This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: 1D7hSBk2r/sjfHwG1JATBDUiyLx5raYckOgvgI/2DU8=
Subject key identifier: 20:50:F2:C6:0D:34:B9:91:A9:12:4E:18:93:EF:2F:7B:AE:4A:F6:51
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019AF5410FC46B4A6CBD13AAC8FE357ED632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 07DE
Signing time: Sat 06 Dec 2025 20:01:13 +0000
Manifest this update: Sat 06 Dec 2025 20:01:13 +0000
Manifest next update: Sun 07 Dec 2025 20:01:13 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: gNyES6Qs5vcjQzPrU6AbyF6MOC87842fRHkcmjRlf2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:41:0f:c4:6b:4a:6c:bd:13:aa:c8:fe:35:7e:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Dec 6 20:01:13 2025 GMT
Not After : Dec 7 20:01:13 2025 GMT
Subject: CN=2050f2c60d34b991a9124e1893ef2f7bae4af651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:94:0f:2d:2a:28:12:a8:bc:a3:24:4f:c9:
61:6e:a3:8c:6c:24:e3:51:6b:f4:45:43:01:df:2e:
5f:af:37:63:42:ea:e8:f5:ab:fd:02:42:83:41:7e:
7e:bc:fd:16:72:e7:5b:2a:4b:44:9c:46:e2:d3:26:
9c:36:5f:23:cd:1e:e9:fe:77:fa:03:ab:08:b7:79:
54:cc:fb:88:62:10:24:74:82:a2:bd:03:c9:aa:8f:
95:5c:c5:87:80:3f:e1:fe:6e:45:67:b6:31:a3:b2:
58:37:d8:01:5a:b6:e9:9d:cc:c7:a3:34:d9:68:d6:
48:25:11:d6:12:5a:a8:28:c9:d1:2f:43:37:55:13:
c5:df:d2:22:39:9a:af:51:20:36:f1:d2:d3:a3:8f:
30:7f:1d:4c:8d:72:1d:27:93:5b:c1:cc:0b:a3:87:
80:3c:0c:0d:73:fb:72:76:28:59:af:1a:ad:49:da:
17:c9:20:5a:a6:35:e6:e1:0d:62:0b:d6:5a:9c:0d:
86:94:7d:c8:4c:a2:50:72:74:c6:5a:e3:9a:17:db:
e6:a2:aa:67:32:f0:b3:69:4b:21:bb:96:6c:d8:90:
6a:9e:4a:1e:51:f5:31:c8:46:e7:be:9c:ec:32:e1:
38:85:6d:4f:b3:62:61:f0:a2:ee:88:20:10:03:ea:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:F2:C6:0D:34:B9:91:A9:12:4E:18:93:EF:2F:7B:AE:4A:F6:51
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b7:a3:3f:1e:99:1b:90:60:c6:1d:2d:01:24:fd:2b:07:10:
ac:49:e9:28:e5:3e:82:0b:10:87:97:4b:1f:a3:7f:53:d8:e2:
10:5b:fc:b6:d6:fb:4b:8e:eb:11:64:14:1f:d7:39:9c:b9:27:
f4:9f:0f:94:19:59:f2:9f:d6:2c:11:33:f5:f3:29:9b:aa:e3:
e4:34:55:e3:01:ae:8b:dc:16:ca:1e:e1:6e:37:63:a3:cb:02:
87:b7:f5:82:bf:82:64:4d:2c:c2:34:04:22:39:0c:a0:84:16:
dc:18:2b:7c:cb:49:87:06:4c:74:dd:35:1a:a8:c2:db:2f:6d:
d2:4e:d8:8b:37:52:e9:d8:84:a8:f7:94:7e:9d:74:f1:24:58:
4a:18:36:61:62:35:3f:17:bc:82:a8:d1:91:08:2c:26:f8:b7:
ab:9a:15:c9:95:09:39:01:5f:e9:9a:00:1a:c6:93:0c:c3:4d:
ea:82:95:97:11:78:7c:13:d5:a8:22:5c:ce:57:fb:e1:95:aa:
d8:99:43:4a:0c:67:12:cc:b2:86:5f:a0:14:98:73:52:b5:c1:
28:97:94:f4:ae:30:a3:60:46:f4:76:95:0c:61:6b:31:42:b4:
7e:b1:f3:29:a2:b7:a2:e5:d9:96:19:ab:c5:00:e4:9a:89:2e:
af:00:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:57 2025 by rpki-client