This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: kv+SSsK2pLyc3Ud7IsGZWREJhX2djaeqV9SiVk5o4uI=
Subject key identifier: AB:F2:7E:E6:43:9B:DB:7A:DC:FD:17:7D:C2:4C:3C:4F:89:CA:63:F8
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019AF23F97FDA857846185C789E362DFF073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0BEE
Signing time: Sat 06 Dec 2025 06:00:45 +0000
Manifest this update: Sat 06 Dec 2025 06:00:45 +0000
Manifest next update: Sun 07 Dec 2025 06:00:45 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 0NKNVjZhoJOka/hvYALJmPfTtcVhFcwpMSbKerXK39g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:97:fd:a8:57:84:61:85:c7:89:e3:62:df:f0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Dec 6 06:00:45 2025 GMT
Not After : Dec 7 06:00:45 2025 GMT
Subject: CN=abf27ee6439bdb7adcfd177dc24c3c4f89ca63f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:74:6e:da:86:db:3e:68:95:5c:27:bc:a3:
1c:ad:23:2d:1b:2a:be:fe:1b:8f:c3:9b:ea:32:77:
ab:e7:ef:3d:ee:ee:bc:2f:d2:2b:a9:02:80:13:7d:
ac:a2:70:ae:32:ff:95:e6:d4:43:80:18:2e:f1:9d:
38:00:03:a9:70:65:28:7e:90:b2:bc:ce:a5:45:74:
90:5a:47:5a:91:fe:6b:75:7c:5a:6e:7b:15:2b:5f:
ab:40:00:45:f8:62:dd:59:d5:2a:1b:f9:c2:16:9b:
7a:8d:b6:52:9a:81:13:a2:1d:3d:89:e1:16:87:79:
92:43:9f:2b:9a:a3:53:c3:25:1f:b0:c8:1a:d9:f4:
ee:13:cf:36:40:dd:e2:7e:dd:8f:fe:e5:12:7f:ba:
94:1e:d8:0f:d6:be:5e:fe:8e:93:6d:d8:86:b9:68:
b0:51:43:fc:28:a9:3f:4a:ee:2c:5d:4b:74:63:df:
b5:ad:94:5f:fe:3c:cd:95:32:29:83:34:a7:a1:bd:
c9:d1:6a:6c:25:42:aa:d8:d0:f2:27:28:18:6b:69:
57:54:4d:c9:82:20:2b:44:6a:cd:6b:53:71:af:5e:
5f:7e:d8:0a:5a:78:2d:1f:17:80:86:6b:0d:f5:f6:
57:da:89:f8:40:63:ab:e5:1e:03:6b:b3:ae:8c:58:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:7E:E6:43:9B:DB:7A:DC:FD:17:7D:C2:4C:3C:4F:89:CA:63:F8
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:1c:f9:b2:0c:73:a9:f4:cc:24:8b:d4:ca:7d:e5:f2:46:
6c:15:01:e4:ff:28:2a:37:ae:de:4f:ed:1d:74:d7:4a:30:85:
c8:8b:ce:21:19:37:fd:9a:0c:71:a1:08:e4:be:d1:db:96:e1:
f2:18:4e:d8:7d:71:cf:25:0b:35:67:4a:0e:b0:fb:b3:d3:40:
fc:da:cf:43:e9:c3:e0:d5:7b:c9:b8:77:58:04:f7:ab:4c:54:
a4:07:fa:40:c7:59:65:9f:b6:f5:ce:88:de:ce:9b:ea:6f:9c:
3f:b6:76:b8:78:09:9e:44:09:dd:13:85:be:05:37:12:b6:0e:
d9:6f:23:29:7d:25:d9:cb:1e:00:e0:03:bb:e0:ee:8a:70:81:
c9:9b:0d:50:49:87:f5:30:d2:a6:ec:ca:24:08:a8:fb:7d:bb:
10:77:27:e2:92:40:11:f0:a7:8e:01:a9:98:6e:36:2f:8d:45:
d7:21:ea:60:e8:af:ce:02:34:64:c4:68:f4:d0:31:eb:15:b1:
24:d1:7c:30:ac:d3:fa:21:6b:a9:a3:ae:26:18:f9:f7:78:f8:
f2:04:14:aa:b9:a7:5a:3b:1e:05:83:8e:2d:8d:19:4f:af:6d:
48:46:7b:1b:92:92:88:47:7a:1d:7a:0c:6d:7d:5b:05:9a:1d:
bb:86:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:16:45 2025 by rpki-client