This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: j+lsEUBCwiGd039QAz57O3jDKdqoSnI1/Wxo1RstccI=
Subject key identifier: E5:2F:5A:85:99:76:6D:5C:77:D2:68:ED:82:D4:3F:73:CF:7F:3C:96
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019AF38A0A2CBD2A47356E5578B8E864C040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 12:01:41 +0000
Manifest this update: Sat 06 Dec 2025 12:01:41 +0000
Manifest next update: Sun 07 Dec 2025 12:01:41 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: rTRVwsjlqwuHkxnOFUjmeDjIu4CcScyykD8iIs6ZSsI=)
3: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
6: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
7: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
8: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
9: q6idzKrDu4CBsJRqLimxIXD6CmY.roa (hash: zcZmqN1SNQUWIh4VQAhk0AsbY6HsVOlujwRG+fTIpMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:8a:0a:2c:bd:2a:47:35:6e:55:78:b8:e8:64:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Dec 6 12:01:41 2025 GMT
Not After : Dec 7 12:01:41 2025 GMT
Subject: CN=e52f5a8599766d5c77d268ed82d43f73cf7f3c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:ce:31:ad:75:aa:a2:75:63:1e:5a:61:b2:
74:05:2d:84:15:a0:91:02:01:bc:ec:82:a4:22:4c:
9b:f6:ed:e7:ae:73:3b:96:bc:89:77:5c:ad:87:d8:
e5:b9:80:20:43:34:71:c8:79:f8:d0:fe:bb:8e:0a:
a6:07:2b:6e:1a:e5:fa:3d:4b:72:e3:96:9f:fd:18:
3c:fa:4e:7b:61:f0:b3:75:8b:22:54:98:90:57:0a:
7e:3f:61:44:e5:a1:16:ef:b4:5d:cc:c6:e4:6e:2a:
c9:87:54:d6:cf:e0:52:4e:41:28:f6:f3:83:f9:4c:
94:33:0f:23:8d:53:a2:19:e7:b7:8e:71:68:1f:61:
ce:e2:d8:a5:72:2c:3b:e9:e8:8a:95:57:71:88:7d:
82:dd:78:44:02:58:07:f2:18:1a:4e:c9:3f:4c:56:
b8:b9:07:83:be:08:23:ce:bd:cc:8e:14:76:25:db:
ae:f9:af:b7:97:85:0e:90:af:a8:5b:a6:e9:ac:3d:
c4:5d:8e:07:32:cc:5d:50:cb:55:06:95:d2:8c:f9:
09:dd:95:8e:e3:84:e5:51:12:07:fe:2a:c9:6c:bd:
50:2b:a8:ec:03:19:cc:48:7a:6a:56:26:2d:14:d0:
cd:42:a7:50:75:78:8d:1a:c5:9e:f0:6a:ff:4c:85:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:5A:85:99:76:6D:5C:77:D2:68:ED:82:D4:3F:73:CF:7F:3C:96
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:13:72:43:4b:3b:f7:72:d7:70:b7:9a:19:7c:f5:d0:59:
f0:56:14:24:77:cc:d3:70:48:70:fa:f2:4a:dc:a4:2b:57:a7:
dd:4d:d1:bb:30:ff:c3:8c:c1:bf:e3:9a:ac:12:69:9b:4e:e8:
8d:20:93:b3:43:0e:be:de:ab:6f:86:48:b9:68:96:d6:15:0b:
df:23:87:5d:a3:82:1c:05:e6:16:32:2c:e6:88:23:63:68:29:
b8:b9:03:bc:f3:f9:66:fd:2c:c1:3e:c9:08:28:e0:79:ba:fc:
71:39:b3:aa:d3:07:a2:d5:db:67:08:c4:33:9b:a8:2d:87:63:
f6:bb:cf:a8:10:ce:1c:4f:bc:d6:d9:8a:a9:e5:39:b9:35:78:
3a:bf:b7:c7:0e:3c:01:d4:69:4d:20:88:56:1d:88:ac:cf:dd:
56:b7:26:85:cc:55:d2:72:b9:cb:fd:15:03:e7:d9:fb:32:a6:
3b:58:bf:f2:43:87:50:6e:8b:14:f5:08:7b:ff:4a:99:48:34:
ce:ef:86:ba:81:f5:0b:ea:0f:c1:42:17:8b:f6:8a:ef:dc:8a:
49:d5:59:94:09:4f:5c:ff:6e:33:1d:d4:e1:1e:b7:e5:95:33:
95:fe:5f:65:ff:6e:ce:95:db:0a:f2:87:e3:55:3f:9b:28:4d:
a5:12:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:32 2025 by rpki-client