This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: TTBKo6WtlV0cx/nrdg8+KNI1VOaaI8a7QEhBXms3Djg=
Subject key identifier: 4C:40:CD:FD:73:6A:C0:EC:F5:27:53:62:B5:B3:FB:06:22:34:A6:B2
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019B318CD85A6AAAF35FB48D8E76B3964F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1715
Signing time: Thu 18 Dec 2025 13:01:12 +0000
Manifest this update: Thu 18 Dec 2025 13:01:12 +0000
Manifest next update: Fri 19 Dec 2025 13:01:12 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: vmgZVvV3xaIW7WRgtaRPULCoGsjnOxNAOI3VANAbFjA=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:31:8c:d8:5a:6a:aa:f3:5f:b4:8d:8e:76:b3:96:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Dec 18 13:01:12 2025 GMT
Not After : Dec 19 13:01:12 2025 GMT
Subject: CN=4c40cdfd736ac0ecf5275362b5b3fb062234a6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:d7:98:c0:26:35:d3:c7:ce:dc:a2:e7:74:
38:3b:72:2f:b3:39:8f:33:83:89:6e:57:7d:da:6e:
30:ad:15:4a:04:e2:b8:f3:a7:ab:15:63:97:ca:20:
fb:87:65:85:3c:a7:0c:5c:02:10:e9:81:19:c0:c1:
4d:c2:2d:94:87:d3:9f:cd:f9:5d:f5:19:10:31:0d:
c9:c7:4f:9a:ae:ca:d2:64:8c:42:af:b2:e8:32:12:
01:ec:63:28:b6:ec:4b:dc:66:2f:8d:d9:c6:bf:0e:
cd:5e:d7:22:b2:ac:2d:3d:10:e7:24:77:ad:39:d1:
79:9b:ae:27:3b:2d:0d:2a:c1:d4:5b:65:67:c7:86:
6a:3b:86:1b:b6:f1:b3:c9:a8:56:b2:03:30:30:eb:
9f:27:b9:a9:ca:a7:f4:60:95:86:77:69:c7:7f:35:
4b:1a:ff:1a:01:60:4b:43:5e:75:f3:eb:4a:a6:fd:
9e:36:71:e2:68:a7:d3:c6:95:8d:13:7c:8b:75:18:
64:6e:73:a1:b1:5f:51:17:09:b6:d7:ee:bf:85:1a:
72:02:f2:39:34:e6:5e:9d:18:8c:97:55:ad:cc:53:
d7:2a:a0:2e:49:ba:c2:fa:78:f1:90:85:d3:9e:0a:
72:b6:25:a2:4a:4f:db:aa:3a:a7:69:c2:14:98:75:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:CD:FD:73:6A:C0:EC:F5:27:53:62:B5:B3:FB:06:22:34:A6:B2
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:22:d9:73:4c:8e:6d:ee:bc:6c:f5:ba:ff:72:90:6a:49:6e:
e5:78:9a:4e:9e:25:ed:96:53:14:db:b3:46:fb:72:bb:9b:95:
f1:85:1c:52:83:23:f0:c4:aa:2c:53:c2:60:9a:10:7e:da:2e:
73:55:72:62:7a:f0:b6:59:8e:b5:6e:fd:dd:8d:da:29:06:ad:
4a:d9:e9:42:a9:97:ff:c1:ce:b0:b8:eb:3e:68:f4:46:e1:8a:
a4:aa:d0:39:76:14:b4:31:f4:94:e7:2d:a2:31:3a:6e:cc:08:
62:94:64:da:c9:8e:54:c8:1b:b0:d6:aa:22:36:65:08:a1:a1:
77:07:60:33:ed:47:6d:18:da:f4:4b:5f:f9:d8:af:cc:c7:9b:
5d:5f:08:bd:5d:5a:8e:06:f5:0b:cf:ce:c0:c9:60:fc:23:ce:
48:86:b7:18:ba:cd:86:47:f5:27:30:da:da:8d:71:08:12:e5:
56:56:5f:34:8f:22:19:39:45:73:2b:6c:4b:05:68:34:5d:49:
32:7c:1a:34:e8:ae:fe:e2:ee:4e:16:1f:8d:03:da:fb:49:06:
ee:18:33:d5:b9:e4:35:b9:ec:77:d8:d5:ac:db:91:c6:dd:58:
58:88:94:a7:08:8e:2f:e9:6d:cb:09:af:9c:cc:b1:76:3f:56:
85:bf:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:30:59 2025 by rpki-client