This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier: WJl6B7wDGlA99rQXcww/PHyUaQI/ka2LMjZECerCBtY=
Subject key identifier: DF:5C:17:28:48:87:5A:E7:47:C5:CE:93:28:09:24:C4:2C:A0:65:FE
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 019B2FD53DB16C795CE7F283D086AEC5FBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number: 0D14
Signing time: Thu 18 Dec 2025 05:01:02 +0000
Manifest this update: Thu 18 Dec 2025 05:01:02 +0000
Manifest next update: Fri 19 Dec 2025 05:01:02 +0000
Files and hashes: 1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=)
2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: JQJHPuyAFTz1s+YO81TNHjA7pl0dXeRpIL5TmgaGbl4=)
3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=)
6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:d5:3d:b1:6c:79:5c:e7:f2:83:d0:86:ae:c5:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Dec 18 05:01:02 2025 GMT
Not After : Dec 19 05:01:02 2025 GMT
Subject: CN=df5c172848875ae747c5ce93280924c42ca065fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:3a:25:b5:1c:87:c7:eb:c1:30:f6:f9:65:
c2:00:3a:d0:9e:2b:58:49:d7:a6:0d:19:70:23:70:
ab:db:97:bb:da:a3:78:a5:c6:f9:91:c7:86:be:df:
5e:34:95:82:39:54:ac:9f:a8:1f:3e:63:9b:64:c0:
8d:5c:75:50:6a:25:bd:fc:c2:f8:80:70:44:03:d4:
cb:37:a2:00:f8:69:db:7e:93:88:07:96:6f:c5:9d:
61:97:f6:ed:18:b3:42:da:d0:2f:c2:99:2e:59:89:
6f:0c:73:c2:8b:33:0e:b8:7a:dd:1d:c3:31:a7:33:
54:63:09:b9:f7:d9:72:4c:27:ee:f7:b6:8c:05:59:
f9:83:50:45:33:6d:fa:66:02:f6:90:67:ed:5d:71:
28:21:f6:80:58:c6:13:a7:53:c8:20:16:0c:0d:7f:
99:75:f8:4c:9b:b6:4f:15:ae:43:bb:33:e2:64:1b:
dc:d2:2d:20:7b:90:22:a3:25:44:f7:da:82:83:11:
5e:40:6e:ba:75:d6:89:26:6b:a0:cb:6c:5c:1d:d6:
9d:ad:74:19:ef:11:29:21:5d:a0:bc:cd:6a:ed:91:
0e:97:12:03:8b:99:19:69:da:f1:52:bc:57:5e:50:
a6:0d:73:fb:ef:a2:8a:19:0a:0d:5b:32:4b:63:9a:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:17:28:48:87:5A:E7:47:C5:CE:93:28:09:24:C4:2C:A0:65:FE
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:57:75:35:63:7e:c1:ba:3a:fa:36:9d:2f:34:19:a6:fc:e2:
65:40:e9:db:8b:70:e2:a7:38:d5:61:5f:d6:1b:20:e4:67:47:
8b:bd:51:ce:37:b7:a7:07:92:8b:f1:9e:bd:ab:a7:a8:0c:cb:
c3:01:58:1f:4e:3e:f0:07:d5:f5:4d:fe:0d:03:ec:17:b7:0e:
39:bc:a4:c8:ff:96:53:63:26:fd:2d:01:a4:d1:d3:fa:87:0b:
d8:20:ec:44:a4:e0:a5:0d:ca:35:b9:57:2b:41:9f:af:d5:14:
df:3b:9c:de:df:0f:80:4b:41:bb:58:f1:01:c2:c1:56:3e:c1:
4c:3b:f5:2a:f2:64:fc:98:6a:47:f5:23:c0:a9:fe:56:1a:02:
84:8d:78:d7:fc:94:e7:9e:8a:96:92:d0:c9:73:c9:a7:0a:34:
ce:c8:5e:5d:54:73:df:aa:d8:57:42:3a:2c:d0:c1:60:36:75:
83:7f:c9:27:5b:df:a7:e3:ee:a4:03:dc:68:bb:c4:99:f2:03:
3f:8c:78:a6:c3:8f:18:82:48:97:af:60:94:b1:54:4e:ea:45:
cb:d5:fb:ec:f0:b6:ba:bd:d5:c4:a7:21:57:d0:ea:4e:fe:b3:
16:85:0e:a2:ce:41:f9:3a:46:a6:d1:c1:ce:e9:b7:5e:48:64:
48:56:c5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsv1T2xbHlc5/KD0IauxfusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjUxMjE4MDUwMTAyWhcNMjUxMjE5MDUwMTAyWjAzMTEwLwYDVQQD
EyhkZjVjMTcyODQ4ODc1YWU3NDdjNWNlOTMyODA5MjRjNDJjYTA2NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqQ6JbUch8frwTD2+WXCADrQnitY
SdemDRlwI3Cr25e72qN4pcb5kceGvt9eNJWCOVSsn6gfPmObZMCNXHVQaiW9/ML4
gHBEA9TLN6IA+GnbfpOIB5ZvxZ1hl/btGLNC2tAvwpkuWYlvDHPCizMOuHrdHcMx
pzNUYwm599lyTCfu97aMBVn5g1BFM236ZgL2kGftXXEoIfaAWMYTp1PIIBYMDX+Z
dfhMm7ZPFa5DuzPiZBvc0i0ge5AioyVE99qCgxFeQG66ddaJJmugy2xcHdadrXQZ
7xEpIV2gvM1q7ZEOlxIDi5kZadrxUrxXXlCmDXP776KKGQoNWzJLY5rBAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9cFyhIh1rnR8XOkygJJMQsoGX+MB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkld1NWN+
wbo6+jadLzQZpvziZUDp24tw4qc41WFf1hsg5GdHi71Rzje3pweSi/GevaunqAzL
wwFYH04+8AfV9U3+DQPsF7cOObykyP+WU2Mm/S0BpNHT+ocL2CDsRKTgpQ3KNblX
K0Gfr9UU3zuc3t8PgEtBu1jxAcLBVj7BTDv1KvJk/JhqR/UjwKn+VhoChI141/yU
556KlpLQyXPJpwo0zsheXVRz36rYV0I6LNDBYDZ1g3/JJ1vfp+PupAPcaLvEmfID
P4x4psOPGIJIl69glLFUTupFy9X77PC2ur3VxKchV9DqTv6zFoUOos5B+TpGptHB
zum3XkhkSFbFdQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:33:24 2025 by rpki-client