This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: 1fiLwxZjubRCScRaKettCYY4+CkLORULoG5dyijnGp4=
Subject key identifier: FC:A7:94:F3:B5:AC:32:ED:BD:E0:51:18:36:F2:63:06:2F:1F:BC:87
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019AF16461B6D6A0DCDB593F327235170F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0A56
Signing time: Sat 06 Dec 2025 02:01:18 +0000
Manifest this update: Sat 06 Dec 2025 02:01:18 +0000
Manifest next update: Sun 07 Dec 2025 02:01:18 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: kgGNDSfJ56gIbmRmz9kD4eflGFqRZy+pzjW0mUDSERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:61:b6:d6:a0:dc:db:59:3f:32:72:35:17:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Dec 6 02:01:18 2025 GMT
Not After : Dec 7 02:01:18 2025 GMT
Subject: CN=fca794f3b5ac32edbde0511836f263062f1fbc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:12:de:3f:38:4b:48:f6:0c:d1:66:ab:3e:
18:f5:18:dd:29:7f:66:38:b5:02:fb:b2:d1:c6:a1:
1a:3b:79:89:6e:91:23:78:cd:53:25:08:ce:2a:6c:
43:a9:7b:08:1c:2b:5b:b5:46:62:8d:9a:30:4b:e7:
40:0e:43:3a:ca:aa:66:33:5d:1e:66:5d:57:14:bd:
8b:aa:2d:2a:b6:41:2f:bd:eb:28:60:9c:82:2b:6b:
1f:e9:7a:b0:a6:c6:56:4b:af:f3:06:54:4a:9c:72:
ae:d2:24:93:20:69:e0:65:c6:57:ef:4a:7c:66:86:
ba:4a:72:af:ef:13:f5:30:d2:41:cd:6d:e5:76:a3:
d2:c5:59:69:37:47:a2:e0:2f:1f:24:aa:32:87:81:
d9:e2:e5:e6:20:52:b2:11:ef:3b:d6:19:13:9b:4a:
89:70:d5:a7:09:c9:75:5d:cd:04:29:cd:b5:11:ea:
85:5f:74:9a:2c:a2:d7:8e:97:5f:b3:ec:32:5f:37:
0f:95:fe:f7:ff:82:3d:28:3f:15:12:b9:99:ce:ac:
d0:ca:e5:1a:d9:b0:8f:0a:8e:38:f5:a0:88:9f:5d:
3e:83:66:00:79:aa:8b:b7:4c:31:ee:ac:6f:4f:4a:
4c:cf:3c:7c:c0:00:54:4f:e8:bd:53:af:7a:44:68:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:94:F3:B5:AC:32:ED:BD:E0:51:18:36:F2:63:06:2F:1F:BC:87
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:c3:7b:3a:84:27:82:d6:b4:15:0e:db:c2:34:be:94:1e:
82:96:6c:46:65:32:5a:b0:88:8a:d3:68:b2:76:5b:fa:be:c0:
53:19:0d:43:00:50:46:32:f5:fc:40:f0:53:50:b2:49:d4:4f:
dd:fc:82:bf:ec:88:9a:32:ae:ee:e5:b0:77:1c:40:ca:e9:90:
15:a9:f3:ab:1c:1f:49:be:b8:38:f6:63:40:e7:fb:84:18:6b:
d1:27:fa:5c:54:55:7a:e0:be:53:8e:80:f3:0f:05:ac:20:cf:
0c:fa:23:08:40:95:48:6b:db:e9:8a:14:eb:de:2b:80:bb:d1:
59:14:3f:30:1a:a6:01:70:32:8a:68:ac:57:25:b1:28:a2:d4:
b9:7e:f0:e5:4d:cc:d4:8f:4d:02:fc:5f:52:7a:b9:1a:21:04:
35:dc:57:d9:51:ee:e1:44:09:e8:eb:f2:ff:50:c4:0b:70:49:
8a:48:e6:0a:5d:df:33:7e:40:c1:1b:02:bb:4d:e5:51:38:f6:
fd:ad:5a:fb:45:63:14:aa:ee:76:26:45:a4:6f:d3:ca:cc:ea:
9c:15:95:97:83:98:ed:b7:f1:af:fd:f7:fb:ae:06:74:ee:b8:
95:31:55:97:30:ca:8d:0b:6f:c6:38:c9:e4:1b:22:3f:ac:68:
96:26:37:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZGG21qDc21k/MnI1Fw9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWI2Y2IyZTgwN2FlY2ViZDdlMDNhODA4MDhmYWIyM2Q5
YzQ3MTYwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD
EyhmY2E3OTRmM2I1YWMzMmVkYmRlMDUxMTgzNmYyNjMwNjJmMWZiYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtksS3j84S0j2DNFmqz4Y9RjdKX9m
OLUC+7LRxqEaO3mJbpEjeM1TJQjOKmxDqXsIHCtbtUZijZowS+dADkM6yqpmM10e
Zl1XFL2Lqi0qtkEvvesoYJyCK2sf6XqwpsZWS6/zBlRKnHKu0iSTIGngZcZX70p8
Zoa6SnKv7xP1MNJBzW3ldqPSxVlpN0ei4C8fJKoyh4HZ4uXmIFKyEe871hkTm0qJ
cNWnCcl1Xc0EKc21EeqFX3SaLKLXjpdfs+wyXzcPlf73/4I9KD8VErmZzqzQyuUa
2bCPCo449aCIn10+g2YAeaqLt0wx7qxvT0pMzzx8wABUT+i9U696RGjEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPynlPO1rDLtveBRGDbyYwYvH7yHMB8GA1UdIwQY
MBaAFL2rbLLoB67OvX4DqAgI+rI9nEcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2It
MjlmNzhjMjc5ODlmLzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2ItMjlmNzhjMjc5ODlm
LzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+rDezqE
J4LWtBUO28I0vpQegpZsRmUyWrCIitNosnZb+r7AUxkNQwBQRjL1/EDwU1CySdRP
3fyCv+yImjKu7uWwdxxAyumQFanzqxwfSb64OPZjQOf7hBhr0Sf6XFRVeuC+U46A
8w8FrCDPDPojCECVSGvb6YoU694rgLvRWRQ/MBqmAXAyimisVyWxKKLUuX7w5U3M
1I9NAvxfUnq5GiEENdxX2VHu4UQJ6Ovy/1DEC3BJikjmCl3fM35AwRsCu03lUTj2
/a1a+0VjFKrudiZFpG/TyszqnBWVl4OY7bfxr/33+64GdO64lTFVlzDKjQtvxjjJ
5BsiP6xoliY3Ag==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:18:03 2025 by rpki-client