This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: 9937Euk5Itwhgp7PItHQCDZmXHVaeg3ZJ8bgcEfrJLE=
Subject key identifier: 64:1F:8A:FA:DC:86:3C:73:28:5C:9B:1A:DB:7B:2C:FA:33:24:C8:3D
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019AF2AD90EE4B868863206367833542B1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 08:00:52 +0000
Manifest this update: Sat 06 Dec 2025 08:00:52 +0000
Manifest next update: Sun 07 Dec 2025 08:00:52 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: IFd0fCNj6RbTjx+BHuJxh5xZIncQ1QPy98HJIpa2F/c=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:90:ee:4b:86:88:63:20:63:67:83:35:42:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Dec 6 08:00:52 2025 GMT
Not After : Dec 7 08:00:52 2025 GMT
Subject: CN=641f8afadc863c73285c9b1adb7b2cfa3324c83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:35:25:4b:f3:93:cc:17:fc:07:34:52:8f:
b5:75:64:4d:b7:9c:8a:2a:73:3d:4d:70:d1:78:d7:
f6:5a:4a:6f:53:a3:ec:04:c1:ed:54:68:9c:97:9c:
37:70:b6:fa:8e:1c:49:72:02:0b:16:22:e9:24:2b:
f8:2c:e7:d0:8b:ec:8a:0e:89:5f:fa:9f:9b:78:f3:
ea:cf:33:8b:14:90:fb:8a:88:0a:9f:8b:cf:24:85:
d2:da:3d:00:1e:c1:e8:5d:58:a6:8d:09:77:6b:b3:
b5:d4:10:c2:86:e1:a7:7d:30:d1:16:a5:4e:31:5d:
0b:ca:57:60:5a:1b:2b:46:35:0c:c6:6b:c4:ca:95:
1b:d6:94:3f:ab:0a:9a:32:73:66:c0:0e:ac:0e:a1:
7b:17:a6:e8:be:b2:a2:89:28:6a:11:72:36:92:af:
6c:7a:94:68:39:87:15:5f:f9:e5:86:c4:81:49:f2:
f4:52:9b:0b:74:70:1e:c1:b1:83:47:47:5f:e6:b4:
16:83:2e:36:55:31:54:ca:b3:e4:88:aa:98:fb:98:
69:bc:82:db:cb:b4:f7:94:1b:bb:7e:4b:3c:99:9b:
4d:9d:04:37:24:00:e5:af:9a:7c:1e:79:6d:b1:f2:
f6:b2:fc:8e:a9:e8:56:5f:6e:16:4a:93:c5:e9:35:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1F:8A:FA:DC:86:3C:73:28:5C:9B:1A:DB:7B:2C:FA:33:24:C8:3D
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7d:dd:67:20:fb:29:56:ff:87:03:4b:9b:c4:75:ce:ca:c6:
27:ef:7e:e5:9b:4f:81:e4:67:a9:45:4b:fe:02:a9:97:54:87:
8c:79:e8:03:3e:fa:ff:7d:63:f8:1d:28:ff:20:26:4c:2a:1a:
02:24:e2:cd:58:11:de:7f:db:4f:98:f3:01:00:f4:ec:7b:5b:
e8:9b:c7:41:3f:6c:14:95:20:26:c4:13:1c:99:d1:e6:3b:c9:
c6:47:27:02:c1:cc:66:7d:ad:2f:5f:67:db:49:0f:c8:85:6d:
dd:cf:08:c8:20:8d:59:a5:59:06:97:bc:df:ef:6e:2c:1b:8e:
90:6f:4b:fc:7c:ae:1f:3b:f1:b0:ac:5c:1e:63:7a:54:04:ad:
b6:d1:0e:43:4b:a2:22:9a:d7:86:9f:a1:d6:6b:05:5c:3c:32:
17:81:b7:53:04:82:23:aa:ef:a9:83:25:3e:0e:47:34:f3:ee:
17:19:e8:ed:27:a1:ca:da:8a:40:49:70:61:ce:00:25:3d:18:
94:c0:68:6a:cd:f8:92:2a:22:3a:ce:22:bd:19:cb:20:42:26:
72:5e:48:16:7b:6a:c2:74:bc:3b:93:32:fb:46:45:e4:70:7d:
ac:28:ee:0a:1e:d3:43:0d:50:f5:4b:cc:68:ed:8a:7f:97:84:
30:55:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:47:24 2025 by rpki-client