This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier: puRTIbZqFlLqdYR0WHqscZDHt9mrMIKuWJreOaopPlc=
Subject key identifier: FC:79:A3:EF:DB:EF:F2:43:DF:10:82:2B:61:BF:BC:F4:A0:7D:2E:59
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 019B4C95AE5E501B1AEF2549517BD1BB6E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number: 0D9F
Signing time: Tue 23 Dec 2025 19:00:36 +0000
Manifest this update: Tue 23 Dec 2025 19:00:36 +0000
Manifest next update: Wed 24 Dec 2025 19:00:36 +0000
Files and hashes: 1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: CwQm9DU+ke1tTV69C30HMxenCMey8oiv4ULk7Q2Z4R0=)
5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4c:95:ae:5e:50:1b:1a:ef:25:49:51:7b:d1:bb:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Dec 23 19:00:36 2025 GMT
Not After : Dec 24 19:00:36 2025 GMT
Subject: CN=fc79a3efdbeff243df10822b61bfbcf4a07d2e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:1a:02:60:44:80:c2:db:99:80:5d:1a:8b:
40:19:40:10:a3:65:2a:30:76:d2:30:2f:25:07:7c:
1c:d9:77:24:35:90:fa:58:14:1e:c9:a9:d9:1a:0f:
c5:c1:ac:e2:b9:d5:da:1e:24:9f:d2:16:ff:2c:44:
36:16:0c:5e:2a:f1:ae:21:9c:1c:69:c7:6e:ca:70:
76:18:22:df:e8:3d:1a:fe:19:22:a1:40:ec:f4:85:
43:59:3a:20:a3:21:e5:0f:49:e8:8e:da:b2:55:92:
13:df:8d:8b:fa:41:be:77:0a:85:cb:2a:e5:21:73:
81:49:a0:54:68:4d:a6:db:bf:1b:7f:34:68:ca:9d:
f9:dd:fa:27:90:63:28:54:09:90:12:e2:33:33:5d:
90:38:33:a2:ef:34:dd:19:6c:46:19:90:c4:7f:2f:
8f:bc:51:c4:66:67:8d:8b:cd:8b:b3:71:f3:30:7b:
43:1f:ee:3e:00:ef:dc:ab:58:5e:03:d5:2b:14:85:
4f:6e:a3:05:f9:65:6b:e0:ac:01:1e:be:86:9d:1d:
da:c9:9e:ce:1b:9d:c2:4e:90:1f:96:31:20:b5:08:
8f:20:c5:7e:ed:1d:96:11:61:9e:9d:7b:10:93:04:
df:ba:c2:10:6e:91:c3:fd:36:a9:7f:f2:49:4b:3b:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:A3:EF:DB:EF:F2:43:DF:10:82:2B:61:BF:BC:F4:A0:7D:2E:59
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:ae:29:49:2a:13:43:4a:ed:e9:9e:d2:79:14:47:20:ce:
2d:95:f1:65:86:a4:6b:9e:94:61:d9:06:ca:63:b6:13:a0:f8:
e0:e9:ec:25:c7:39:06:96:8b:f1:b1:45:d0:8a:25:d5:84:d8:
b4:9d:4e:4c:76:05:a1:ad:8b:78:ec:83:da:f1:f2:50:c3:d7:
26:ab:b2:45:72:0c:d1:e5:c5:25:13:8f:9a:36:bc:39:70:31:
d8:8b:6c:df:51:b7:1b:df:bc:25:51:e5:59:53:cf:f3:90:77:
24:8b:89:a8:96:b5:b1:1b:db:66:4f:d0:cb:23:c7:e5:08:00:
ac:0c:ea:41:82:38:29:91:41:30:83:05:0a:59:14:c0:af:bb:
88:9e:11:5f:6c:05:aa:ba:7f:6f:33:73:8e:51:65:c3:a0:95:
14:fa:7d:5c:2f:b4:05:f9:8d:d0:58:30:75:ab:f7:f7:30:35:
98:e6:d1:5f:f0:3e:0b:55:74:06:20:d8:ba:ce:9d:0a:67:83:
69:c1:2e:8e:94:5a:26:1e:23:d4:93:f3:a6:67:d0:93:d4:9e:
75:52:5c:30:6f:f7:fa:1c:28:14:f4:b6:cc:c9:bc:c4:e7:57:
73:06:57:df:e0:6a:df:4e:fa:bd:3b:ab:ce:9b:a9:8c:a1:58:
8c:d8:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:55:37 2025 by rpki-client