This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: RnMxtUHY0lDTcT77K3BGNOK2H+eiq+VZeB/XcHL6V8o=
Subject key identifier: F6:01:F4:4C:28:25:3E:99:C0:5A:16:C8:FF:BC:C1:79:43:93:0E:0F
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 019AF2AD49DD7A16D756463B1A893A93C82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 08:00:34 +0000
Manifest this update: Sat 06 Dec 2025 08:00:34 +0000
Manifest next update: Sun 07 Dec 2025 08:00:34 +0000
Files and hashes: 1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: q8XCO59jtSCt9e+DyeBZTfA9CHHhYh1eYb2Jy9vorZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:49:dd:7a:16:d7:56:46:3b:1a:89:3a:93:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Dec 6 08:00:34 2025 GMT
Not After : Dec 7 08:00:34 2025 GMT
Subject: CN=f601f44c28253e99c05a16c8ffbcc17943930e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:ef:e7:05:4b:cb:39:e9:9a:1f:83:b6:4b:
49:ef:c5:26:38:81:ab:d8:f8:f1:cb:15:ce:3f:c9:
b3:9c:ac:22:40:af:7f:3f:d7:7d:d5:77:35:d9:1c:
45:30:86:31:09:e8:52:ec:bb:83:71:1d:75:35:9e:
1c:f2:37:97:c6:0f:53:e5:6f:90:a7:4a:88:f4:6e:
63:39:d0:b8:49:89:54:4f:e5:2f:b4:25:0e:c5:24:
dc:8d:d1:2d:58:e7:2b:a8:de:07:0e:a3:88:af:2c:
2c:a7:3d:b2:a4:47:37:ae:f2:64:a4:6e:77:ee:fa:
be:98:1d:18:11:4b:a1:63:25:44:eb:bd:66:50:8d:
15:e0:6e:b5:3a:ee:e7:ac:bd:0b:ca:ee:33:70:fd:
2a:a8:27:4f:2f:5c:0f:55:46:8e:45:d9:c5:eb:ef:
66:d3:b6:a1:a2:e8:81:55:04:11:f6:37:3e:fd:82:
8b:20:aa:8a:2c:64:35:77:fe:bf:b5:92:b0:ca:01:
ba:30:66:7b:cc:6f:a2:be:4c:e6:d4:f2:06:db:ba:
c1:20:5f:9a:2b:d7:71:b9:e1:8b:ef:82:d6:ea:4a:
14:f4:52:e2:da:00:bf:e7:76:d0:37:ff:2e:b4:fe:
32:51:a9:6c:b7:bc:ec:cc:e8:75:56:e6:5b:eb:27:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:01:F4:4C:28:25:3E:99:C0:5A:16:C8:FF:BC:C1:79:43:93:0E:0F
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9c:72:c0:6b:96:7d:f4:93:ba:21:f6:45:51:4c:ee:6b:a1:
b8:f8:5e:99:32:d4:41:0c:d0:a4:cd:55:56:25:26:76:77:08:
9b:93:f8:ec:52:2d:a9:b4:27:11:dd:f1:52:79:32:b2:00:04:
2c:37:4a:fb:06:f9:39:b0:61:1b:e0:05:8c:f0:1f:fc:86:73:
d0:4a:ed:5c:ce:d0:92:c8:67:f8:a8:41:32:2f:6f:21:b2:7f:
5d:48:7c:b5:31:08:a6:5e:e2:6f:90:de:8a:34:67:21:e1:f6:
4d:3d:ac:30:ba:c4:f8:7a:21:b3:24:df:b7:c7:a4:e4:ed:27:
d9:d9:80:94:0b:09:79:01:74:26:28:7c:0a:26:32:04:5b:6c:
b6:c6:4c:56:f8:75:4a:82:3e:ec:0e:2b:2a:e7:cf:2f:92:08:
3b:b2:c6:64:e7:9b:6d:a4:1d:e2:16:15:90:1d:14:80:d8:14:
05:c6:59:d8:74:72:fe:fc:e2:27:6d:2b:e7:37:99:24:50:ba:
8d:61:62:58:5b:c4:f4:6b:53:8d:22:e1:1f:7d:db:1d:d8:ee:
d8:97:d0:8a:4c:ca:50:4e:35:10:b3:58:39:6c:de:e4:dd:67:
60:af:9f:6d:9f:d6:4e:6c:1f:a5:30:0a:0e:21:c5:3b:c0:1f:
d8:ea:79:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrUndehbXVkY7Gok6k8gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD
EyhmNjAxZjQ0YzI4MjUzZTk5YzA1YTE2YzhmZmJjYzE3OTQzOTMwZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBDv5wVLyznpmh+DtktJ78UmOIGr
2PjxyxXOP8mznKwiQK9/P9d91Xc12RxFMIYxCehS7LuDcR11NZ4c8jeXxg9T5W+Q
p0qI9G5jOdC4SYlUT+UvtCUOxSTcjdEtWOcrqN4HDqOIrywspz2ypEc3rvJkpG53
7vq+mB0YEUuhYyVE671mUI0V4G61Ou7nrL0Lyu4zcP0qqCdPL1wPVUaORdnF6+9m
07ahouiBVQQR9jc+/YKLIKqKLGQ1d/6/tZKwygG6MGZ7zG+ivkzm1PIG27rBIF+a
K9dxueGL74LW6koU9FLi2gC/53bQN/8utP4yUalst7zszOh1VuZb6yd0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYB9EwoJT6ZwFoWyP+8wXlDkw4PMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJxywGuW
ffSTuiH2RVFM7muhuPhemTLUQQzQpM1VViUmdncIm5P47FItqbQnEd3xUnkysgAE
LDdK+wb5ObBhG+AFjPAf/IZz0ErtXM7Qkshn+KhBMi9vIbJ/XUh8tTEIpl7ib5De
ijRnIeH2TT2sMLrE+HohsyTft8ek5O0n2dmAlAsJeQF0Jih8CiYyBFtstsZMVvh1
SoI+7A4rKufPL5IIO7LGZOebbaQd4hYVkB0UgNgUBcZZ2HRy/vziJ20r5zeZJFC6
jWFiWFvE9GtTjSLhH33bHdju2JfQikzKUE41ELNYOWze5N1nYK+fbZ/WTmwfpTAK
DiHFO8Af2Op5Dg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:18 2025 by rpki-client