This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier: /A+SlxclklTarI7aHinKLq37DEFgo51fErXWctmp5U4=
Subject key identifier: 6F:23:23:C9:49:D2:65:FB:0E:DA:68:9D:8F:BA:BC:F9:84:04:53:77
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019AF509AEBD937DA8670FEACA50837943AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 19:00:43 +0000
Manifest this update: Sat 06 Dec 2025 19:00:43 +0000
Manifest next update: Sun 07 Dec 2025 19:00:43 +0000
Files and hashes: 1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: XlelFFtzQh7FfuL+aovbQwlDEUFcD8a+w1bL/zzxhE4=)
7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:09:ae:bd:93:7d:a8:67:0f:ea:ca:50:83:79:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Dec 6 19:00:43 2025 GMT
Not After : Dec 7 19:00:43 2025 GMT
Subject: CN=6f2323c949d265fb0eda689d8fbabcf984045377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:97:f8:d5:e2:10:78:56:7d:85:c5:16:64:
61:00:9d:8b:32:12:3b:93:43:19:de:3a:8a:1f:bd:
c4:75:84:74:4b:f5:f7:84:2a:1c:38:f6:a7:e8:79:
0f:b4:4d:a4:d5:b1:b4:39:2b:90:84:7f:0b:c5:15:
a8:5f:6a:de:4b:c1:e1:b2:37:44:fe:bb:f2:f6:61:
d0:53:88:80:f4:d4:d5:ce:ba:df:3c:f3:c9:8d:f6:
70:2f:4c:37:40:0c:9a:0e:db:69:f0:b2:e1:84:92:
b1:c1:25:f3:30:48:6e:f9:b7:ce:f4:c7:d2:4a:23:
7f:8b:92:e5:8b:96:3c:c6:34:fb:49:76:5d:6c:e3:
4b:4b:fb:d9:e7:89:82:52:87:3f:f5:bb:62:cf:f4:
45:39:a7:7c:9e:d4:a2:36:91:ca:ce:bb:18:20:37:
7d:93:ad:32:3e:61:00:31:a2:17:99:83:26:b2:65:
0d:87:3a:8c:b2:46:22:92:20:76:d6:98:a1:82:ed:
9f:0b:d2:0a:3b:f4:ef:0a:0a:41:13:d2:d0:63:5f:
95:6b:21:f6:fe:a3:f7:0d:4d:8a:00:c8:f9:c7:80:
44:0d:31:9d:4f:42:77:64:73:e3:bb:2b:79:16:af:
04:46:42:a0:ff:b3:92:83:92:dc:21:c5:bc:00:5e:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:23:C9:49:D2:65:FB:0E:DA:68:9D:8F:BA:BC:F9:84:04:53:77
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:55:ec:ee:60:31:56:3f:2a:15:94:55:64:4c:fa:df:83:84:
a2:34:ea:df:ef:57:e0:b8:46:64:db:50:6a:01:09:db:42:4a:
ff:76:2d:d9:7a:24:8a:b9:93:b4:de:11:e5:35:45:4f:1b:c8:
fd:41:4f:ef:60:de:d9:b2:67:c5:db:3b:db:80:e4:fb:da:77:
87:a0:a9:9a:3b:e1:8f:a3:15:0f:45:a5:71:5a:e4:87:52:73:
bf:b4:36:bf:07:90:97:aa:d5:c7:c5:39:2a:fc:61:a4:fe:30:
9e:41:c4:39:43:1c:33:6b:78:6d:00:2f:14:30:96:16:ad:d6:
98:d7:10:f2:7d:ea:c2:5b:09:53:83:09:c9:0c:b8:c9:ab:00:
2f:fb:1a:70:07:fa:23:1d:e6:cc:43:04:6c:b2:c9:2c:2d:f7:
fe:c8:01:d2:f0:24:e3:3d:c2:4d:aa:e5:47:29:b7:91:8f:91:
7a:1d:70:2b:1c:06:a2:71:35:38:ec:ac:28:54:9c:18:d5:15:
7e:d6:02:db:fb:1c:91:fc:ff:01:e8:61:27:f1:a8:4a:16:67:
02:cd:81:b7:d2:0e:0a:8b:da:56:0c:6f:19:cc:d4:09:d2:f4:
a8:82:44:c5:b6:20:5d:37:6b:95:68:a1:f5:42:9e:02:e6:a8:
fd:1d:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:35 2025 by rpki-client