This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File: V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier: EA3VHOoydVpfq4Z9SOYQBkr+zQaLm3/u6K2aLkM3eTE=
Subject key identifier: 32:5E:DB:08:87:7E:6A:35:12:A0:D3:09:79:97:CE:75:EC:5D:37:BF
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer: /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial: 019AF24023871402FE118D401DB7F4D17FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number: 175F
Signing time: Sat 06 Dec 2025 06:01:20 +0000
Manifest this update: Sat 06 Dec 2025 06:01:20 +0000
Manifest next update: Sun 07 Dec 2025 06:01:20 +0000
Files and hashes: 1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: JTvaODy99qXZHiC2M/o0KbFxkkADrR10t5xlBZcFWKw=)
2: vIhHYLmEHVa7FRdnU3kcgimxEf8.roa (hash: NCzIq7GooEeEiWcAxPp0VOLgVz/cvdDQC34wVi7kJRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:23:87:14:02:fe:11:8d:40:1d:b7:f4:d1:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
Validity
Not Before: Dec 6 06:01:20 2025 GMT
Not After : Dec 7 06:01:20 2025 GMT
Subject: CN=325edb08877e6a3512a0d3097997ce75ec5d37bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:cb:94:43:f7:71:f8:c5:10:d2:c6:4b:93:
7a:c9:bd:4e:ef:b0:5e:1b:80:f7:d5:c0:af:ab:06:
aa:99:b9:be:fe:b6:da:fb:25:2a:35:e1:c1:50:a5:
ba:d9:fc:d2:f1:86:b7:da:40:c1:f5:57:93:24:eb:
b0:7b:c6:55:a0:85:6a:75:61:1f:9c:82:48:a9:d9:
8a:d3:45:94:d7:70:ee:77:ec:54:ce:9c:31:5a:0e:
44:5e:0e:fb:52:97:c6:3f:95:8d:41:04:eb:f1:15:
82:41:cf:81:d1:75:75:55:ef:12:e8:55:d4:13:f6:
8b:4b:0a:8a:1a:21:64:b1:8d:a5:d8:bb:b2:0c:35:
13:11:a6:b8:35:b6:32:57:63:dc:c6:ad:79:eb:36:
a0:1c:6f:3f:3e:ae:af:68:70:17:26:4a:07:c2:31:
b4:d9:93:5f:62:92:90:94:d5:e8:ec:37:f1:47:8c:
6e:89:c4:d8:5e:1e:05:ba:3a:c2:7e:8c:af:f5:f1:
66:46:de:10:c0:fd:2a:7d:97:93:67:d7:1d:c0:dd:
93:7e:72:ce:d3:52:8e:26:29:9d:35:c3:3b:0e:3d:
db:e8:be:1c:02:b8:e4:4d:24:b9:4b:b6:0f:7b:58:
48:2c:88:db:d9:7b:d0:a2:6b:9c:75:ab:33:8b:c1:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:DB:08:87:7E:6A:35:12:A0:D3:09:79:97:CE:75:EC:5D:37:BF
X509v3 Authority Key Identifier:
keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9f:3a:8a:22:25:a9:69:fd:50:ab:a9:08:3a:3f:42:e8:4f:
03:e7:be:5c:50:27:23:aa:85:a7:57:79:2b:d5:c5:bc:e6:c4:
19:e3:e3:56:40:93:91:ad:44:4f:00:8d:b7:6e:c1:b9:17:07:
e0:58:be:34:ff:83:84:9f:15:92:c2:f2:37:8f:d6:69:09:62:
9f:36:ee:e1:68:3b:40:5f:8d:19:a9:3e:91:09:3a:1c:9f:97:
96:2f:13:b5:52:38:f7:b1:bb:33:0f:6e:d6:0f:14:a5:83:8e:
5d:3b:27:04:a9:e1:23:c0:69:ac:56:53:0e:12:4c:98:14:0d:
fa:e0:bd:ae:c5:cb:89:ac:f9:81:46:f9:17:26:38:42:be:a4:
7a:1e:a7:4f:e3:2a:f0:3d:e5:95:d8:a6:24:b7:20:a8:90:f7:
95:73:58:31:17:ef:23:62:27:3c:49:9d:4e:ba:5d:9c:9e:fb:
9b:c3:5d:24:6c:bd:ce:63:56:e5:7d:e7:8e:44:ff:64:ac:a5:
b3:97:7d:5c:3a:ce:62:13:5c:d0:f2:10:0d:18:fb:03:8b:ed:
bf:7a:d9:de:e7:5b:bd:3b:d6:48:03:9f:f8:30:f3:62:de:d7:
90:c0:28:94:66:bc:db:40:a9:1f:85:5b:05:44:8a:00:10:8e:
f1:6a:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:02 2025 by rpki-client