This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: 9LevqP1aUu9I00en5HmyOcYHlpB4n4VG3GPrjfz8pdo=
Subject key identifier: 8D:24:3A:6A:1F:2A:BD:2E:CA:B9:30:13:29:CD:CF:91:CF:CB:1E:E2
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 019B22507D46979A99B3C02EBA5A090370C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 177F
Signing time: Mon 15 Dec 2025 14:00:58 +0000
Manifest this update: Mon 15 Dec 2025 14:00:58 +0000
Manifest next update: Tue 16 Dec 2025 14:00:58 +0000
Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: Jg7VaqQvqDsW4BNuSAT6RzZplvThLQt4t2CWkYcneZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:50:7d:46:97:9a:99:b3:c0:2e:ba:5a:09:03:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Dec 15 14:00:58 2025 GMT
Not After : Dec 16 14:00:58 2025 GMT
Subject: CN=8d243a6a1f2abd2ecab9301329cdcf91cfcb1ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:43:b8:87:bc:9d:f8:a7:31:54:b8:c4:43:
81:a5:a4:45:0a:3a:61:c9:3a:30:80:50:98:c6:6d:
cc:d7:32:59:b7:44:97:c3:1f:8c:4b:32:8b:2d:ac:
b0:0d:f0:b7:35:00:23:c1:b0:c4:d4:0f:8c:07:d9:
b7:7f:e9:a4:65:30:90:08:bd:42:77:de:4f:66:bc:
ef:05:b0:c1:b8:0b:64:8c:52:2b:e7:42:cf:2f:e1:
df:ea:78:5d:5b:38:12:e0:12:a8:c7:13:cd:62:51:
b3:1e:88:34:7d:a8:fd:c8:60:51:eb:f9:27:93:c2:
c3:6f:00:0e:87:01:b6:9e:07:66:d5:9f:d0:fe:b4:
5c:c7:7f:35:c1:d8:24:2a:6a:db:a1:17:e5:69:26:
21:3a:ff:73:ec:68:e3:fe:ef:9d:49:eb:c7:4f:1a:
95:7d:ca:ce:5d:15:c0:8a:68:d4:05:21:47:98:0e:
0e:bb:22:1d:43:31:68:d5:ed:ed:45:15:16:19:47:
b7:72:d9:a4:ce:92:e6:ae:4e:63:12:7a:a6:8c:47:
62:98:e0:f5:7e:db:8c:87:03:14:cc:31:0d:d4:8a:
39:2a:9d:02:50:85:c7:05:ed:6a:94:85:c6:a2:34:
fa:23:af:85:55:16:ac:de:3b:00:f4:53:03:e4:fb:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:3A:6A:1F:2A:BD:2E:CA:B9:30:13:29:CD:CF:91:CF:CB:1E:E2
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:40:90:a5:7c:75:fc:d0:94:02:68:42:21:eb:18:28:47:
bb:5e:09:60:46:66:a1:cf:99:2d:02:3a:15:1b:4a:b5:a2:9d:
a4:ff:c9:32:11:96:7d:23:d6:ad:9b:08:74:35:65:37:43:57:
d9:d4:d7:d6:1e:b1:85:ce:97:e5:9b:d0:c3:b2:a4:ee:88:88:
86:93:5f:86:97:68:85:d2:be:56:f0:1f:f9:40:df:2f:c5:10:
4d:83:1a:8c:6c:0e:12:cc:91:dd:80:04:8b:0d:c8:d4:b0:0f:
54:dd:c9:f2:43:ac:a3:70:a8:74:91:9e:97:78:cd:7b:92:b7:
bc:24:6f:2a:15:0a:43:d3:d5:38:d5:ef:94:44:4e:3d:8d:ce:
07:eb:8c:9f:57:4b:29:58:df:b0:a4:2e:ca:75:33:53:05:e7:
b7:4b:3a:e3:89:a3:72:88:d7:f7:e6:0c:81:55:b5:c7:77:c0:
d1:fd:6e:e2:6a:c4:58:97:80:15:53:6c:af:03:10:46:bf:f9:
e7:77:dc:f0:cc:61:91:aa:01:3e:da:05:47:ee:96:9f:58:97:
b6:a1:2f:11:51:61:2d:45:e7:38:be:e4:3d:7d:af:bb:a3:db:
8d:99:b9:1d:43:42:96:24:4b:de:ef:ff:6c:8e:06:6f:b5:d3:
6e:e9:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 21:34:13 2025 by rpki-client