0:e3:06:24:04:1f:f0:c9:
b6:82:60:ac:65:81:f0:72:9a:25:02:79:b3:3b:9f:0f:be:e9:
e3:8f:3d:a9:47:fe:4f:cd:01:77:6a:1d:a7:2d:d8:d3:6a:07:
2e:dc:ba:1b:9e:2c:60:b0:fd:a3:ac:5b:70:95:3f:4a:bf:b1:
45:47:60:a0:65:1e:4e:72:5e:d0:fd:32:0e:ee:16:ed:0e:84:
bc:3f:1e:bf:43:cf:76:15:1b:01:14:14:e4:fa:60:59:55:1c:
ff:38:f1:b1:8e:4e:8e:45:a1:87:97:8a:d0:cb:b0:7a:09:75:
7a:68:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:35:41 2025 by rpki-client