This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File: 0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier: SkX5n2ct8wXJ++wGLQDSmLOOwjaQsyBa8pUAYXSvHTo=
Subject key identifier: 2F:0E:E6:9C:35:86:AB:F8:AB:AE:B8:69:6E:C5:9F:DA:72:98:C6:41
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial: 019B39466F7FD998E1841FDADEA9297A21CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number: 06BC
Signing time: Sat 20 Dec 2025 01:01:15 +0000
Manifest this update: Sat 20 Dec 2025 01:01:15 +0000
Manifest next update: Sun 21 Dec 2025 01:01:15 +0000
Files and hashes: 1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: 15HXd9qB69uaHTNAyH9yY+Rt+RTvBMErKyarSZQxj+0=)
2: 3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa (hash: TuUCEIehwsxsHM+kSQ6AOE1w0z+0lDBW+yhlCQiJ8u0=)
3: 5MPTrLSfLX6fRObwynHPfSAAM0o.roa (hash: adOAZtbI6TpJQzuqE4yqnUFKX9EAaJkaZ7TpRSqv1kc=)
4: jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa (hash: rjEJpSgCWwFovtBLax9fmGlzA4/RiwDw0hJijdvo6KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:46:6f:7f:d9:98:e1:84:1f:da:de:a9:29:7a:21:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Validity
Not Before: Dec 20 01:01:15 2025 GMT
Not After : Dec 21 01:01:15 2025 GMT
Subject: CN=2f0ee69c3586abf8abaeb8696ec59fda7298c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:f1:98:ad:b2:49:3f:9c:80:b7:f6:c6:14:
2f:c8:d6:48:06:86:c6:7f:6e:6f:f9:4a:6e:cf:81:
c2:33:a3:02:57:50:4f:bf:5b:14:74:f8:1a:73:7b:
cb:e7:2c:f1:f2:fb:36:8d:03:f2:cf:8c:4f:7e:d5:
13:a9:c2:a3:62:7e:4f:87:03:8a:20:a4:ca:2c:f4:
1a:2e:61:e1:c6:66:d8:f4:ca:8e:c8:71:4a:45:da:
1d:03:0c:4c:0e:d4:4f:97:03:a0:55:45:b8:a6:be:
d7:97:cd:a5:f9:b7:6f:b0:f7:4e:7c:d0:1b:60:1f:
b2:42:26:4c:9e:3a:ea:da:21:ea:5c:7d:a4:f2:8d:
85:e3:b6:2a:ac:d7:0c:e0:ba:aa:d4:a2:f2:9a:cf:
38:26:5c:ac:75:b6:80:08:0a:f0:a4:54:67:1d:1a:
f1:87:e8:ed:2c:c8:8e:84:e1:4f:27:bb:5c:a9:f1:
2b:d3:68:bc:1d:ef:62:00:c6:23:71:db:8d:64:a1:
22:a0:32:7d:a7:a3:80:bc:aa:fb:1b:b8:58:f3:ee:
15:14:73:36:67:3d:e4:ba:a3:05:76:8e:d1:64:e1:
4e:32:8e:90:65:ba:e1:b5:c1:7f:11:b4:37:30:7a:
6e:c1:3a:94:93:8a:b4:00:e2:b2:b4:f3:55:8a:30:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:E6:9C:35:86:AB:F8:AB:AE:B8:69:6E:C5:9F:DA:72:98:C6:41
X509v3 Authority Key Identifier:
keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:18:a0:12:7d:b3:71:7e:3a:73:6a:08:88:df:f5:2e:65:5b:
2a:00:c0:24:9f:5f:ee:5f:ab:5f:08:98:19:3f:23:34:0f:19:
13:1e:cb:5b:a2:82:7f:10:a4:55:d2:d2:04:bd:80:25:c7:31:
4d:a3:a5:97:bb:f6:90:c7:f2:37:13:f7:82:bc:98:3f:7a:39:
fc:b8:82:81:e1:b3:91:63:8c:2c:fb:42:a3:66:5f:3a:4e:74:
24:96:6d:46:9f:5c:cf:03:ce:4a:ec:b0:a9:47:a3:33:43:19:
f0:9a:96:4f:cf:60:ac:a5:0f:67:e0:ec:96:1f:36:4d:b1:42:
30:71:d4:5a:e1:92:7e:c1:20:25:51:d3:74:9b:a7:3e:02:3b:
0b:92:1b:98:36:7f:97:49:78:fc:03:d8:5d:bf:e8:7b:fc:ce:
bc:12:47:ae:8e:d1:70:87:0a:29:a3:9f:f6:5c:da:77:48:ea:
93:1c:1c:6b:0b:4c:34:3c:90:91:fe:59:3d:4d:36:22:87:1e:
19:b4:40:c6:a2:57:b2:ee:f4:ed:b3:d7:b1:77:fd:c0:b8:7a:
e0:68:8b:ed:ea:a7:8a:4c:c6:65:3b:ce:38:34:fd:2d:fb:01:
37:40:69:72:23:4d:4b:ba:1e:1b:5c:c7:e1:1d:66:09:93:a7:
3a:e0:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:37:12 2025 by rpki-client