This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: FFk6H66Rm57rirZPB+wRjzqNZVdo1ZFEmUwjBAw9RWM=
Subject key identifier: C4:1F:DA:BB:64:B3:BE:8B:37:4E:CA:4E:A9:E0:40:8D:C1:14:14:44
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 019B3E6E11329A9F379ABB8074BCA552A7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 16F0
Signing time: Sun 21 Dec 2025 01:02:39 +0000
Manifest this update: Sun 21 Dec 2025 01:02:39 +0000
Manifest next update: Mon 22 Dec 2025 01:02:39 +0000
Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: hUMiE1jyQB/MznlyaJ/S69qpDEwNQoX2GzJVmavZOgU=)
3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6e:11:32:9a:9f:37:9a:bb:80:74:bc:a5:52:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Dec 21 01:02:39 2025 GMT
Not After : Dec 22 01:02:39 2025 GMT
Subject: CN=c41fdabb64b3be8b374eca4ea9e0408dc1141444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:2a:bd:55:b1:0e:26:14:23:99:5f:18:23:
25:72:b8:6c:f4:8c:6a:b8:9b:94:96:6c:b7:f2:3d:
6b:13:ee:0c:d9:df:74:62:41:16:19:97:20:9b:89:
72:8d:47:2d:af:9b:35:45:80:61:7c:16:1e:d2:fc:
d7:c9:aa:dc:00:8e:e2:e0:a8:12:d1:54:1a:42:23:
60:13:c3:b0:50:c2:e9:17:8c:1c:9d:5a:78:30:84:
06:cb:59:66:0c:61:35:b2:24:cf:74:04:8f:70:91:
6c:73:f8:cb:98:27:77:8e:3a:f6:37:a7:c1:b1:7e:
35:b3:87:e9:0e:ad:67:4a:3f:29:26:26:75:db:57:
09:29:a7:43:d3:36:0d:a3:c8:ab:2e:ce:4c:d9:ac:
e2:35:80:0f:f9:5b:60:f1:3f:d6:a4:4c:aa:57:d2:
c3:58:c6:6f:74:28:86:c8:f2:a6:6e:a0:77:f8:83:
5b:fa:dc:9f:64:c1:78:e8:12:49:50:95:b0:b4:55:
71:38:12:23:e3:98:3e:fa:47:39:41:77:65:71:c8:
9b:a3:7d:dd:d0:6d:e0:c1:a6:41:17:d9:c7:d5:a1:
bf:37:1e:c8:24:8d:be:79:a8:a5:8d:5b:cd:d7:46:
d8:b7:34:18:d7:be:ff:a7:27:2e:16:4e:89:e5:58:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:DA:BB:64:B3:BE:8B:37:4E:CA:4E:A9:E0:40:8D:C1:14:14:44
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8e:e6:66:85:c0:82:ab:31:f8:fe:a7:01:06:21:50:fe:38:
83:a0:22:7f:21:4b:a3:27:d0:59:4a:17:59:0b:d3:28:82:53:
4a:4c:0a:0b:e9:a2:7d:1f:52:94:0c:68:a6:0e:89:9d:df:82:
e7:35:b1:c7:7e:70:64:11:3f:f7:70:8f:e1:33:a1:b0:a1:d5:
3c:ec:e0:5b:fd:ef:ad:a6:9c:31:26:66:6a:ab:cf:01:0b:e0:
de:2e:f8:1d:00:ba:cc:29:49:f4:b2:f8:f9:bd:08:03:5f:ac:
38:53:d3:5f:c4:62:31:1b:29:1a:60:1a:ff:61:eb:5c:f7:df:
f6:30:33:a1:69:94:f0:8a:19:ba:87:4d:c1:8c:13:da:c1:5c:
9e:3e:35:fd:b8:b5:5c:82:f6:b7:2a:24:25:6e:45:05:84:c6:
91:65:e8:30:55:6e:2a:d3:fd:77:6a:f6:c6:7d:23:e2:91:d3:
58:f3:01:f1:3c:80:01:ad:92:d1:05:7b:c5:8f:72:b8:c5:97:
59:62:ef:ba:9f:87:5f:31:59:cf:ca:55:d0:fa:46:c1:97:59:
c4:f2:dd:db:d2:dd:29:43:18:5a:c1:7d:49:30:34:db:cd:e7:
55:02:7f:9b:94:ef:f1:07:3c:77:97:dc:55:8b:af:8e:7b:b7:
2f:64:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:54:04 2025 by rpki-client