This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 82262g/OpjoxcrTlDA8LgkEqEm6mhnv8pxSpim0qTu0=
Subject key identifier: 5F:41:4A:71:BE:54:B7:C2:E2:A2:50:A8:08:8F:61:4A:C4:3D:D3:91
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019B3F489C9D4745308C8D007D374447CFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 178C
Signing time: Sun 21 Dec 2025 05:01:21 +0000
Manifest this update: Sun 21 Dec 2025 05:01:21 +0000
Manifest next update: Mon 22 Dec 2025 05:01:21 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: iw9o5YKsdic8utfbUcal62pTG98VA6qxxsQ3EmvCUg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:48:9c:9d:47:45:30:8c:8d:00:7d:37:44:47:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Dec 21 05:01:21 2025 GMT
Not After : Dec 22 05:01:21 2025 GMT
Subject: CN=5f414a71be54b7c2e2a250a8088f614ac43dd391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:aa:17:50:ac:70:dd:02:4a:67:82:e7:06:
bb:ea:60:71:c3:0f:a5:c0:a5:eb:bc:c7:70:6c:31:
1d:f5:60:9a:a8:16:d4:f8:ce:ba:ec:ce:43:c7:4d:
35:ab:ea:24:b2:e4:77:88:9e:2a:8e:7c:d0:d5:da:
e9:f0:9c:da:d3:03:20:eb:45:26:ad:0f:43:12:ea:
22:ac:e5:fc:fd:17:3f:21:cd:d6:a3:d5:6f:53:61:
8b:4f:91:2a:99:2a:07:a9:cf:15:f9:10:c0:4d:26:
aa:95:13:cd:64:8a:07:d4:bd:a7:c2:0a:a3:03:e4:
8d:8c:89:ed:af:cf:f2:b1:00:fd:dd:6e:4f:d7:71:
b4:c4:62:03:f4:c7:18:98:8d:fd:71:40:a9:a3:86:
eb:61:d4:0a:62:43:24:b8:94:9f:94:c7:e1:12:64:
69:35:76:e9:f2:32:3d:46:20:79:20:1b:20:06:08:
e7:65:5b:b4:7d:de:ab:33:2b:38:ac:c5:df:09:54:
f8:f7:22:d9:1b:0e:da:5a:97:3a:0e:ef:d3:77:5b:
b8:9b:39:92:58:c5:d3:96:e4:5c:8a:0e:a5:f1:8a:
1e:df:7b:dc:6e:1b:71:37:89:86:b1:72:af:a9:e4:
18:28:5f:31:9e:af:b3:88:03:54:ef:ad:0c:14:7c:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:4A:71:BE:54:B7:C2:E2:A2:50:A8:08:8F:61:4A:C4:3D:D3:91
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:b5:85:35:a0:5c:4a:78:44:13:d1:1f:b6:74:a3:e4:c6:
42:b9:31:e6:86:49:8a:e9:c6:5d:ca:60:d8:62:36:26:4a:7a:
69:1b:e0:7a:ca:b1:db:29:20:4c:2c:c4:a1:34:09:b0:91:f9:
09:44:37:77:47:a6:47:1b:57:22:88:4e:ac:ee:24:ce:98:b7:
ca:1a:4d:8c:ea:34:ad:07:94:37:e5:53:39:93:5f:12:51:1e:
c0:b8:65:98:68:39:5d:2f:36:bb:3e:68:57:63:fa:b1:f4:42:
ad:50:74:4c:b0:3c:82:8e:aa:69:7b:d0:04:80:6a:b6:a4:68:
40:5f:d8:9c:b4:d9:fc:98:ee:c3:f9:b6:98:44:ac:28:6a:38:
5c:b7:73:3d:b6:c1:bc:18:68:b0:18:0f:7b:7c:0d:44:9d:d2:
30:db:7d:87:0f:c4:80:5e:48:9a:c5:66:db:19:7b:91:e7:40:
24:c2:25:ae:a1:ab:1f:55:ab:d7:19:12:b5:1f:d9:eb:e7:67:
ee:a5:15:5f:52:59:66:36:93:af:f6:19:71:04:c3:75:2c:71:
03:a1:57:87:5e:c9:24:a5:d4:1d:a2:09:ae:63:02:04:e6:56:
e7:c9:ec:58:18:c7:a9:8f:76:3f:d4:a0:46:97:69:7a:60:dd:
ca:48:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:15:18 2025 by rpki-client