This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File: OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier: 7d7ECC8ClqYYlrihGK4VQ4P43PWIugeyBznLoOY0sfM=
Subject key identifier: F5:6A:36:38:37:02:FA:3C:B0:58:F2:65:EF:CB:CB:A4:9D:8C:93:AE
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial: 019B409212A3CB404F5463631B9DA21EBAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number: 0754
Signing time: Sun 21 Dec 2025 11:01:13 +0000
Manifest this update: Sun 21 Dec 2025 11:01:13 +0000
Manifest next update: Mon 22 Dec 2025 11:01:13 +0000
Files and hashes: 1: 4sh0yYbT80cSrTPvdQEkGETfVo8.roa (hash: 7RnvvHQkkS8YaZiuCDpplhOJhAdwXKsdDZ03EF+NYdQ=)
2: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: qbeK4dfowlN2jJtPnyowcQkY0AFPw/D9pohc86YomFA=)
3: T3WVNDq5fB7durp2xzBnS3GvikA.roa (hash: yDIX+9j0VmuYreUTlBxWuulf2dZWF2rW9eLhkcZnsyo=)
4: UPULz0BbmOL6oB1Lvph6s81bIVc.roa (hash: KEGK8PJbSBsiHtUKaY1bLTWtxHt/0jD8x2QpGJMF8nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:92:12:a3:cb:40:4f:54:63:63:1b:9d:a2:1e:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
Validity
Not Before: Dec 21 11:01:13 2025 GMT
Not After : Dec 22 11:01:13 2025 GMT
Subject: CN=f56a36383702fa3cb058f265efcbcba49d8c93ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:61:9e:76:2d:43:18:3c:b8:1f:b5:cb:66:
e0:3c:2e:35:bd:07:42:ae:96:4d:83:0d:7b:12:0a:
30:61:8d:8f:f4:b8:e0:9f:d6:ef:c1:bb:a4:7e:2d:
07:c1:6d:f8:15:73:03:c4:55:bd:44:94:f3:88:2e:
31:6f:82:d3:b4:00:6f:c4:9c:31:cb:00:08:f0:86:
b3:f9:1f:0f:4e:76:15:2f:b5:67:92:a3:25:69:41:
41:26:fc:4f:8e:8e:9a:07:e5:11:78:3e:6d:30:e8:
a6:ad:95:6e:60:e7:e5:b8:8a:88:ac:21:f1:54:1a:
af:4d:5d:6a:8f:2f:ba:ce:17:dc:f4:a5:c3:03:13:
56:84:8a:55:ae:bf:a7:d3:58:ba:a6:d2:3f:1b:8f:
80:ce:31:71:c2:e6:c6:7a:ae:b3:cc:af:ef:6b:dd:
bf:3c:c6:16:46:90:c1:c4:8b:71:e6:52:85:4c:ee:
d5:ac:b7:80:75:5e:4c:ae:c6:b3:a8:df:b5:b2:4c:
b1:74:27:61:c0:21:de:99:3e:56:28:ce:85:95:19:
1e:95:99:29:2d:2d:b8:6e:1d:14:f9:b7:3a:96:f5:
cf:14:44:60:4a:9d:76:40:2a:e1:6e:20:37:ab:c1:
66:15:c3:43:24:48:dc:7f:ae:98:ef:43:6b:fd:05:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:36:38:37:02:FA:3C:B0:58:F2:65:EF:CB:CB:A4:9D:8C:93:AE
X509v3 Authority Key Identifier:
keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:51:23:de:04:e6:37:7b:14:cc:1e:b0:e6:d9:99:b4:00:84:
6e:30:34:51:54:78:6f:67:0f:3a:7d:5f:4f:e7:72:df:26:6a:
b6:6e:aa:d5:24:73:57:e6:59:e4:95:d3:50:b2:3b:66:31:93:
38:8a:cd:d8:4a:31:e6:3f:10:52:3e:f4:91:85:9f:67:95:43:
11:96:ba:02:40:6f:8f:90:69:74:b3:de:e7:b3:81:e4:51:94:
1e:77:b7:b8:41:b8:b0:ae:27:f1:0c:1b:70:09:dd:dc:a2:e2:
08:10:47:b1:70:0c:cd:bd:50:a0:a5:8b:62:ea:41:82:b6:6a:
4b:f2:32:52:40:5f:8f:0c:87:2b:fe:03:09:ce:2d:62:45:a4:
a9:04:0c:67:c7:1d:b5:d0:d7:03:a9:9b:86:86:ac:15:28:97:
5c:26:2e:52:ab:36:e6:a1:c4:0f:44:ed:4f:5b:71:4b:7d:47:
87:ed:03:68:40:0c:3e:5c:8c:90:ec:86:d4:01:09:5e:34:39:
28:0c:0c:1d:01:0d:49:bd:ff:63:34:a3:f0:47:f4:8b:9b:af:
88:b9:90:63:6a:31:f1:3b:3f:e6:59:d5:7f:68:a5:9a:5e:e7:
0e:2a:e9:2b:c7:30:be:49:df:34:40:f1:65:5f:0c:d3:6a:67:
0d:b8:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:19:19 2025 by rpki-client