This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier: QW28NJ/6v1U0vxYptvkFqhc3z0ZYs6q1EHLpZgVFYdk=
Subject key identifier: 80:09:1C:DA:D5:75:79:80:1A:26:26:44:59:75:A3:31:BF:39:F2:34
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial: 019B36B4A7442A035871F581CDA01EF60F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number: 49
Signing time: Fri 19 Dec 2025 13:02:47 +0000
Manifest this update: Fri 19 Dec 2025 13:02:47 +0000
Manifest next update: Sat 20 Dec 2025 13:02:47 +0000
Files and hashes: 1: 30rO_BdRX1qylu2XkOuDKVnX5kA.roa (hash: bXGCsHFr9AJnwD9C9VsQWa2UE5+/86m77Z5zzSFtsJQ=)
2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: B8wf2h6VjyKm1cr2oVQLJbkKZzfel8q7LJprCpWyGa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:b4:a7:44:2a:03:58:71:f5:81:cd:a0:1e:f6:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Validity
Not Before: Dec 19 13:02:47 2025 GMT
Not After : Dec 20 13:02:47 2025 GMT
Subject: CN=80091cdad57579801a2626445975a331bf39f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:4e:df:6a:8a:1a:82:d5:b0:49:e8:59:cc:
5e:4b:8e:08:b1:1b:6c:9a:40:f0:4e:e9:28:de:d7:
57:97:31:55:58:31:36:17:af:e2:61:fb:91:c4:d5:
a0:8d:67:33:05:f6:31:f2:75:cb:56:09:33:31:02:
de:a0:3d:45:dd:83:74:9d:bb:93:c2:ae:10:ba:4f:
46:b4:82:25:f3:8a:ca:ff:dd:37:10:16:f8:77:33:
b2:84:97:a2:7e:0a:2b:10:f7:3f:c6:e4:c9:73:f4:
99:a3:fb:a9:6a:d9:0c:f3:c8:8a:0b:3f:6b:ad:8f:
56:0c:58:90:b4:c0:a1:51:35:31:a7:84:a1:99:5b:
25:dd:62:e9:fc:a9:ef:90:c6:c7:b7:57:3d:41:d9:
72:4a:cb:8b:7b:dd:fa:a3:c6:9c:7b:52:c3:04:64:
90:b7:8c:71:e6:68:c2:06:5b:c0:7b:77:01:f6:34:
b5:5a:e5:30:7e:d8:db:eb:a3:76:73:f5:29:b1:91:
33:ff:af:c6:8a:76:86:c2:1f:31:65:71:ec:c2:f5:
e8:c7:67:40:16:a6:43:90:2a:ee:4f:7e:83:ed:20:
cf:12:e7:27:39:d7:af:37:9f:83:05:22:4d:84:d5:
6c:10:35:5e:47:7f:5c:f2:0a:52:73:ed:9a:45:4e:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:1C:DA:D5:75:79:80:1A:26:26:44:59:75:A3:31:BF:39:F2:34
X509v3 Authority Key Identifier:
keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:38:58:82:5b:8a:3c:f8:b4:30:90:49:8d:85:73:e3:1f:
b1:5d:37:f9:2c:f5:96:b2:03:1a:4c:ad:5e:3d:f9:36:8c:29:
43:7f:9f:2d:46:2c:54:de:d6:e4:24:32:9e:62:a8:0d:cb:ee:
da:8e:12:d0:0a:62:c5:0c:d8:e2:ea:72:17:bb:8e:4b:1a:1e:
21:fe:1a:31:72:e5:7a:c2:62:de:9c:e5:f2:ee:d0:94:79:0e:
f0:82:5a:64:57:03:a2:72:32:a4:ee:ef:09:4f:9a:58:f4:67:
56:fb:0d:e8:fa:33:cc:ae:ef:87:65:be:88:52:80:1e:53:16:
79:f5:01:bd:9f:7d:0c:7a:96:c1:06:8e:36:6f:bf:cf:1a:0b:
ae:f8:17:97:e5:19:3c:16:69:f2:9b:62:10:9e:c0:7e:95:92:
86:15:ac:3d:55:a4:63:b1:37:7d:3e:81:3e:6f:5b:39:ea:31:
e4:8c:c3:e8:be:08:af:94:c9:3a:53:bf:99:fc:45:e1:c9:ad:
f3:75:b6:38:90:b5:f0:8d:5f:48:1f:fd:fe:b2:72:94:e4:51:
78:87:10:54:4d:47:b7:c5:80:fc:49:1f:d2:c5:a7:83:9b:d0:
f2:21:c7:3f:74:a4:37:54:4f:dc:79:8e:2d:2f:4d:ed:75:6e:
e6:b7:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:20:37 2025 by rpki-client