This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: ixeOAzKQZ+ilFNyEqyd/D7Qn4GZJGL9gO9x1lQvLwZM=
Subject key identifier: 87:0E:B4:C3:51:AA:98:64:71:32:7B:B5:FC:55:CF:5C:CC:C3:39:16
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019B3D233DFF1EFBBE0DB1833FA9D7655B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 14D1
Signing time: Sat 20 Dec 2025 19:01:18 +0000
Manifest this update: Sat 20 Dec 2025 19:01:18 +0000
Manifest next update: Sun 21 Dec 2025 19:01:18 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: 6UE/KynULNgZjORKNbABD1xvBhEUdc9xoRp1YLb8Y2g=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:23:3d:ff:1e:fb:be:0d:b1:83:3f:a9:d7:65:5b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Dec 20 19:01:18 2025 GMT
Not After : Dec 21 19:01:18 2025 GMT
Subject: CN=870eb4c351aa986471327bb5fc55cf5cccc33916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:9d:63:f2:3e:39:e3:ab:ab:0a:a1:52:48:
f9:57:c3:f3:07:cb:f0:bf:77:73:4b:ef:0a:03:55:
52:4f:ab:20:a7:15:04:b1:4d:bf:a1:0c:d3:83:2e:
b0:ba:c6:8f:68:54:ce:fb:25:15:2c:9c:9f:36:36:
26:4f:50:83:8f:17:c1:82:c1:68:ab:a4:15:de:e7:
0f:e6:7c:b2:f0:64:ba:c1:7a:51:7f:f2:16:39:45:
de:e7:69:55:b5:35:ca:cf:d3:cc:9a:8f:dd:ea:a7:
a8:cc:16:0d:67:0a:90:ba:0b:27:6d:c5:a4:eb:80:
27:8c:fe:57:e9:66:55:44:82:ba:b0:17:cf:6b:ce:
62:bd:9f:d6:25:ec:4e:97:cb:cc:42:09:98:9d:f0:
ca:a1:22:79:eb:22:79:6f:9c:92:d4:72:87:39:ad:
da:4b:97:48:f8:a9:a5:e6:a9:ad:89:28:67:db:17:
70:91:05:4b:fa:14:b2:79:ff:0e:76:93:b1:2c:a4:
83:61:ea:27:95:f9:0f:6d:5b:5d:76:92:3f:f1:02:
45:bb:8d:82:34:7d:e6:8a:68:db:5a:54:a3:5d:c2:
a4:fb:54:32:19:09:3b:ea:48:40:17:32:b6:8a:7b:
0e:ea:ac:61:9c:1b:ac:0b:7f:e6:8b:ad:d6:d1:77:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:B4:C3:51:AA:98:64:71:32:7B:B5:FC:55:CF:5C:CC:C3:39:16
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:08:5c:ea:2d:b7:81:b5:85:2a:ce:67:0e:48:6f:c0:f9:
ae:66:92:2e:12:f7:0a:7a:42:47:73:46:88:2a:ea:f6:c9:a6:
d9:1e:38:0b:ad:e7:c1:74:ca:a4:4f:8b:0b:47:46:2d:97:2b:
c7:a4:44:4d:bd:a2:be:71:0f:eb:1d:7f:67:3c:67:03:3c:47:
4a:5a:03:12:06:62:f9:60:a7:5a:b0:f9:8d:52:01:db:59:d6:
59:ed:57:5d:82:cd:5d:14:c3:b6:b6:87:cf:e7:5f:c1:1c:f2:
8b:f2:dd:80:a1:be:92:87:66:56:a0:8c:31:77:86:34:d4:47:
59:c0:5b:6c:1a:a3:d1:4d:79:8a:2b:87:80:40:c6:a6:0f:eb:
a0:7e:9e:be:3b:a6:72:ff:72:81:d1:63:b0:dc:1f:98:dc:52:
e2:27:cc:3a:a3:96:e2:93:d4:d5:d4:c6:df:2b:71:e4:05:c8:
57:1b:0d:cb:e1:23:79:40:7c:89:11:83:f1:c5:2f:b2:c1:8b:
a7:38:c4:69:d3:7a:df:16:9b:86:6b:9a:b3:f5:96:31:8f:55:
73:50:60:9d:d7:c9:f1:66:71:07:b5:dc:cb:09:59:ea:7f:06:
79:85:6f:29:a3:26:7b:c5:6d:36:78:94:63:76:5b:5f:91:80:
2e:4a:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:38:47 2025 by rpki-client