This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: HMGDC8FYXPiNCVH4N7LEAzowvK6m1l2BnPDOYKGzsKI=
Subject key identifier: 69:44:07:D4:63:8A:73:73:20:D4:BE:B2:41:2A:31:33:07:6C:14:F7
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019AF16419E47DA134FA8455B1C9AF8C878C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 02:01:00 +0000
Manifest this update: Sat 06 Dec 2025 02:01:00 +0000
Manifest next update: Sun 07 Dec 2025 02:01:00 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: T9WAdpdfrX1hXSDBjv5oGH71eeqmA2UW5WhZ3WTJt44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:19:e4:7d:a1:34:fa:84:55:b1:c9:af:8c:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Dec 6 02:01:00 2025 GMT
Not After : Dec 7 02:01:00 2025 GMT
Subject: CN=694407d4638a737320d4beb2412a3133076c14f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:c2:94:44:55:0e:a4:92:ac:e2:67:86:4a:
e1:5d:c0:d5:c9:3f:45:73:e5:53:56:f5:9e:41:95:
bd:97:64:21:88:e3:bd:7c:c2:df:a1:eb:b6:e6:83:
cf:44:0f:c5:2c:87:ab:6f:f9:ad:61:3d:e1:50:69:
be:5e:9e:79:21:a0:45:7a:5a:1b:59:9c:24:7e:40:
a4:7f:0b:89:33:b3:d2:bc:46:af:ed:e4:e5:96:c3:
81:1f:37:35:66:3c:21:a2:66:48:1c:0b:51:f6:c0:
4b:41:31:b9:12:9e:1f:61:aa:eb:3b:56:d3:34:1b:
09:d0:c2:d5:93:39:e0:4c:58:d0:86:aa:b4:3f:50:
d5:20:62:4f:0c:8b:ad:55:61:67:1d:fa:10:dc:ae:
b2:49:a8:88:a9:f8:6f:06:1a:da:04:01:5d:33:1e:
81:8d:fa:af:01:7e:fb:2f:ed:ec:ab:3b:33:98:c1:
70:74:04:ee:3d:d9:8a:86:30:2c:07:a6:03:82:1b:
b2:e8:61:2b:93:8d:a4:68:11:51:a4:07:a0:ad:ac:
5b:64:8a:6c:80:49:7a:dd:49:0a:a8:74:c3:f8:b6:
df:08:8c:ce:f0:4f:eb:85:43:a6:14:60:fb:f5:c1:
41:31:4b:94:a8:eb:67:83:cb:76:1d:7b:75:85:3d:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:07:D4:63:8A:73:73:20:D4:BE:B2:41:2A:31:33:07:6C:14:F7
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:e4:57:45:b6:80:02:5e:c4:0b:3c:2b:cc:29:db:bb:e5:
41:53:ff:9d:33:38:26:e4:31:84:0f:0d:af:76:e2:b6:eb:d0:
8f:83:41:6e:b9:23:e0:56:ae:cc:78:2c:14:48:10:9d:3d:f9:
c2:f2:4a:fa:4d:9b:eb:73:19:2c:4c:23:e2:f3:65:92:85:b6:
04:9b:51:a8:94:57:67:07:48:51:94:39:d2:a7:74:46:f1:df:
81:5b:4d:e2:f8:70:88:77:74:25:be:db:f7:15:08:5f:97:77:
0c:ad:17:29:e4:ac:81:18:17:41:d3:4a:0d:69:e7:65:07:a9:
5c:15:6d:5e:33:6a:97:1b:51:57:44:b1:78:d9:e6:ee:7a:65:
e4:3a:2c:66:9b:8b:78:d9:9c:63:45:13:63:de:67:47:6f:bf:
d9:81:65:b9:57:ae:53:96:67:de:ba:24:e0:83:10:c6:06:4f:
a2:16:b0:ec:b1:70:bc:c8:8d:88:39:1a:79:12:ad:b2:36:22:
cb:03:a1:c0:97:4f:46:74:0d:02:af:a3:a9:5f:12:5c:97:57:
14:8f:35:d3:9a:b3:6f:11:52:74:93:b2:30:c1:4b:fd:c1:14:
fb:d4:a5:59:26:7a:b5:05:31:db:6e:89:bd:8f:39:77:ba:65:
e2:d0:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:11:41 2025 by rpki-client