This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: NEmHeCWVq9lTK93ZQiA3hLzW3ARMX0cXvttuwKCS7iY=
Subject key identifier: 98:40:51:AC:9A:83:43:B0:C3:16:31:40:A5:6C:2C:81:91:9E:40:CE
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 019AF509BE87BEBDF961839EEABC34817AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 19:00:47 +0000
Manifest this update: Sat 06 Dec 2025 19:00:47 +0000
Manifest next update: Sun 07 Dec 2025 19:00:47 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: 9C87rTBdWrELnUqp4mewOWozp5M2UWkFv0xEV3ijdKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:09:be:87:be:bd:f9:61:83:9e:ea:bc:34:81:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Dec 6 19:00:47 2025 GMT
Not After : Dec 7 19:00:47 2025 GMT
Subject: CN=984051ac9a8343b0c3163140a56c2c81919e40ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:56:9f:ed:93:c4:72:20:fe:5b:fe:0a:93:
e9:a9:88:ed:ef:2b:9c:09:fe:54:3c:5b:f0:80:92:
8f:fc:95:a5:32:98:dd:c9:5d:d2:cd:e5:47:42:31:
03:50:08:7e:47:8a:7b:5d:19:62:b7:d1:bb:f4:b4:
62:f6:89:36:6a:74:d1:8b:b0:19:ba:ec:6d:c8:ae:
fd:cf:1d:5f:a1:fe:6f:23:95:38:36:e3:c8:4f:dd:
9a:3c:d3:46:61:ad:e8:fc:2d:54:8d:5f:b8:6d:d1:
a3:27:16:c9:85:49:74:54:83:10:6f:33:de:3c:19:
64:a4:d0:32:f8:a9:84:47:6e:36:48:bc:a4:78:03:
77:ee:ff:87:d0:60:d0:8a:f7:7a:76:88:e3:10:b4:
0d:a8:0f:df:38:9b:d8:42:a0:de:3a:af:18:3c:16:
46:38:11:ec:08:36:c6:8c:dc:af:88:5e:c1:80:03:
0a:03:3d:fa:c2:e3:fe:50:c0:e2:61:db:9a:0e:1c:
c7:e8:87:09:51:14:c1:0e:7d:99:81:9d:57:29:d5:
cd:5b:bf:01:51:9c:bf:78:ae:2a:80:9a:c3:13:e4:
f5:60:ac:b5:cf:88:d9:99:f2:70:c8:68:5e:c1:37:
66:31:61:bb:98:b0:43:b8:7b:e3:ff:10:3f:cd:11:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:51:AC:9A:83:43:B0:C3:16:31:40:A5:6C:2C:81:91:9E:40:CE
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:77:56:04:44:41:86:02:21:be:68:ba:14:01:29:6c:bd:8d:
bd:3c:94:cd:aa:53:4f:7f:86:b1:47:0d:1f:92:a8:d9:05:21:
ea:8c:fb:a4:7b:95:29:06:ec:f8:56:ad:58:9c:a4:af:1c:7a:
fb:a1:d8:32:55:2a:e5:6b:a2:43:07:94:d3:20:68:ba:e9:62:
de:e7:7f:8b:14:f9:82:6c:d6:07:4f:9b:e9:68:59:5d:52:f4:
22:4a:df:d1:6e:d0:13:af:0f:9f:f8:f5:83:68:cb:fe:23:a3:
a9:9f:aa:fd:40:a8:41:7b:18:21:6c:ec:af:3d:32:46:52:fd:
8c:17:c9:18:50:42:24:e4:70:6c:17:d5:7a:63:f2:3b:37:78:
8d:e1:b4:db:84:71:6a:ab:d8:cb:09:8a:42:78:8e:26:76:71:
2c:ea:5d:7b:72:da:fb:e6:76:f6:51:a4:19:0f:1b:e7:09:eb:
30:61:4d:be:25:fd:8b:7b:19:ef:f6:f9:9a:25:e4:40:ae:3e:
ef:08:8e:be:ba:92:0d:85:9b:7c:7b:95:ec:66:27:c0:e2:c4:
8e:71:d9:8c:1e:37:13:f3:87:2f:3e:0a:2a:14:49:f5:69:42:
28:71:b3:8b:0e:63:a4:c2:d8:f8:70:0f:cc:55:d2:64:70:f8:
a6:1f:d9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1Cb6Hvr35YYOe6rw0gXqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3
NzBlYzYwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg5ODQwNTFhYzlhODM0M2IwYzMxNjMxNDBhNTZjMmM4MTkxOWU0MGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrdWn+2TxHIg/lv+CpPpqYjt7yuc
Cf5UPFvwgJKP/JWlMpjdyV3SzeVHQjEDUAh+R4p7XRlit9G79LRi9ok2anTRi7AZ
uuxtyK79zx1fof5vI5U4NuPIT92aPNNGYa3o/C1UjV+4bdGjJxbJhUl0VIMQbzPe
PBlkpNAy+KmER242SLykeAN37v+H0GDQivd6dojjELQNqA/fOJvYQqDeOq8YPBZG
OBHsCDbGjNyviF7BgAMKAz36wuP+UMDiYduaDhzH6IcJURTBDn2ZgZ1XKdXNW78B
UZy/eK4qgJrDE+T1YKy1z4jZmfJwyGhewTdmMWG7mLBDuHvj/xA/zRHShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhAUayag0OwwxYxQKVsLIGRnkDOMB8GA1UdIwQY
MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt
NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw
LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXdWBERB
hgIhvmi6FAEpbL2NvTyUzapTT3+GsUcNH5Ko2QUh6oz7pHuVKQbs+FatWJykrxx6
+6HYMlUq5WuiQweU0yBouuli3ud/ixT5gmzWB0+b6WhZXVL0Ikrf0W7QE68Pn/j1
g2jL/iOjqZ+q/UCoQXsYIWzsrz0yRlL9jBfJGFBCJORwbBfVemPyOzd4jeG024Rx
aqvYywmKQniOJnZxLOpde3La++Z29lGkGQ8b5wnrMGFNviX9i3sZ7/b5miXkQK4+
7wiOvrqSDYWbfHuV7GYnwOLEjnHZjB43E/OHLz4KKhRJ9WlCKHGziw5jpMLY+HAP
zFXSZHD4ph/Zpg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:31 2025 by rpki-client