This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: 1xOzR/KNyVOYI4RsA2NR6/OI+89sXKzsWovR0IHBeps=
Subject key identifier: 5E:68:82:7D:F9:89:DC:FB:55:FC:C5:18:C9:7E:A0:86:71:1D:78:C4
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019AE7850A9365625D0368FFC3412BC102B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 1775
Signing time: Thu 04 Dec 2025 04:00:47 +0000
Manifest this update: Thu 04 Dec 2025 04:00:47 +0000
Manifest next update: Fri 05 Dec 2025 04:00:47 +0000
Files and hashes: 1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: S6Lm03GvFi5r+UMqHD8v2ANPLtLnhyIHHbF12zkuKiE=)
3: MhkIG3M7fwR8fILw15Agvyj3QKI.roa (hash: FFjReexmd0K3X+SEM/x6XzG86nvZA19Vvp973XX9p0Q=)
4: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (hash: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=)
5: h8Rooww-YtXgZdj5PaYT_SFfSvw.roa (hash: u6xVJHYA1uzH6xbwrO/RW/GLLxj+VO2zqxgk0PQuKro=)
6: mrqVIwSDxW20lv8kvtQ7QFndJZU.roa (hash: J/buU17qNgp7OI4nvhA+Zkd2w7B/8zGPPbTTlXaLVUM=)
7: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e7:85:0a:93:65:62:5d:03:68:ff:c3:41:2b:c1:02:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Dec 4 04:00:47 2025 GMT
Not After : Dec 5 04:00:47 2025 GMT
Subject: CN=5e68827df989dcfb55fcc518c97ea086711d78c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:9d:34:07:05:35:6c:54:7d:37:2c:07:54:
5b:cb:32:4f:50:55:97:91:7c:54:91:e6:be:cf:47:
05:60:69:b7:8c:d9:e5:bd:43:41:22:83:66:53:11:
23:43:e8:a5:dc:d8:f9:5f:b6:b3:3d:14:ef:31:9d:
79:39:24:8d:20:af:6c:d6:45:58:aa:65:20:f9:18:
b8:d6:ae:65:d5:00:60:3c:1b:4d:ca:a8:cd:3d:be:
11:54:b0:ce:0f:b8:63:78:33:3e:99:3d:e5:3c:37:
bf:da:56:62:89:1f:37:3d:99:8e:f8:af:8d:cc:3e:
1a:77:30:ed:e2:0e:94:21:40:81:d7:0b:c9:d5:0b:
2e:90:46:ba:d2:6f:90:09:e5:dc:56:00:a9:17:c0:
da:dc:f3:a5:bc:46:80:f0:24:41:15:dd:25:71:1e:
d8:28:0c:bc:03:ed:95:f9:18:26:a8:1d:27:6e:5a:
11:23:cc:cc:ed:f1:9b:e9:d4:eb:21:dd:1c:b4:ef:
6c:a5:05:6d:5d:2b:dd:b2:c3:40:8f:25:f3:9e:46:
18:35:70:28:3a:da:82:7c:8f:85:a0:46:03:e6:52:
98:ee:df:42:1e:54:f5:35:97:32:ff:b6:55:c2:94:
40:55:c0:4a:2b:17:26:9f:c2:75:c3:1f:94:22:f6:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:82:7D:F9:89:DC:FB:55:FC:C5:18:C9:7E:A0:86:71:1D:78:C4
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:e1:19:5d:f8:02:3b:71:22:ab:1d:a8:4e:d3:e1:31:65:
01:45:5d:05:52:ff:96:4d:eb:03:c8:e3:cd:42:eb:ae:73:3b:
0e:80:ea:98:44:a6:de:6f:d2:6d:8d:5d:2f:3c:85:1a:44:9e:
90:44:cd:04:92:17:2a:ce:a1:5a:0a:11:27:0b:5d:65:20:e7:
0b:54:1c:45:0e:6f:e5:0b:8c:f9:0a:48:ba:f2:b3:0e:94:a7:
69:61:f7:f9:8f:92:56:d3:a0:4c:0a:e7:08:60:22:19:89:09:
ff:5d:06:59:ee:84:28:23:68:d2:f9:c3:9c:1c:0f:4a:2d:a9:
b2:11:60:6e:8a:89:67:eb:89:70:ae:d7:a4:c7:38:5b:3c:36:
e6:b1:86:d9:31:08:c4:1c:f8:e3:dd:31:89:86:47:da:0e:5f:
a6:79:01:97:dd:22:33:cd:0c:fc:8f:b2:4d:57:f1:c4:95:4c:
07:8d:15:11:b7:a6:94:1c:93:99:bb:b2:f5:fc:bc:40:b2:01:
15:cb:9f:2b:a2:9b:af:8d:1f:02:c8:10:94:7e:44:4b:76:dc:
b2:64:fb:10:4e:94:eb:aa:b9:1c:cc:27:4e:a4:57:db:cb:a7:
54:b1:9f:d2:f7:75:8e:81:54:b1:db:8d:1a:22:2a:92:3b:a8:
97:e3:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:18:48 2025 by rpki-client