This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier: GaCWGTqDKViATdXsbsW2lbrZ1PY29zrE+m5WqoxgX9M=
Subject key identifier: C8:7F:64:BC:C6:3F:28:FF:D5:8B:B7:79:ED:AC:3F:75:E7:F4:C7:28
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 019B202B055F505F6BD6AD5AAF3D9A8DDF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number: 177A
Signing time: Mon 15 Dec 2025 04:00:48 +0000
Manifest this update: Mon 15 Dec 2025 04:00:48 +0000
Manifest next update: Tue 16 Dec 2025 04:00:48 +0000
Files and hashes: 1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: wzNkJxkQqXe0w1CWj9TUlkzWtNxasls1az6TPI5r7jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:20:2b:05:5f:50:5f:6b:d6:ad:5a:af:3d:9a:8d:df:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Dec 15 04:00:48 2025 GMT
Not After : Dec 16 04:00:48 2025 GMT
Subject: CN=c87f64bcc63f28ffd58bb779edac3f75e7f4c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:17:83:dd:e9:27:28:dd:46:33:b4:c9:1c:
59:dc:8b:ad:5f:39:91:2b:b2:12:02:06:cb:a7:43:
93:8c:00:e7:39:39:d7:78:66:7c:bc:ad:5a:e4:4c:
04:94:e2:0b:cc:ee:d6:c8:ac:12:93:88:94:a7:30:
67:64:2e:4b:27:92:29:db:a7:2d:35:fe:cc:83:e5:
9f:ca:6c:c7:e6:22:ea:24:0a:08:84:55:92:86:c2:
32:f6:5d:df:f0:f5:2c:9c:8a:a9:00:b0:d1:35:8a:
9f:4e:d5:b9:77:02:b0:6d:6b:64:dc:3e:2a:18:0d:
11:d1:fc:d2:58:46:73:ec:3d:1b:19:5d:40:27:6d:
85:e6:09:96:52:51:c6:df:08:50:a3:86:53:aa:ff:
bb:65:9a:0c:4e:c2:a7:8b:a5:0a:39:36:09:0e:df:
97:63:de:b0:4f:ed:b9:fd:f2:02:e7:ec:6b:11:e0:
3c:fa:96:b9:eb:ce:1a:ef:0d:25:9d:77:52:e5:37:
7c:32:9f:f1:15:0f:4c:8d:c2:52:a3:b3:2b:65:51:
f8:6e:bc:5b:da:b1:5e:a6:cd:d5:0a:bf:3e:df:7d:
21:72:3f:d0:10:58:3f:60:81:9a:50:d7:78:77:e9:
d7:0b:3a:2a:9b:6f:b5:e1:48:58:f1:9c:9a:21:d1:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7F:64:BC:C6:3F:28:FF:D5:8B:B7:79:ED:AC:3F:75:E7:F4:C7:28
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:37:63:17:9c:73:e4:ce:28:63:e0:de:10:59:c4:c2:8f:
28:89:fc:ae:a5:68:7a:e4:7f:17:c8:c1:8f:15:fd:a8:12:e1:
c5:b9:19:bd:8d:79:8f:cf:fa:d0:22:3d:3a:13:19:3c:7d:ea:
aa:e7:09:44:25:24:f3:e6:40:e0:7f:1a:53:a3:30:72:36:49:
4c:7a:b8:e2:d1:5d:86:be:fe:51:9d:5f:27:21:e5:a7:96:fd:
2b:b7:76:07:a8:69:a6:cf:2b:06:9c:3e:7a:f0:89:2e:12:5c:
26:40:79:34:36:ee:45:b1:50:39:b2:ee:15:6d:94:b7:c7:5a:
7e:8e:2c:89:be:35:54:fd:51:8f:42:63:3e:e0:3e:7f:c3:70:
25:81:ab:0d:d8:ae:c7:10:df:a9:8b:ac:a3:f4:91:16:cd:de:
bf:33:d0:0c:cd:cb:f7:06:a0:5c:b1:45:f5:d4:06:11:a9:61:
2d:86:eb:bc:1d:af:f7:4c:0c:a5:30:8c:b1:2c:28:42:e2:f2:
c9:d7:7e:4c:20:d5:e4:f1:bb:5b:00:3b:cf:99:8c:7b:b4:29:
80:da:29:23:57:ff:14:51:7e:dd:c8:1b:1e:ba:e1:4f:b9:98:
39:2b:e3:03:06:e0:0a:db:6e:9f:b0:ba:d9:15:71:c4:3e:cd:
a9:59:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:23:08 2025 by rpki-client