This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: wwqD8MdIuuemlhUo3uEo9KyMVXd/uL/emu9+zkBFwec=
Subject key identifier: B9:23:C3:80:77:4D:E9:95:24:79:AF:BA:10:66:19:24:38:23:00:E9
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019AF19B2FFBF8FB10CF604F9515226AC60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 04A6
Signing time: Sat 06 Dec 2025 03:01:10 +0000
Manifest this update: Sat 06 Dec 2025 03:01:10 +0000
Manifest next update: Sun 07 Dec 2025 03:01:10 +0000
Files and hashes: 1: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: ereCmhmv8+vNVQQiXVNUmj0K9foOtIq5pYOOiA2Q5CE=)
3: xkUeW_PwUlUASvf--c5chXoaFus.roa (hash: /Oa4g8Q6DrNk3m323+ds3bthVQQSIsVnBGQZ3q3zNQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:2f:fb:f8:fb:10:cf:60:4f:95:15:22:6a:c6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Dec 6 03:01:10 2025 GMT
Not After : Dec 7 03:01:10 2025 GMT
Subject: CN=b923c380774de9952479afba10661924382300e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:86:2f:7f:60:94:24:27:b6:f6:32:c0:d6:
07:c2:f2:4e:1e:05:c5:be:bb:a0:01:e1:89:aa:02:
d7:6f:dd:ca:a6:91:e2:07:4a:ad:c8:d2:57:e0:14:
7f:80:e6:8d:32:d4:02:39:31:ac:9f:b8:75:1a:fe:
cd:b4:5b:09:90:b9:db:4a:22:df:39:65:34:de:26:
32:d5:88:0b:3c:89:ab:d5:0d:3f:25:c9:af:23:51:
fd:e2:4a:de:fd:14:77:da:f2:84:0f:4f:bd:10:22:
8b:c0:85:e5:0b:98:00:00:6d:30:17:ef:d3:c1:55:
6e:a4:7d:6f:25:63:e9:cc:9d:ad:bf:d0:fc:fa:f1:
89:38:49:22:e8:2b:09:6d:97:c8:62:00:1c:53:a8:
18:06:81:c7:d4:ce:9f:27:5d:09:4f:cd:e9:a2:ac:
2a:3d:81:70:18:aa:46:95:d4:9a:7c:96:7b:c5:ba:
ab:aa:a0:ed:64:70:65:02:2a:00:00:54:31:0c:76:
50:49:52:8c:3b:26:9a:0f:eb:60:67:15:ae:1f:7a:
d8:87:d9:64:cd:7a:83:3b:5e:ae:22:47:22:c9:6e:
10:ee:c5:b0:38:63:63:2a:67:50:f2:73:f5:6a:7d:
1d:19:51:ea:87:ff:81:44:ba:89:d9:e0:af:18:80:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:C3:80:77:4D:E9:95:24:79:AF:BA:10:66:19:24:38:23:00:E9
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5c:4a:97:1f:2b:9b:70:a8:ae:73:04:ba:af:10:32:e9:9a:
ff:49:ef:84:8e:e7:18:22:ec:af:4c:31:ef:55:7e:57:1e:d5:
60:ad:94:5c:32:8c:bf:99:e0:3e:2f:3b:92:7e:38:e5:3c:52:
34:03:76:4b:e7:21:2a:66:56:98:90:e4:6e:6a:a6:cd:fb:af:
b4:69:75:ef:e6:50:0e:55:c0:51:09:a4:31:c3:22:5b:d3:3b:
88:e7:6a:99:1f:09:13:2e:7a:7a:e1:70:cd:ad:12:e0:40:c3:
b3:c5:20:05:c6:f1:91:a5:b7:47:6b:3b:f3:93:c6:27:47:56:
34:d7:00:52:7d:e6:c0:fa:f6:f9:27:d0:c5:12:59:a4:a8:5f:
47:b1:87:4b:31:a1:9e:d6:c0:95:34:8f:e8:55:c3:20:23:7d:
13:bc:63:66:4e:aa:23:14:e8:a3:5a:a0:aa:5b:d3:42:73:6c:
ee:b8:55:e3:93:c2:c5:b7:a3:e7:46:10:8c:81:38:7a:68:04:
d4:f6:67:85:d4:83:0e:54:d1:85:dd:5b:66:dd:0d:00:a1:b1:
65:cb:f9:51:e6:3c:b7:7f:1e:30:b0:50:d4:be:db:ae:5d:0f:
9d:be:ab:72:99:f8:39:55:83:5e:d8:5e:e4:60:31:2a:cd:07:
d5:fc:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:51:38 2025 by rpki-client