This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: BWTorrOFJF7s850xc8jax7P99fh5VwxAqqNh1UOe7b8=
Subject key identifier: 5A:54:B0:BC:E9:DF:D6:EB:2A:A9:BE:17:43:58:DD:03:DA:F9:1A:BA
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019B2C9D795999ED3757B22B7E992C6D963A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 17A4
Signing time: Wed 17 Dec 2025 14:01:16 +0000
Manifest this update: Wed 17 Dec 2025 14:01:16 +0000
Manifest next update: Thu 18 Dec 2025 14:01:16 +0000
Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: sO51dZ9cFqh+aIpsKP1jc/Kg2gUt1BaQEzRIKSu6OqY=)
2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=)
4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=)
5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=)
11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=)
13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=)
14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:9d:79:59:99:ed:37:57:b2:2b:7e:99:2c:6d:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Dec 17 14:01:16 2025 GMT
Not After : Dec 18 14:01:16 2025 GMT
Subject: CN=5a54b0bce9dfd6eb2aa9be174358dd03daf91aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:ab:10:ad:18:01:9e:ee:bb:3d:2b:f6:da:
14:38:3a:0e:23:ce:c2:d3:93:d0:51:a8:c7:b6:c4:
28:22:db:74:ac:ed:fe:43:c6:43:ef:c6:90:d8:d7:
76:42:96:02:5b:d1:f3:43:65:92:a1:5c:fa:11:8a:
08:e9:fc:cd:b3:1c:40:1a:83:85:8d:e8:b3:10:08:
31:5a:1a:7e:83:09:36:b0:e7:49:de:ff:d6:29:aa:
ac:8e:2f:b3:f1:81:56:9a:48:3a:e8:db:1f:99:ce:
e0:54:b9:2d:ec:96:fd:6e:28:6e:fe:fd:38:17:14:
10:49:25:41:3c:85:ba:d7:a8:b5:14:c9:6b:b9:3f:
49:0a:9d:fa:62:f8:1d:95:d2:84:f2:49:d0:5a:74:
24:d7:65:5a:f1:56:9d:d3:5f:89:fc:e0:f5:e1:de:
6d:d7:e4:58:0b:72:fc:c1:e0:e5:b4:29:da:16:75:
1b:c9:f3:b9:0c:d9:7e:7c:5a:c3:17:d7:c3:9d:f8:
d2:b6:0c:b5:e7:88:89:ad:c4:38:f6:f9:03:ec:57:
19:0e:28:ad:72:19:a3:12:46:a5:29:41:ec:2c:b0:
93:7a:62:e6:64:e6:e8:9a:a7:04:84:8b:2e:ea:f8:
37:4f:4f:49:11:9d:1c:a4:0d:35:94:21:93:aa:44:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:B0:BC:E9:DF:D6:EB:2A:A9:BE:17:43:58:DD:03:DA:F9:1A:BA
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ed:f7:1e:7d:23:2f:f0:2d:cc:09:62:12:98:95:e2:60:a9:
b3:a0:ab:ea:a8:fb:5d:d8:06:e1:b3:0e:7c:6f:f4:24:9d:04:
07:01:7b:ab:d8:5a:c3:f6:6d:8e:1c:ff:dd:86:66:d3:9b:3b:
f9:d7:cd:30:5e:01:24:f2:c9:ab:26:cd:14:e1:79:a1:c2:5c:
af:7e:96:5d:6b:bf:43:53:4f:e0:59:79:d4:6c:5e:64:80:e0:
0a:8b:ee:33:94:c2:f2:d4:eb:10:89:72:3d:a3:c9:b1:27:95:
99:94:8b:24:f3:91:2f:e5:df:ab:17:25:14:7c:76:4a:d8:78:
57:8f:6e:af:1a:f5:09:63:80:7a:2e:2c:81:4e:1f:42:7c:19:
0c:9b:4f:84:81:a3:33:60:d6:0b:61:a1:53:3f:95:7d:6c:5e:
95:bd:e9:b7:19:21:e1:04:e7:33:5a:4a:61:8d:bf:b3:df:38:
c9:ed:3c:b9:63:6c:13:fc:04:42:d1:43:ec:38:36:9f:33:83:
53:e9:93:4b:c6:84:46:d5:de:b4:66:bc:06:03:01:2e:0c:15:
0a:54:c5:20:7a:9b:a6:f1:55:0c:c1:f7:b3:43:c1:a9:db:8f:
c8:d7:23:46:a1:d0:9d:18:5a:6d:f5:53:6e:3b:63:65:4e:e1:
ae:53:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:30:28 2025 by rpki-client