This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: hYdRy2Y7e8uYsM3htgAJjsbiP6OgXfVzxHLL1pWBS34=
Subject key identifier: D0:0C:93:9B:CE:1D:B9:1C:34:58:D5:13:88:3A:E1:87:E1:0B:6C:90
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 019B0F0100D87195905506DE5E3D06866A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 04FA
Signing time: Thu 11 Dec 2025 20:01:22 +0000
Manifest this update: Thu 11 Dec 2025 20:01:22 +0000
Manifest next update: Fri 12 Dec 2025 20:01:22 +0000
Files and hashes: 1: 6UDsATLFOBowasxnhJMDeAafmaI.roa (hash: mek1AJKC9MdmAKcvzYGE5CNoG2zhpmvZdbDUh1f1RR8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: jEyhnawA1v0gtesf0kIlyVmfvFc.roa (hash: YkjZV8m/I/sTlivm0IaJ7KD648BRtxn2dN92ii6NY5I=)
4: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: 3NVK95+Q8zfXuiMXyPXTPo2sDQGhGQ5syG1+2cCXP6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:01:00:d8:71:95:90:55:06:de:5e:3d:06:86:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Dec 11 20:01:22 2025 GMT
Not After : Dec 12 20:01:22 2025 GMT
Subject: CN=d00c939bce1db91c3458d513883ae187e10b6c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:ff:47:c9:f1:4b:ca:60:8b:e8:a3:36:4a:
d3:52:b7:c4:82:f9:5a:72:ca:31:39:3f:9d:69:71:
22:6d:1b:08:9d:9b:0b:f3:39:a7:04:34:5f:0b:d1:
24:9c:8b:28:08:9c:5a:1b:bc:0c:48:4d:8c:1a:ab:
75:5a:d2:36:7f:e1:ac:18:3f:ea:74:59:78:60:f1:
cc:cb:e7:b4:0f:4b:b6:49:80:ed:4a:d0:e4:64:fb:
2b:1a:d3:ae:ca:ad:8b:65:6e:64:79:d6:bb:4f:d2:
09:df:d6:01:6d:c9:ee:ed:61:4f:ef:41:86:18:5c:
de:d9:50:63:b0:13:64:db:26:e4:ae:5b:a6:a2:59:
8a:41:93:6e:f9:ba:62:d4:5d:57:78:21:54:25:75:
26:69:16:b2:a4:37:f8:60:8c:48:58:d1:49:44:0d:
ff:51:44:be:d4:2e:9c:23:68:97:a4:8e:2f:a1:78:
be:02:c1:95:f8:f4:ca:d7:ab:40:a7:cb:a1:2b:06:
b3:a7:f3:e7:ff:4c:88:28:e0:93:cd:47:ca:c4:1a:
ac:3c:55:6b:62:b9:26:4d:52:a7:24:14:dc:93:a5:
9d:11:0c:2c:60:22:19:01:ab:a0:43:ca:c0:1f:a5:
1e:b9:a0:62:71:c8:f3:84:9b:27:8f:be:00:3c:e8:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:93:9B:CE:1D:B9:1C:34:58:D5:13:88:3A:E1:87:E1:0B:6C:90
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:b2:0b:50:eb:b4:ca:56:53:a7:3c:39:91:f5:d7:e1:64:
c5:d4:e7:d9:55:1a:2f:db:be:97:a1:ff:99:f9:e2:8f:25:00:
42:18:22:ff:92:b5:de:5a:e7:6e:d6:21:76:49:d5:6e:b7:3b:
c1:b2:9d:de:45:0e:23:83:0e:a1:e8:ed:82:38:5d:16:3a:f2:
91:d2:41:0a:42:35:6e:c9:e8:d8:7b:c5:03:87:09:ac:0b:a4:
08:1a:6c:72:07:2e:62:3a:74:36:8b:46:ef:ff:79:80:c4:b6:
f3:31:71:9f:ed:4a:59:6c:08:d6:f7:4e:34:8f:fe:ed:75:b8:
3b:6f:9d:15:f7:22:fb:55:d2:8a:40:b7:08:bb:ab:66:91:70:
d4:8f:30:4a:1d:5c:9e:30:37:47:9d:54:e3:0c:02:b2:ae:71:
fb:cb:37:31:f0:a1:6d:2b:46:41:84:82:31:8c:01:62:67:be:
94:61:bd:84:d4:20:19:32:be:23:c4:e8:0a:75:8e:a8:b3:fb:
49:5c:04:19:b9:90:2a:e2:c2:17:b3:8e:41:ac:2d:c2:db:80:
21:4b:5e:61:2a:a9:6e:2a:83:3d:32:a9:da:74:9f:8a:48:4f:
4d:5c:b0:96:ce:32:9a:b8:ed:b1:f6:2d:b3:29:df:d2:e8:9d:
b0:84:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:35:30 2025 by rpki-client