This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: ejUJSa5lvrTPSbDZR000QYJyjzRVRZPfWRPjetGvV6I=
Subject key identifier: 17:FF:A1:6C:61:65:8D:94:12:A6:C6:CF:4D:20:D0:EE:10:36:FC:0C
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019B17279D3FAB724FD91B5771FA335B0343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 17A3
Signing time: Sat 13 Dec 2025 10:00:30 +0000
Manifest this update: Sat 13 Dec 2025 10:00:30 +0000
Manifest next update: Sun 14 Dec 2025 10:00:30 +0000
Files and hashes: 1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: rLkK0t3SDVVO3HeZrxhI81b+UBnX2vtg0LFHIS9F7Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:17:27:9d:3f:ab:72:4f:d9:1b:57:71:fa:33:5b:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Dec 13 10:00:30 2025 GMT
Not After : Dec 14 10:00:30 2025 GMT
Subject: CN=17ffa16c61658d9412a6c6cf4d20d0ee1036fc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:fc:a5:e8:73:3f:fb:71:8e:36:42:28:32:
35:ce:a9:45:fd:bc:a5:b7:73:42:1a:e8:0f:e9:ae:
8b:aa:49:11:8e:0e:dd:f9:85:d4:7c:42:6d:b4:a0:
6a:19:90:63:ec:ca:5c:c3:aa:a6:9c:d7:39:1b:b2:
6f:b3:ee:b8:33:6c:0e:8e:7e:b3:57:ba:fe:72:63:
11:0d:6d:22:45:8d:a7:00:56:1c:d2:c0:8d:72:e9:
7a:1b:51:55:9e:a1:d1:f3:8e:89:e3:2f:82:84:a4:
73:be:b1:4d:3c:b9:68:82:6f:82:8c:4c:7c:71:b8:
b2:d3:c2:e9:c2:46:7e:58:9e:86:05:a1:40:a9:48:
6b:09:08:d3:db:05:32:77:4e:1b:2f:80:91:b4:8d:
63:76:0c:e5:7d:f6:aa:74:75:c1:1e:43:14:18:ac:
64:b4:59:00:69:15:01:df:3f:33:5e:67:be:17:a2:
12:02:cb:00:20:d8:90:33:f9:c7:17:d3:ca:f2:4f:
bb:98:b8:fa:6d:ac:20:51:40:95:f7:f5:97:37:51:
5f:6a:2f:7f:d2:5b:b1:85:91:1c:00:9f:35:4c:b4:
d0:58:66:84:ce:c8:e8:6e:2a:34:97:d1:29:4b:ac:
92:b1:9d:42:07:44:a7:21:b8:82:95:2f:ad:55:70:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:A1:6C:61:65:8D:94:12:A6:C6:CF:4D:20:D0:EE:10:36:FC:0C
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:6b:27:e8:81:f1:c3:44:8f:cd:e7:77:93:56:04:49:f8:
5b:25:25:ae:b1:75:1a:00:20:35:f8:94:a1:63:ae:fe:be:4e:
52:40:a1:7c:2b:a8:98:03:90:76:4c:e8:2f:d0:d3:e0:57:f0:
05:39:37:61:54:8f:ac:ff:fc:7e:b3:05:20:a6:1b:9c:7c:46:
ef:14:ea:3b:43:23:4e:30:1e:0c:0b:f4:81:87:12:7f:2a:7f:
46:c0:5b:96:69:a3:94:9b:76:6f:3e:c0:76:6c:9c:2d:19:77:
42:9f:c1:f7:0f:85:dd:13:a2:a4:58:11:06:a8:b1:34:64:27:
84:31:b8:c8:ee:8e:d4:2b:0e:ce:a2:bf:06:5a:d6:83:76:30:
3c:53:45:33:a1:37:09:e0:a1:26:64:48:39:3a:49:63:b1:78:
af:9c:c1:d8:78:b6:f3:1f:a4:7d:7a:a5:89:33:0a:0d:42:44:
08:70:0c:53:4f:13:67:39:34:d1:7c:62:d2:d7:54:9b:98:16:
e2:0b:43:c1:30:01:f3:2c:84:fb:ba:22:31:9e:a7:e6:ed:79:
08:54:05:41:12:65:7d:18:c0:b7:cc:d5:2d:2a:52:69:43:ce:
60:68:04:9a:97:55:b4:24:39:d6:51:37:6d:d0:c1:15:67:b2:
79:a6:c6:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsXJ50/q3JP2RtXcfozWwNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjUxMjEzMTAwMDMwWhcNMjUxMjE0MTAwMDMwWjAzMTEwLwYDVQQD
EygxN2ZmYTE2YzYxNjU4ZDk0MTJhNmM2Y2Y0ZDIwZDBlZTEwMzZmYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5478pehzP/txjjZCKDI1zqlF/byl
t3NCGugP6a6LqkkRjg7d+YXUfEJttKBqGZBj7Mpcw6qmnNc5G7Jvs+64M2wOjn6z
V7r+cmMRDW0iRY2nAFYc0sCNcul6G1FVnqHR846J4y+ChKRzvrFNPLlogm+CjEx8
cbiy08LpwkZ+WJ6GBaFAqUhrCQjT2wUyd04bL4CRtI1jdgzlffaqdHXBHkMUGKxk
tFkAaRUB3z8zXme+F6ISAssAINiQM/nHF9PK8k+7mLj6bawgUUCV9/WXN1Ffai9/
0luxhZEcAJ81TLTQWGaEzsjobio0l9EpS6ySsZ1CB0SnIbiClS+tVXAmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf/oWxhZY2UEqbGz00g0O4QNvwMMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCdrJ+iB
8cNEj83nd5NWBEn4WyUlrrF1GgAgNfiUoWOu/r5OUkChfCuomAOQdkzoL9DT4Ffw
BTk3YVSPrP/8frMFIKYbnHxG7xTqO0MjTjAeDAv0gYcSfyp/RsBblmmjlJt2bz7A
dmycLRl3Qp/B9w+F3ROipFgRBqixNGQnhDG4yO6O1CsOzqK/BlrWg3YwPFNFM6E3
CeChJmRIOTpJY7F4r5zB2Hi28x+kfXqliTMKDUJECHAMU08TZzk00Xxi0tdUm5gW
4gtDwTAB8yyE+7oiMZ6n5u15CFQFQRJlfRjAt8zVLSpSaUPOYGgEmpdVtCQ51lE3
bdDBFWeyeabG+Q==
-----END CERTIFICATE-----
Generated at Sat Dec 13 19:14:26 2025 by rpki-client