This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: ILm5gYNJfH0Dgm2OVHHJdLqAIy66Lk0SP7BJkePS23w=
Subject key identifier: C4:30:6B:C5:EC:0B:F0:DE:66:8C:22:B2:0A:78:C7:75:A3:FE:C4:B4
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019AF2E4441A2350751EE8B85DF9923281D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: D9
Signing time: Sat 06 Dec 2025 09:00:37 +0000
Manifest this update: Sat 06 Dec 2025 09:00:37 +0000
Manifest next update: Sun 07 Dec 2025 09:00:37 +0000
Files and hashes: 1: 1-uUbewaA737Ti2Wi8o8SjK77aHc.roa (hash: QlD9Cd20i+8EHA8BtB471vZBbtNQcm716KVmHTOuPJ0=)
2: 8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa (hash: FTafPTHlq1IH+/Ui1c1N+bawak9jOSxUpNj0gy0d0pA=)
3: L8BLpkg4_ByhCbFcK7uHavm7f5g.roa (hash: e1aCzXYV4qmCe5iwORKEY38agwdUFZfW6yM8yoLYdTA=)
4: PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa (hash: ZOoiI4PcKu9cyfI921BIlgDSlvuVbGjs4mAo/U6V33g=)
5: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: LhpU0iTIp1ykOUY666uOZGYnABwvR4ffX3r6rybgKI4=)
6: buIXJtGqvKknwOy-e2YUQMQQ0Dk.roa (hash: UEtqDvy7n2JEoMUpwoBBhSaBKhablyOvFin5azQpZe0=)
7: loVwrvg92wZ7zx8vNurvGSPWCJg.roa (hash: oKtFkfmck2e1Bhm99yhzXyD5mQ2/n3sLoKcPg8KaNnE=)
8: o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa (hash: DhHj4T9kNHqPXFBDEITUBD0D/IF09iiNQ2ByB3yTJQI=)
9: xR1N0ZgWC0FpSzcR0b92EyDnzn8.roa (hash: n60D3DCSEgW83lG68CLjX8PIMIKZneTo8DEAS93I3sE=)
10: yfGFaoydK8GX9iZlnYz29tjx0mQ.roa (hash: jxsx5pHRIq4+3llBu+CdYcYp8fft9epR+tIujzWmFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:44:1a:23:50:75:1e:e8:b8:5d:f9:92:32:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Dec 6 09:00:37 2025 GMT
Not After : Dec 7 09:00:37 2025 GMT
Subject: CN=c4306bc5ec0bf0de668c22b20a78c775a3fec4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:9a:64:b7:05:5c:84:d4:5c:aa:9f:15:ef:
b2:d1:83:14:1b:66:7e:0b:ec:cd:6e:61:ba:23:4e:
b9:36:db:3f:e1:f5:b6:0d:8a:74:5c:97:a2:c5:cc:
ae:90:63:bb:18:5c:93:7e:84:c2:6e:37:b8:67:07:
61:9c:91:a9:5e:f7:ff:a4:04:e1:fe:4a:71:65:92:
74:22:ac:57:8c:95:75:2d:ef:5e:4b:d7:32:9d:8d:
79:95:32:cb:c4:d2:7a:f7:e9:90:ec:d7:97:ad:e4:
ae:da:a9:26:2b:21:1b:76:86:8f:98:31:ab:3e:3b:
a2:b6:b3:17:80:bc:e9:51:d9:28:03:e3:47:e0:cb:
9a:70:9f:0e:52:d2:76:c1:04:1b:c4:53:a3:85:f5:
4b:8f:0b:51:9a:a8:d5:12:ee:fa:5c:37:3a:2e:18:
42:45:66:1e:95:0b:90:56:2b:84:09:80:e3:c0:f0:
44:53:f5:fc:e0:f6:72:d6:39:64:cd:8d:99:2c:54:
50:6f:a7:f5:7f:18:90:cb:08:8c:d8:08:53:40:72:
d2:42:6d:db:a8:ac:02:af:e1:19:ff:b3:be:ae:92:
6a:83:08:d2:12:09:d3:81:e4:5b:80:ab:1b:db:0e:
3e:5c:7c:06:dc:76:b1:63:fd:68:1f:9f:8e:96:14:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:6B:C5:EC:0B:F0:DE:66:8C:22:B2:0A:78:C7:75:A3:FE:C4:B4
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c6:97:5a:8d:ce:af:aa:5a:b8:bb:ac:fd:65:55:ea:34:07:
d2:0e:f2:d3:fe:61:72:33:1e:8b:3d:41:14:21:e2:a2:12:a8:
79:90:85:5e:ba:a2:36:16:1d:1e:0e:c3:a8:f9:8f:bc:fb:5b:
59:8f:1c:02:5e:25:6b:6e:a0:dd:93:3d:b9:de:ea:1e:89:aa:
69:38:27:9c:56:77:57:fd:cf:71:6b:03:24:75:e4:d9:a8:0a:
6c:93:8f:13:0f:01:39:15:8e:58:74:76:31:f0:e2:ff:4e:ac:
4a:11:6e:da:83:9d:ad:fa:d7:7e:35:21:5e:fd:a1:2c:0c:af:
27:2d:f6:2d:93:64:d9:fc:ff:fb:a5:a8:b7:57:38:db:93:d4:
9a:06:2b:a5:a7:af:a5:cb:42:ae:43:39:69:8e:fe:d2:ae:d4:
f1:0e:7b:4e:ea:b4:46:69:2c:0c:0f:41:09:e8:de:fb:13:4f:
0b:ef:a1:1b:47:77:94:37:ec:25:e9:b5:64:e1:91:89:40:ec:
a5:8a:20:6c:3f:3e:64:86:c3:34:18:72:3e:33:72:1f:39:80:
12:ff:29:41:f5:c7:40:c1:68:44:0b:fd:1c:2e:aa:39:70:93:
e3:85:80:ca:7a:b7:03:1a:72:f9:99:02:7b:8a:a9:41:c9:cf:
07:45:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:27 2025 by rpki-client