This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: koYDx1okWHPcHf8h0i+oNtUayNbC820j7Zh8rme5vaE=
Subject key identifier: 29:F8:4B:A1:ED:CC:D3:77:10:3C:B9:F7:EC:82:82:42:27:43:A5:1D
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019B38D8905CA7E63447C0C86285A1059B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1788
Signing time: Fri 19 Dec 2025 23:01:15 +0000
Manifest this update: Fri 19 Dec 2025 23:01:15 +0000
Manifest next update: Sat 20 Dec 2025 23:01:15 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: vYVMI11oB+LOiN7FhZfvshQaoCrr23s8b/r2AIeE2XI=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:d8:90:5c:a7:e6:34:47:c0:c8:62:85:a1:05:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Dec 19 23:01:15 2025 GMT
Not After : Dec 20 23:01:15 2025 GMT
Subject: CN=29f84ba1edccd377103cb9f7ec8282422743a51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:6c:31:f1:b1:ae:0b:d3:a7:00:bb:7a:e0:
d9:08:ea:1c:93:5d:d3:a9:2b:1d:06:f7:e5:7e:b8:
91:3d:f0:c6:4f:65:50:e1:6d:64:0a:16:f7:a4:fc:
b6:40:6f:4d:e3:98:a4:8d:68:97:f7:a4:8e:4a:57:
1e:24:0f:2d:86:39:9e:b3:3c:48:50:ca:c4:32:68:
41:d7:ff:86:ca:ea:8e:fd:55:79:2a:fa:2c:7b:25:
5e:ab:29:3c:a2:fb:31:3a:4d:85:43:74:ed:d7:a6:
45:78:b4:84:ed:c7:cb:44:b1:8e:a1:ef:a9:0a:a5:
e9:3a:ec:d8:52:99:98:3f:47:21:98:61:54:25:b9:
32:8b:fe:56:01:56:98:41:76:e7:17:8a:b9:8b:d2:
44:34:86:df:20:11:7d:f1:bd:5b:2d:fe:cd:b5:80:
5b:3e:86:e6:50:18:4a:ae:04:4c:ae:ab:33:0d:85:
8b:1b:99:50:f3:e4:9c:96:2d:8e:37:e4:b9:7c:d7:
0a:54:55:82:ac:6b:79:cd:96:2e:29:64:a3:c8:a7:
40:3b:db:67:aa:43:21:e0:89:a4:91:ce:49:59:39:
8c:3f:d4:c3:ad:42:00:a5:b8:97:ce:77:1b:06:6a:
fe:59:8f:52:62:03:19:b1:74:b3:62:53:97:fa:b3:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:4B:A1:ED:CC:D3:77:10:3C:B9:F7:EC:82:82:42:27:43:A5:1D
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ed:41:13:4c:07:99:5b:1e:52:0d:e8:2e:3b:c2:2f:0a:61:
d4:50:15:80:a8:49:c5:8d:1b:66:af:79:d8:73:96:f7:15:20:
7c:25:d7:15:dd:a8:be:d2:d9:c4:32:74:10:5b:f8:92:23:a5:
53:0b:bf:b9:a2:fc:f9:51:b6:3f:65:36:1c:0c:5c:7d:dc:2c:
19:10:90:40:1a:20:0e:3b:5b:90:9b:62:f7:79:f6:e8:0d:f0:
f5:ea:24:66:d4:8c:77:27:5a:d6:95:8c:68:24:9a:a6:2b:a2:
1a:dd:73:ee:37:41:27:07:98:df:de:ab:f1:2b:d6:c2:af:73:
56:cf:93:8e:67:df:bd:e6:25:29:90:00:b0:9f:ae:33:16:c7:
f0:8e:ed:4a:37:43:fe:49:c8:29:3d:62:1b:fe:b3:bd:27:02:
ac:34:fa:30:66:76:3a:7e:a0:ab:92:5b:c0:7f:83:13:19:63:
73:cb:1a:e1:98:e3:bd:a6:b1:c0:e5:13:9f:7d:06:52:e9:d4:
1f:10:1a:15:a6:6b:b8:a9:f7:9e:5b:8a:ba:49:30:29:d0:53:
ed:db:39:13:a5:39:e7:cf:31:a7:9d:1c:0f:d0:58:7a:2a:00:
9d:74:2d:c2:b0:2a:f3:10:e4:c8:ba:b0:a0:97:8d:2b:60:df:
cc:22:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:29:45 2025 by rpki-client