This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier: reySQlvKs+YpBnX2lC9XoqPicusTCvXjnHDEwY+oIxQ=
Subject key identifier: E7:E1:F3:F6:A4:88:65:4A:8E:6F:91:37:BA:0A:E3:8C:8E:63:D5:3E
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 019B25F6501A1C01709A31086A30A3AEA108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number: 177E
Signing time: Tue 16 Dec 2025 07:00:57 +0000
Manifest this update: Tue 16 Dec 2025 07:00:57 +0000
Manifest next update: Wed 17 Dec 2025 07:00:57 +0000
Files and hashes: 1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: 1RroHMoZIGwhJleUuL/7YqeXdSuyTVnRFH9Gf+67Q7U=)
2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:25:f6:50:1a:1c:01:70:9a:31:08:6a:30:a3:ae:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Dec 16 07:00:57 2025 GMT
Not After : Dec 17 07:00:57 2025 GMT
Subject: CN=e7e1f3f6a488654a8e6f9137ba0ae38c8e63d53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:94:f0:3d:7c:0c:8e:91:83:4e:b9:75:ce:
60:bb:ce:37:2d:30:b1:fc:37:dd:ed:a8:94:a6:5c:
11:2f:c2:b1:c4:1b:c5:b7:2f:1d:94:5a:ed:36:36:
96:93:91:5a:98:0d:b5:11:da:0d:c6:c6:ab:fb:04:
b4:1a:0d:48:cc:37:cb:b3:42:93:d1:5c:48:38:88:
b0:37:0c:27:0c:2f:bc:02:af:30:80:84:a8:3a:98:
ec:14:75:83:28:f3:92:3f:f6:9d:6b:18:ad:f4:6b:
7f:ed:d8:3d:b4:b1:47:f0:e0:18:6c:3b:71:cb:fe:
6a:66:1f:d5:38:67:3a:99:a9:f2:90:da:7f:de:92:
25:eb:4f:8b:15:71:d1:fd:46:ae:80:c8:a8:92:02:
e9:d9:3a:3d:45:90:93:2c:a5:be:eb:95:e8:a7:c0:
a2:71:c8:74:60:9d:83:7f:c0:df:62:76:54:f2:41:
24:af:3f:5d:7d:a6:e2:d1:e0:c6:9d:cd:8b:32:29:
72:22:0e:7d:57:f0:0d:dd:95:19:db:cd:a0:e5:7c:
ab:d4:01:cc:11:6e:2f:44:5d:28:5f:43:42:40:f0:
69:ba:f9:f2:6c:d2:29:5b:34:36:70:3f:77:f1:5d:
01:53:93:c6:60:d6:09:be:1f:47:28:09:16:31:cf:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:F3:F6:A4:88:65:4A:8E:6F:91:37:BA:0A:E3:8C:8E:63:D5:3E
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:1d:58:d8:fd:40:42:63:10:a6:25:39:47:60:09:39:90:
cb:b8:e1:63:e0:f7:a1:24:44:e8:de:ca:e5:b4:a1:b3:78:4e:
6c:9c:72:6e:e6:2d:3e:e4:0f:f2:26:fd:0c:23:09:bf:51:0e:
7e:1f:ea:6b:19:98:e8:5f:cf:87:5d:b3:37:4f:fe:e4:f1:8f:
6f:82:ea:88:72:be:f0:de:cd:3a:53:c3:58:5c:c8:25:19:3a:
de:70:9f:f8:2d:f0:df:4d:2a:84:f1:8a:0c:11:c4:58:b6:ca:
97:b8:10:cb:2a:7d:d1:ca:29:4e:41:1b:7e:ed:1d:70:a3:b1:
fd:d3:37:e3:b3:9c:98:b8:6c:d4:fb:65:b2:34:dd:3d:9f:9e:
43:90:29:60:55:8d:e1:60:54:17:d5:81:1a:05:ad:60:f1:74:
29:26:6f:f3:27:0a:f5:8c:b9:21:cd:cd:bd:ee:43:8e:91:73:
67:03:ad:db:12:d2:bd:93:75:7e:69:05:eb:85:54:3b:5f:df:
6c:67:c8:12:4d:de:09:86:57:ba:6b:fb:19:62:ec:bf:8c:8e:
6e:88:8d:ba:7c:a9:a0:87:2d:a7:7a:88:57:f1:b3:c2:39:89:
91:43:12:99:45:95:4f:2f:f1:a9:7c:55:f2:7b:cf:c2:39:36:
3a:cc:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:07:30 2025 by rpki-client