This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: sT/58vfK6u6n3TcyIn1ix3gtJgsU/cjvIgBlu2grHuo=
Subject key identifier: 05:32:41:1A:B0:98:42:BE:D2:C5:40:00:64:9F:9D:B1:9D:CD:F1:CF
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019B1D29E0C263576B69EF6FB3A058531FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 17CB
Signing time: Sun 14 Dec 2025 14:00:42 +0000
Manifest this update: Sun 14 Dec 2025 14:00:42 +0000
Manifest next update: Mon 15 Dec 2025 14:00:42 +0000
Files and hashes: 1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=)
2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: XP4/UtLWgrtt8kAnx2ytqHPVWwNTLR22u4g/BoeNvjg=)
4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=)
8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1d:29:e0:c2:63:57:6b:69:ef:6f:b3:a0:58:53:1f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Dec 14 14:00:42 2025 GMT
Not After : Dec 15 14:00:42 2025 GMT
Subject: CN=0532411ab09842bed2c54000649f9db19dcdf1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:17:d7:b4:48:ca:4e:d3:4e:0e:c4:59:1a:
51:0b:12:54:93:91:01:86:cd:1b:2c:14:e1:c6:64:
91:cb:17:f9:f2:7a:0d:27:b1:f8:cb:8e:a5:e7:79:
98:aa:61:53:76:1e:a7:12:3a:45:f6:a9:8b:5c:15:
e4:12:fc:eb:57:93:bc:9e:80:51:55:df:7f:7f:cb:
fc:9e:ea:a5:aa:58:f7:4a:8a:3b:ff:83:eb:06:21:
57:b3:94:25:9c:df:58:ab:f4:a7:53:ab:70:5f:9a:
94:92:87:e2:c2:ad:11:95:ae:0d:c6:a2:03:40:8a:
7a:d7:7b:7c:c7:d9:a1:a6:8e:8e:bf:48:4e:ee:4f:
40:ca:18:0f:1b:10:38:eb:c5:2b:ad:8b:78:fc:8c:
76:06:a0:e0:85:b4:c0:7f:aa:e2:da:48:16:e3:65:
98:f1:59:c5:41:b4:ff:fa:2a:ff:0a:e2:3c:08:b4:
d6:42:09:76:68:c9:17:da:90:95:31:a1:8d:aa:3e:
9e:51:a7:76:14:44:e4:69:3b:e5:a5:d4:af:39:51:
96:41:55:a0:9a:1b:3d:43:dd:b5:8a:7d:7e:83:4c:
31:88:eb:6e:31:de:67:70:d8:17:b0:00:3a:a8:70:
cd:f8:1e:39:f4:46:49:ea:a5:43:90:6e:21:76:46:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:41:1A:B0:98:42:BE:D2:C5:40:00:64:9F:9D:B1:9D:CD:F1:CF
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:f6:12:49:29:fd:64:56:ff:8d:fd:ea:0d:ef:37:27:e1:
0a:30:b2:c7:ae:c6:58:af:de:6c:72:96:bb:13:c3:00:dd:5b:
77:aa:d0:77:4b:82:39:21:04:e8:0d:44:1a:4a:70:90:19:c5:
cd:07:82:59:ef:da:70:62:d0:9d:88:12:b2:f7:79:1d:2d:e8:
61:cd:4d:16:04:be:d8:79:32:16:2c:85:27:dd:3c:a0:67:a5:
c4:42:39:e9:dc:26:f6:54:54:c5:61:41:c6:fd:b2:9d:97:82:
8f:ba:cf:6f:26:95:85:f2:dc:00:65:55:73:64:20:a0:f9:33:
f6:92:ab:1a:8a:bb:ff:28:e0:ad:f3:45:85:d0:23:80:c6:09:
74:52:2b:17:16:01:45:ff:25:03:97:39:ee:8f:f3:e9:b7:1b:
fc:a8:5a:42:10:72:82:ff:15:f3:4a:27:a1:b7:81:2e:cb:1e:
3a:9a:18:52:f8:89:43:84:40:2d:72:cf:56:a9:40:8e:f2:ff:
9d:41:da:e2:f3:22:54:4d:2a:c7:83:de:ce:a6:9d:15:b1:ad:
82:e1:af:c9:e7:64:5b:78:aa:aa:3b:8b:a7:5a:fa:fb:cd:05:
86:f8:f0:aa:c0:82:6e:52:3e:ec:56:0b:73:2d:58:af:8b:b6:
fe:36:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:16:53 2025 by rpki-client