This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier: /R6N2JLvBNOYIyXcPE7kWBE66tR5xdlkP2efqG+c0l4=
Subject key identifier: 12:F4:EB:53:4C:6C:2E:F3:AB:4E:47:7C:9E:DA:FD:74:1B:74:75:18
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019B063424104945B0F184C6465E845E0A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number: 1244
Signing time: Wed 10 Dec 2025 03:00:38 +0000
Manifest this update: Wed 10 Dec 2025 03:00:38 +0000
Manifest next update: Thu 11 Dec 2025 03:00:38 +0000
Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=)
2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=)
3: J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa (hash: yHzZkI8WBsUDrg6tstr8yujQqJ7rIkiUvhkoKj5fkYs=)
4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=)
5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=)
6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=)
7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: eIUGFvXDJv/CKoUlM89aRLrRHI5i5zOk3PArNcWiL1k=)
8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=)
9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=)
10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=)
11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:34:24:10:49:45:b0:f1:84:c6:46:5e:84:5e:0a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Dec 10 03:00:38 2025 GMT
Not After : Dec 11 03:00:38 2025 GMT
Subject: CN=12f4eb534c6c2ef3ab4e477c9edafd741b747518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:cc:d2:27:90:99:6c:53:f4:36:d1:28:71:
f9:91:dc:90:a9:6a:5a:fb:fe:7d:a2:d8:85:64:64:
4b:2e:79:61:2c:66:2f:de:98:a8:b6:31:e2:98:f4:
c5:34:3c:4a:76:22:f6:94:ab:05:27:9c:e9:13:e5:
c4:4f:0b:46:01:35:7c:17:87:de:07:d7:71:79:3e:
1d:78:af:f8:82:57:25:2b:8f:dd:71:70:24:90:a4:
02:2e:bf:18:71:f9:90:f9:e4:71:c5:09:7a:79:1f:
3b:79:bc:a8:63:51:c2:cf:6a:23:47:07:6e:19:bc:
b3:2f:fe:0a:9c:8b:93:f7:73:4c:a0:e1:ba:a6:28:
42:d8:9e:d8:b2:4a:1b:eb:80:27:62:07:f8:fc:e6:
f8:18:a2:d1:b6:ef:93:4d:bf:41:62:28:8f:b9:96:
59:33:2d:d8:98:db:3f:7a:01:8c:3e:c0:14:db:2c:
a8:2f:54:d2:9e:04:01:fc:51:88:a2:12:f6:92:f0:
16:b7:2f:3b:ea:a3:ca:c8:d1:b1:e9:59:b7:b3:8b:
f8:5e:f0:df:1f:4d:91:18:f4:a5:ce:7f:58:82:23:
aa:3c:8a:ed:58:f5:ce:53:19:ce:a7:ef:b0:4f:04:
4c:6c:6e:f2:bd:6a:b4:f9:86:7a:d8:b9:2b:57:d6:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:EB:53:4C:6C:2E:F3:AB:4E:47:7C:9E:DA:FD:74:1B:74:75:18
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f5:df:74:c3:a8:16:e7:89:68:e4:18:6a:a5:74:ea:d8:f8:
ba:6a:51:d9:c3:83:45:48:ba:b2:16:b4:6a:cf:5c:d6:e5:de:
b0:f5:74:84:7b:f8:d8:03:3d:e3:fb:99:a7:c6:e6:8f:e4:cf:
c3:82:6a:4a:f9:a5:b5:b3:47:d9:a9:27:77:67:b7:b8:36:7f:
4b:1b:b8:c5:4d:f1:10:81:37:20:54:da:9e:e5:b7:44:33:af:
c4:8f:74:f1:bd:24:1d:b5:8a:3b:7c:52:1a:bb:ec:30:02:b0:
b7:18:4f:01:26:96:82:af:9e:75:25:7e:20:0f:b8:ec:98:52:
17:d3:b4:91:1b:4b:44:bb:3a:1b:93:ed:9b:fe:b3:d4:fd:a7:
10:42:fd:91:ef:15:fb:2a:79:c7:cf:fa:c1:22:51:43:84:65:
41:be:c6:13:8c:1d:67:0a:b2:79:a4:10:c9:2c:f1:13:f9:f4:
e1:63:c8:61:a2:fa:e2:49:a6:e5:f0:0a:da:34:7e:1b:1f:69:
23:3f:34:9d:27:06:00:25:70:b3:5d:ff:61:35:fa:83:a9:84:
b8:c2:33:e3:d5:13:16:31:23:7b:08:f4:a6:80:0f:6a:f9:e6:
44:f0:81:dd:9a:f0:55:bd:3e:cd:fb:18:92:9c:d3:66:91:0d:
96:4a:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:54:46 2025 by rpki-client