This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: ph6jbs7I1rpEquzvWz58iI4F5TlDxv2KvrF2a9RtfZU=
Subject key identifier: 3F:BB:A5:D7:A6:5C:0B:C1:AC:DE:0A:2F:15:B1:26:BA:E2:3B:21:2C
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019AF49B9D2D8FB28C7948284136C2EB0886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 17:00:30 +0000
Manifest this update: Sat 06 Dec 2025 17:00:30 +0000
Manifest next update: Sun 07 Dec 2025 17:00:30 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: t+SIKwEdkCMDv62yY4Ov1lGc9e4FS+LOpbLHDE9/9wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9b:9d:2d:8f:b2:8c:79:48:28:41:36:c2:eb:08:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Dec 6 17:00:30 2025 GMT
Not After : Dec 7 17:00:30 2025 GMT
Subject: CN=3fbba5d7a65c0bc1acde0a2f15b126bae23b212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:d3:3a:b0:13:33:71:3a:af:c0:86:cc:56:
d1:77:0c:da:21:5e:51:ea:83:57:7b:ea:e3:18:9d:
fa:74:57:f8:0a:9a:a1:ae:a6:26:79:9b:ff:4f:66:
77:9c:36:c9:b3:62:96:58:e4:77:e5:a1:6c:85:16:
26:63:b5:2d:d4:39:53:29:67:85:d4:90:7b:45:60:
a6:bf:66:b2:f9:48:3c:bf:fc:f8:7d:68:30:cc:ed:
06:cb:6a:e9:d6:04:f1:b6:a5:2e:4b:77:02:17:b4:
04:88:de:dd:87:fc:78:b5:f2:3a:f5:98:e4:4b:22:
53:31:7c:7e:af:a6:ca:62:cf:5b:d0:20:5f:f4:5f:
bd:20:ba:4c:49:26:f9:d5:1c:48:c0:62:03:53:e6:
87:28:97:ac:ee:f0:3e:16:01:7d:49:99:9a:42:03:
d9:96:c5:42:b1:19:ae:6e:36:65:19:bf:99:aa:ec:
aa:7b:ad:56:55:2e:db:31:5c:de:75:60:07:6a:df:
e2:1f:8a:24:cb:30:57:c0:75:46:1e:ea:e4:00:a8:
9a:3c:16:72:93:48:05:69:b8:89:e1:e2:16:80:95:
98:94:02:cd:c4:13:f3:1f:8b:ba:e1:65:32:66:fe:
e1:e9:5d:b5:bf:4d:23:b2:95:c2:e3:b9:9e:38:f4:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BB:A5:D7:A6:5C:0B:C1:AC:DE:0A:2F:15:B1:26:BA:E2:3B:21:2C
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:91:94:e7:6f:8d:9e:c5:86:45:6b:97:7a:58:7d:7e:6d:
21:55:49:6d:ad:08:70:b5:d0:8f:89:f6:5f:9b:f5:2f:6a:e7:
14:76:1d:31:0f:fc:f0:6a:52:75:62:31:57:ff:e4:85:72:ff:
aa:4b:89:99:23:f4:17:7d:5d:78:b6:3b:c0:f7:ff:36:27:ff:
af:3f:00:7f:af:a6:d1:3b:d8:bd:ed:94:8e:03:69:69:8b:9c:
0d:9c:a4:99:2a:be:00:2e:0e:ac:35:17:52:10:d1:c3:d8:7f:
63:b4:9b:ad:3b:85:36:02:3d:b9:ec:af:fa:29:d3:6d:29:d3:
3e:af:4c:1b:7a:b3:07:25:ca:5e:12:bf:e7:d5:59:b0:b0:ac:
12:10:f2:fd:c9:7c:9c:06:33:ef:52:71:77:0a:66:43:06:7e:
a2:5a:a5:55:d6:88:c4:5c:09:62:34:fc:c5:7b:15:65:a3:62:
d6:e7:f1:c2:1f:45:9e:b0:44:24:07:53:c7:66:a5:f4:fa:c4:
0f:d2:dc:0f:05:47:6b:9e:42:84:72:77:1d:8d:ee:46:99:fa:
8b:e0:13:9c:68:a6:23:b9:b0:79:08:62:2b:d4:f5:9a:2f:d0:
57:32:44:27:8d:94:be:c3:e5:f7:ee:30:64:c9:5e:7f:c8:8e:
f8:9e:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:58 2025 by rpki-client