This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: g6k+j+s+QyXNBxLsO8guHk+Jn84u54nY6emxDmfMtt0=
Subject key identifier: 7A:D1:78:DE:5D:A8:53:8F:12:C6:06:55:4E:CC:35:44:03:28:A2:77
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019B262D604B0DFB521DC1DC84B22E5AFFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 1582
Signing time: Tue 16 Dec 2025 08:01:06 +0000
Manifest this update: Tue 16 Dec 2025 08:01:06 +0000
Manifest next update: Wed 17 Dec 2025 08:01:06 +0000
Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: S3KhIj1SFVJVAKtDdXcGiUt3lTfsjofBNPMTy6zIUxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:2d:60:4b:0d:fb:52:1d:c1:dc:84:b2:2e:5a:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Dec 16 08:01:06 2025 GMT
Not After : Dec 17 08:01:06 2025 GMT
Subject: CN=7ad178de5da8538f12c606554ecc35440328a277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:ac:1a:cd:99:78:1d:c5:7e:13:9f:8c:b2:
70:f6:05:93:1e:c4:d0:4e:ee:81:af:bd:12:cd:52:
43:87:8d:d5:39:9b:5e:9b:8e:0b:7f:84:80:a9:7c:
cd:03:29:26:98:87:ae:21:9e:86:63:e7:3d:65:f8:
79:fd:a2:ed:ac:82:bd:f5:4e:1a:67:07:c6:8e:9f:
0a:f7:0d:cc:c9:d8:6d:58:39:1d:5a:91:8c:80:08:
54:ec:ab:e5:ba:c3:fd:a5:e1:df:5d:ec:cc:a0:b4:
b7:57:e3:6c:ef:38:88:2f:08:6e:89:32:90:6e:e5:
3d:2f:7a:31:d3:ef:c4:6f:7a:50:25:76:09:d5:79:
ee:fd:6d:41:4f:7a:cb:cf:a4:45:3b:bb:ba:11:fe:
04:4f:fb:18:85:23:7d:19:c9:74:00:b8:d1:1f:f6:
ae:43:1d:b7:28:68:50:13:65:0f:d2:87:1b:ba:50:
20:b0:9f:27:a4:6c:88:01:54:24:f0:78:7d:44:0a:
87:62:3e:41:aa:bf:f0:5f:90:d3:e4:e9:b1:96:42:
06:f4:ba:69:aa:e0:f4:b3:4a:c0:0f:6e:43:31:cc:
ce:e1:53:1e:99:39:32:90:05:e2:c7:88:d7:a5:5d:
d4:30:fa:ee:cf:9d:a4:1b:9d:d8:f0:75:fb:66:ff:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:78:DE:5D:A8:53:8F:12:C6:06:55:4E:CC:35:44:03:28:A2:77
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:b3:13:10:fa:05:1f:26:58:a0:36:ba:e4:44:db:5d:af:
15:02:02:00:3c:25:69:8e:46:55:05:7f:1e:dc:e7:c7:29:e1:
5f:64:e8:ec:45:f9:0c:4c:5f:7a:88:56:29:35:15:0c:b5:dc:
db:9d:93:e1:7a:9e:ac:e0:15:75:57:59:90:b2:b8:8b:6f:4a:
1e:f2:4d:43:7f:7f:35:a1:ee:15:e2:df:30:9d:ca:50:a0:5d:
81:6c:9f:e0:b5:40:64:da:80:f7:c8:0d:63:98:70:7a:d7:65:
f7:be:ef:dd:fe:e4:0c:f2:8a:11:b0:45:e1:14:fc:31:92:75:
16:77:db:4f:94:d8:fe:ec:c8:9f:74:25:e0:d7:86:53:e4:c4:
5e:4c:7a:14:4d:9c:06:e8:67:95:fb:12:0e:2a:ce:a4:fc:b9:
a7:48:93:21:eb:83:0e:e4:fe:cb:ef:23:01:4a:b9:90:5b:ff:
ca:65:02:50:c5:23:26:c1:a2:4e:ab:25:04:d8:95:3d:2f:d9:
95:d3:54:39:8c:ec:7e:b7:8f:20:cb:9f:42:a9:ed:d3:52:52:
4d:9b:aa:e7:bc:6d:3a:8b:b5:11:7a:98:5e:56:3e:84:fc:c1:
b0:2f:e4:50:5d:69:98:e2:b7:9e:00:80:41:e0:9b:36:c2:5c:
9f:4b:8e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsmLWBLDftSHcHchLIuWv+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi
ODJjYjAwHhcNMjUxMjE2MDgwMTA2WhcNMjUxMjE3MDgwMTA2WjAzMTEwLwYDVQQD
Eyg3YWQxNzhkZTVkYTg1MzhmMTJjNjA2NTU0ZWNjMzU0NDAzMjhhMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/+sGs2ZeB3FfhOfjLJw9gWTHsTQ
Tu6Br70SzVJDh43VOZtem44Lf4SAqXzNAykmmIeuIZ6GY+c9Zfh5/aLtrIK99U4a
ZwfGjp8K9w3MydhtWDkdWpGMgAhU7KvlusP9peHfXezMoLS3V+Ns7ziILwhuiTKQ
buU9L3ox0+/Eb3pQJXYJ1Xnu/W1BT3rLz6RFO7u6Ef4ET/sYhSN9Gcl0ALjRH/au
Qx23KGhQE2UP0ocbulAgsJ8npGyIAVQk8Hh9RAqHYj5Bqr/wX5DT5OmxlkIG9Lpp
quD0s0rAD25DMczO4VMemTkykAXix4jXpV3UMPruz52kG53Y8HX7Zv+8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrReN5dqFOPEsYGVU7MNUQDKKJ3MB8GA1UdIwQY
MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt
YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1
LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAmzExD6
BR8mWKA2uuRE212vFQICADwlaY5GVQV/HtznxynhX2To7EX5DExfeohWKTUVDLXc
252T4XqerOAVdVdZkLK4i29KHvJNQ39/NaHuFeLfMJ3KUKBdgWyf4LVAZNqA98gN
Y5hwetdl977v3f7kDPKKEbBF4RT8MZJ1FnfbT5TY/uzIn3Ql4NeGU+TEXkx6FE2c
BuhnlfsSDirOpPy5p0iTIeuDDuT+y+8jAUq5kFv/ymUCUMUjJsGiTqslBNiVPS/Z
ldNUOYzsfrePIMufQqnt01JSTZuq57xtOou1EXqYXlY+hPzBsC/kUF1pmOK3ngCA
QeCbNsJcn0uOhA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 14:43:11 2025 by rpki-client