This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier: CkrZoN9G/Lvr+4AsuPALApqVBWUF3HW9b3jNo6wRvPI=
Subject key identifier: 4E:A0:A5:22:E6:F0:94:C1:C5:29:D2:F8:BD:5B:EC:EC:46:2B:6D:E1
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019B3DFEE5AFDB4C210EA603DB7C1F222699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number: 1799
Signing time: Sat 20 Dec 2025 23:01:13 +0000
Manifest this update: Sat 20 Dec 2025 23:01:13 +0000
Manifest next update: Sun 21 Dec 2025 23:01:13 +0000
Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=)
2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=)
3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=)
4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=)
5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=)
6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=)
7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=)
8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=)
9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: hnOE4/WKaPZZFErJ1sjn0XvpUOFLOxmbGnYp1odCcCM=)
10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:fe:e5:af:db:4c:21:0e:a6:03:db:7c:1f:22:26:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Dec 20 23:01:13 2025 GMT
Not After : Dec 21 23:01:13 2025 GMT
Subject: CN=4ea0a522e6f094c1c529d2f8bd5becec462b6de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:b7:e3:97:f5:5a:a9:32:81:34:f9:3f:c7:
30:93:9f:62:2d:ef:da:8e:f4:36:15:10:c8:cd:59:
61:aa:a0:c6:c8:df:ba:c0:8f:ac:12:49:3b:bb:5c:
9e:7b:28:fc:e3:04:1b:c7:4d:1d:b9:2c:a6:c0:0f:
7e:e8:87:90:e6:47:8d:db:2c:06:8e:1d:e2:67:37:
32:77:79:72:84:77:b7:b8:51:ee:1d:70:8b:c0:2b:
85:da:93:44:32:9e:29:2a:23:8f:2c:e3:36:fd:ae:
21:40:30:76:cc:73:a8:ea:95:56:95:a8:4f:b6:97:
32:3b:1c:57:3e:3d:8f:0f:73:2e:11:2d:47:2d:a1:
dd:9d:15:62:18:f3:ab:78:78:61:80:69:0a:d5:6e:
1f:bb:9e:91:bb:5d:c0:3e:33:79:a4:f8:d1:f6:ee:
f1:80:c8:15:a4:1f:d8:f0:a8:26:f4:61:a9:5e:ff:
3c:09:10:b1:d6:de:70:a9:12:27:0d:77:99:8e:a4:
60:ae:a3:99:e2:62:fe:c9:f8:b8:14:77:6e:f6:ed:
2f:4a:86:da:50:26:c3:96:e4:b1:a7:9f:76:b4:4e:
44:c9:bf:ac:f9:08:e2:18:1a:85:2d:13:68:59:6f:
54:2d:d5:4f:37:a3:84:70:bc:c3:dc:a0:9c:f7:f7:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:A5:22:E6:F0:94:C1:C5:29:D2:F8:BD:5B:EC:EC:46:2B:6D:E1
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:2c:b5:91:b2:c4:91:9a:e7:04:6a:6c:83:78:e2:35:77:
27:45:d3:ce:8b:6d:50:c2:ee:98:6c:e9:c0:2d:f9:b8:5e:7b:
4f:3e:33:24:af:dc:a2:24:64:39:02:d0:98:ad:1f:33:91:6b:
a0:79:84:ff:78:09:05:28:ba:a0:4f:3a:67:f2:90:e9:9b:8f:
b6:8f:a7:72:d5:bd:4e:12:f3:27:3b:d9:f9:63:05:9c:78:43:
8a:ac:3d:e7:ef:82:3f:38:33:52:b1:66:81:70:58:75:e8:58:
eb:3c:08:2e:e0:6d:c7:a0:1c:0d:0c:91:53:b3:60:44:83:1f:
4c:cc:2f:3c:47:f4:1f:3f:d2:9c:13:e7:44:c8:2f:01:d1:5f:
5e:3c:3e:39:b9:3a:79:bc:6d:77:10:f1:cf:a4:9b:45:f2:9c:
b7:ff:fc:b2:0e:b1:13:7d:04:a0:30:41:a1:41:66:eb:12:57:
33:50:11:8c:df:c3:87:88:04:29:4b:eb:8d:bb:88:93:11:4a:
58:dc:92:79:64:2b:fe:f8:bc:c2:11:76:36:d4:14:be:bb:31:
c5:62:c0:92:78:73:a1:85:74:c4:0c:21:de:57:06:8c:28:2a:
e3:6f:ae:a4:a0:c9:21:05:9b:a3:f7:a2:c6:16:ef:90:8c:6b:
5c:da:10:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9/uWv20whDqYD23wfIiaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD
Eyg0ZWEwYTUyMmU2ZjA5NGMxYzUyOWQyZjhiZDViZWNlYzQ2MmI2ZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnm345f1WqkygTT5P8cwk59iLe/a
jvQ2FRDIzVlhqqDGyN+6wI+sEkk7u1yeeyj84wQbx00duSymwA9+6IeQ5keN2ywG
jh3iZzcyd3lyhHe3uFHuHXCLwCuF2pNEMp4pKiOPLOM2/a4hQDB2zHOo6pVWlahP
tpcyOxxXPj2PD3MuES1HLaHdnRViGPOreHhhgGkK1W4fu56Ru13APjN5pPjR9u7x
gMgVpB/Y8Kgm9GGpXv88CRCx1t5wqRInDXeZjqRgrqOZ4mL+yfi4FHdu9u0vSoba
UCbDluSxp592tE5Eyb+s+QjiGBqFLRNoWW9ULdVPN6OEcLzD3KCc9/dj1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6gpSLm8JTBxSnS+L1b7OxGK23hMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXgstZGy
xJGa5wRqbIN44jV3J0XTzottUMLumGzpwC35uF57Tz4zJK/coiRkOQLQmK0fM5Fr
oHmE/3gJBSi6oE86Z/KQ6ZuPto+nctW9ThLzJzvZ+WMFnHhDiqw95++CPzgzUrFm
gXBYdehY6zwILuBtx6AcDQyRU7NgRIMfTMwvPEf0Hz/SnBPnRMgvAdFfXjw+Obk6
ebxtdxDxz6SbRfKct//8sg6xE30EoDBBoUFm6xJXM1ARjN/Dh4gEKUvrjbuIkxFK
WNySeWQr/vi8whF2NtQUvrsxxWLAknhzoYV0xAwh3lcGjCgq42+upKDJIQWbo/ei
xhbvkIxrXNoQAg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:00:58 2025 by rpki-client