This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: NCfqYGa1kN92/5k3WEOrWDbi+Km+CzBJQ7KzyxpOTTE=
Subject key identifier: 94:0B:DE:4C:2D:67:A0:77:7D:F5:15:70:A1:33:0A:7C:38:72:7A:86
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019B3F119698C85223A20986129E47F0454C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 14D2
Signing time: Sun 21 Dec 2025 04:01:15 +0000
Manifest this update: Sun 21 Dec 2025 04:01:15 +0000
Manifest next update: Mon 22 Dec 2025 04:01:15 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: ggyhSZ8V6z9+wkshDWtBg4X3UYlxunT3RftggKx5G1k=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:11:96:98:c8:52:23:a2:09:86:12:9e:47:f0:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Dec 21 04:01:15 2025 GMT
Not After : Dec 22 04:01:15 2025 GMT
Subject: CN=940bde4c2d67a0777df51570a1330a7c38727a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:05:02:e7:fc:69:6e:db:57:c0:2e:f4:60:
03:c3:41:72:d7:6c:f6:62:08:a1:1d:7e:ac:bb:6d:
fe:64:84:52:55:f0:05:2b:0b:dc:e7:97:8e:9d:b6:
e0:5e:42:1f:a8:6e:58:16:b8:76:19:26:ac:c2:62:
21:74:14:7f:9c:23:22:ee:22:7d:00:66:ef:9d:7c:
f7:47:67:5f:a0:b0:23:d1:f9:b4:9e:f0:d9:31:0c:
00:3e:16:bf:83:d8:58:31:58:11:df:2b:fb:f4:61:
df:21:d2:bf:cc:4a:56:34:f4:49:be:49:e3:b9:83:
47:50:b6:b9:8b:15:5c:25:33:d1:63:20:f6:98:e1:
57:d5:7d:3e:75:f6:ea:54:1f:c1:c0:ed:c1:28:88:
c3:3b:15:b9:c2:2f:e1:0b:06:dd:3b:ba:93:4f:f9:
8a:91:a6:e8:b3:dc:9f:d4:0e:92:73:5c:e7:cd:c5:
cc:6d:a7:66:86:bc:a7:3c:61:b5:b3:ae:58:b2:69:
e5:5f:14:fb:61:b0:90:bf:c4:b6:9a:74:21:e4:52:
59:50:f3:8d:d5:a8:13:ba:0f:fb:e3:14:70:2f:5a:
a3:f8:3f:0e:a8:aa:df:5b:5f:03:03:98:87:b4:4f:
ea:bd:e8:85:9a:08:d1:03:1b:67:ed:91:b0:07:77:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:DE:4C:2D:67:A0:77:7D:F5:15:70:A1:33:0A:7C:38:72:7A:86
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:10:7d:13:98:be:75:44:8d:66:ff:57:3e:2f:77:0a:8c:
45:cf:45:e1:0c:de:c0:53:7c:44:ba:3f:b0:a0:2a:c3:f2:f4:
9e:a8:df:a2:9a:bd:16:5a:de:da:eb:4b:10:40:ab:d7:00:b1:
0a:ae:b4:26:67:12:bf:a1:f0:3d:9f:9d:ef:71:b1:64:32:9a:
76:80:99:b0:9e:b3:47:6a:a4:d9:56:a0:8a:24:85:8c:ef:2b:
57:cc:82:df:5e:6b:9b:c5:ae:29:59:18:02:a7:77:d1:27:59:
0a:b6:e5:ea:9d:e6:c1:32:ca:de:26:cf:bd:dc:89:e7:28:4a:
b4:61:3a:2a:04:e1:31:b8:c8:9d:2c:c5:17:2c:07:e0:9c:90:
35:ae:6d:45:ea:91:20:42:a1:f7:69:8d:8a:71:aa:7a:ff:90:
56:27:ad:34:36:b7:7a:fa:e1:db:91:62:1d:88:2e:13:50:46:
a0:ab:1e:48:b2:76:af:0d:88:24:fc:14:fc:df:c4:9b:11:94:
2b:61:2c:e7:e1:07:3d:f0:d6:60:25:cb:9c:aa:97:29:e5:29:
c3:b1:b8:a4:01:89:9f:a5:72:32:3a:62:8d:11:6b:e2:cd:8d:
c3:10:a0:4a:c8:db:42:88:2a:2d:2c:7c:e9:b1:da:20:80:33:
65:35:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:54:45 2025 by rpki-client