This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: EzoUEU/kJXpcs1mtZhY+WScBL8c55TzCsxwCDZiVfZ4=
Subject key identifier: AB:9A:BB:8B:67:41:39:E5:08:B3:72:57:58:D3:3E:EB:28:BE:33:06
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 019AF31B47E24B3D26A960DAE468CC7CEC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 10:00:42 +0000
Manifest this update: Sat 06 Dec 2025 10:00:42 +0000
Manifest next update: Sun 07 Dec 2025 10:00:42 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: v4zSrIT99WU54Y7WgCOxras74qAMHsJCQNPlpuU0MLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:47:e2:4b:3d:26:a9:60:da:e4:68:cc:7c:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Dec 6 10:00:42 2025 GMT
Not After : Dec 7 10:00:42 2025 GMT
Subject: CN=ab9abb8b674139e508b3725758d33eeb28be3306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:3e:6c:22:3f:b9:5e:c5:46:14:76:d3:22:
f8:40:83:2c:75:66:ef:90:d7:a6:26:64:c2:2e:ec:
3e:2a:b9:9f:98:d5:f4:92:71:63:48:f4:6f:e8:32:
d8:c1:96:b6:61:2c:1d:8c:40:3b:c8:89:81:ab:e9:
24:5f:27:01:f6:b9:2e:82:42:4e:93:54:46:6d:13:
e9:c8:26:d2:5c:64:c9:76:44:0e:86:8b:a2:33:53:
66:1b:c1:8e:8c:96:4b:f9:da:63:8e:9d:b5:64:34:
67:7d:78:91:34:24:76:2c:1d:50:21:46:64:40:0d:
45:75:f3:42:a5:eb:f8:bd:7f:58:ca:ed:4f:0f:5a:
27:40:c3:86:35:b2:36:2c:ad:f5:b5:12:93:7a:c0:
d7:d7:98:49:c6:5c:ae:1a:84:16:82:09:2f:4c:83:
7c:10:59:f2:02:6f:b6:fa:6c:81:63:3e:86:5c:bd:
e7:a7:73:14:32:b0:9e:7b:77:99:b2:25:6b:15:a8:
d1:e1:ea:1e:22:b3:0b:f6:77:30:be:6e:26:29:8c:
aa:ad:bb:60:9e:55:7a:a3:bf:05:3f:d6:fe:e6:2f:
69:5b:b8:5c:97:31:5e:a1:9c:34:ef:fe:51:52:2e:
05:b0:3a:65:74:55:81:f8:3b:8c:c6:b2:59:87:c0:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:BB:8B:67:41:39:E5:08:B3:72:57:58:D3:3E:EB:28:BE:33:06
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bf:2e:e6:87:a9:87:b6:e8:0d:30:05:6d:ac:8d:93:87:d4:
10:d0:c5:dd:5a:4e:45:33:25:c3:42:af:f1:a3:f7:e2:7d:3b:
c1:01:3f:87:54:07:d5:be:e1:5c:2e:a3:25:a8:a0:17:b8:c8:
8e:12:79:ca:6c:97:bd:69:87:cd:4e:cd:bc:dc:df:ce:e3:33:
63:b1:8f:b4:91:e1:bd:fb:f5:99:c9:04:05:d6:a1:3b:8a:e6:
59:54:70:fa:83:4a:35:3b:91:bb:f8:a9:8b:9a:b9:6b:d0:0d:
3e:f9:fa:87:8c:af:73:7f:cd:cb:63:ac:98:ae:ad:7e:05:1f:
38:40:2b:e5:1d:45:d9:00:63:a5:34:6a:54:f4:7b:ed:80:ea:
2f:a9:b7:d0:81:6c:4c:01:3b:be:1a:c4:10:24:97:b5:94:8e:
e7:fb:f3:1b:62:9a:03:18:b8:c4:fd:8e:e0:b1:23:db:05:12:
aa:88:ff:79:03:cb:91:98:97:00:83:00:1b:70:8f:df:79:63:
b7:89:3f:39:5d:b3:6e:27:c3:db:d0:76:c9:91:a2:5d:b5:69:
60:14:ff:81:1c:a9:1a:50:7b:2e:4a:08:ef:1e:73:12:d2:e4:
af:25:1e:eb:3d:46:ae:2b:a8:fd:10:b3:01:a3:77:6d:c6:a9:
d6:b4:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:36 2025 by rpki-client