This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier: 8qOxTQVeS9zo7VrH6H0FbLxoKa/Ciy8XCKAw5ooG5Y4=
Subject key identifier: 15:6B:D7:A9:8C:C1:60:C4:E0:A4:F6:A5:98:5C:EC:7B:51:00:FA:C4
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial: 019B281BFCA212B2279D1F693EF18E09117A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number: 0559
Signing time: Tue 16 Dec 2025 17:01:21 +0000
Manifest this update: Tue 16 Dec 2025 17:01:21 +0000
Manifest next update: Wed 17 Dec 2025 17:01:21 +0000
Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: fsvjO7HS/gt2JUHkJrchY9ZKK1mhb2ZUtaUvun96WQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:28:1b:fc:a2:12:b2:27:9d:1f:69:3e:f1:8e:09:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
Validity
Not Before: Dec 16 17:01:21 2025 GMT
Not After : Dec 17 17:01:21 2025 GMT
Subject: CN=156bd7a98cc160c4e0a4f6a5985cec7b5100fac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:01:30:fe:40:22:2b:1b:d1:a1:bd:c8:25:
44:ef:d8:d3:75:e0:27:20:da:2b:88:12:94:6c:e2:
97:af:51:7b:cd:1c:c4:1b:94:b9:d7:82:95:ac:db:
e1:a1:de:4f:38:c5:94:7e:1b:ac:ed:fe:8c:e1:ef:
98:9a:f8:e8:13:33:d4:71:ba:2d:46:6a:10:2e:9a:
08:c6:de:a6:a2:84:91:80:a6:42:68:b9:13:c4:75:
39:67:72:f2:70:d4:7f:b3:16:af:22:ce:df:53:c0:
bd:3f:4e:11:cb:37:eb:f0:cc:cc:1e:d0:ea:ac:32:
b7:80:a8:7c:e7:a5:4a:f7:a1:15:fd:0d:61:27:93:
f0:d4:99:e5:e6:23:42:fd:7e:af:d0:11:ff:32:df:
a5:50:a9:7c:b9:4d:49:31:a4:e2:1d:7f:53:fc:bf:
75:9c:a5:96:00:22:c7:35:c5:f7:97:dc:ea:8d:31:
68:bd:93:61:7c:7a:2d:04:60:0c:1a:f8:fb:ec:34:
9e:63:d2:7b:4f:ed:83:5f:bb:b7:1f:c4:88:a5:c2:
e7:0f:d3:78:a7:92:1f:40:78:14:34:34:a6:a9:bc:
9e:15:fc:99:4d:56:bc:61:9c:64:b2:ad:8f:f0:bc:
91:98:c7:b9:73:b7:0a:36:7c:d4:e9:69:9e:86:99:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:D7:A9:8C:C1:60:C4:E0:A4:F6:A5:98:5C:EC:7B:51:00:FA:C4
X509v3 Authority Key Identifier:
keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:06:57:1c:f8:58:34:b2:91:37:fb:aa:47:37:0e:53:f8:ae:
99:9b:bf:8c:d4:e5:f4:3a:36:3c:6b:ca:0b:f6:a9:8a:3a:6f:
18:6f:aa:0b:38:7a:da:f9:2c:ba:7e:df:a7:13:43:d6:83:ab:
3c:41:e2:80:2e:66:b5:85:bf:a5:f0:24:ac:f6:5e:d7:3a:c4:
48:94:04:89:7c:26:10:08:5a:04:05:1c:27:eb:b9:a5:57:74:
5e:9a:19:df:ae:8f:5d:30:8e:9c:01:dd:d3:10:69:2f:1f:2a:
c6:23:5e:d7:39:78:ae:fc:03:d9:d5:0e:62:1a:80:1c:27:57:
30:35:04:da:16:e2:ae:2b:d6:17:20:9f:2a:d6:7a:b5:8a:d3:
61:2c:06:c7:96:b4:11:17:c1:61:3e:97:04:bd:25:4c:41:9c:
67:30:97:95:77:de:d9:f3:5e:f5:6d:60:5b:ac:66:a4:a0:4d:
43:e2:e3:93:8c:b6:92:8a:46:0d:56:66:31:40:ae:28:da:64:
a8:70:f2:dd:d0:0f:30:b3:64:6d:93:40:32:f3:bb:40:c2:02:
fd:5e:e2:40:61:b8:76:40:d5:d4:6e:17:e3:4a:a3:d3:2f:27:
6b:9b:66:c6:e9:cc:33:28:a5:bd:75:ee:23:44:93:75:66:35:
44:40:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:13:01 2025 by rpki-client