This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File: rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier: H2TaWL+DM+1r96/EQSF0wwjKTbajvt4SY/YaFXavymA=
Subject key identifier: 3C:D8:FC:17:D3:6E:72:4D:BE:10:88:E3:D3:A3:3E:7D:C8:B4:C9:B1
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019B3D22BB8DCA3520682EFE6C99CB0065D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number: 17B1
Signing time: Sat 20 Dec 2025 19:00:44 +0000
Manifest this update: Sat 20 Dec 2025 19:00:44 +0000
Manifest next update: Sun 21 Dec 2025 19:00:44 +0000
Files and hashes: 1: 18oxWhArE0RhfvzLv5hZQE6tik8.roa (hash: PaOcC02WGlDWNTRr4QEBVY28nvkxbfJiDXU25ZKRrIU=)
2: 2aV3N-zVZuLxH1xgoESnI1WsF2U.roa (hash: kY//omI2YAMe7y/9xDO4ClcNSgGn4TldTCED2msOL0w=)
3: 39MxobbrpAQOtON-sui4Ceno-cQ.roa (hash: N9pxd/h1OsCWGB0hBqC8JheO5FgETKpxzAleviuHpyk=)
4: 5XvdTcJxyA4Pm4_pq9JEbtFKUUI.roa (hash: GwuUh1bHH+3sFVWj2a9pfKD+XUZ4KqBl4+B6GijU6Ls=)
5: B9R7j-0-BgaCSy3boeQLonLKm0k.roa (hash: WH3s6YayhFNQdUbUDmK2H25xLVDh9LZv/S7MHi6F+EQ=)
6: HPL5SSm-juGYaMS6oE3ZODqLcNQ.roa (hash: FXftbE3hkNwaKhmnG5qdVD3or4AxJTzdSUUIBPayFjE=)
7: HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa (hash: OJbfZZsxLOCgQrK35DXHBmPs1yNnWYKSyp7qwV6yc2A=)
8: IEpIdrCrgoruzvNRphWAKjLFvck.roa (hash: 1hcuHiArqaJrsWO8fxvod3HELsUVIN5XphYvjL0kx6I=)
9: P8ZGABCIgKC_ep214wpUbefu2FM.roa (hash: Y4Pa9YGKLB8ROiwx2DGtA5aKxDohmm3YX8gn3D9Lf4U=)
10: Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa (hash: oICV/Rv8Fz6p+4kh6JDj/CQGRipc30QQX+8qXRhhMHw=)
11: SD_VRQTvMC7vuyqV_wFD-fKVUsY.roa (hash: mBhitXOwr6QfmoyB84HxFE/38Mo9fz7gg9e1zxivAvQ=)
12: TQZJDaTm6cQmDPuEOPxapZkCISs.roa (hash: 71cxCfqZNZizAvgCO5BZPTvWQFbmobZzVgCMTpsT5bc=)
13: VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa (hash: HSskmvZRBur17htQDGL9L7zkIxXiCpAQFXJXh8sPXXw=)
14: XZes0nTuYVnyyfrFPRRjs8Jx51Y.roa (hash: 0BBkRTYLYp0bNpkG9KKvJ443VFVkJBIrpGAocXr8JCM=)
15: YtuOvUFMVo09mKrknt-ojMdPYWM.roa (hash: T3A2RIZNQBMqUeBCZdKs7FFJQLtQse8C79U49VQid+I=)
16: ZD4zfJBXtlUtpYCHz7StMH6hulA.roa (hash: c+18Xi5sqUiw5ex0D7d55PJHoiJTJkLgBs1qlEL1OYE=)
17: _7kpaS2UowFnBiDzlZIsC6T4jPU.roa (hash: Uap1nQF5HIXbd/fuDO9f3i3zi5VRkj05CB6xiL5G0NM=)
18: a8TJt2aulUTAwXgy16sRbNyfXr8.roa (hash: tBtH99QMKjJnlGV23+W6NtAMP0SBV9FfAh6GK1v5vA4=)
19: bRY87MFOFRXK_3ijOZHxEiuxCSU.roa (hash: ZoNRVUnVuV1tqZ3OI46I3nsh2LZo1vS0lIAk/gHkBmI=)
20: ej3Rsdg7iZ6dO_YprWJoHaQvuKI.roa (hash: hvD3zqBlyrs1GGJZ6xBTzfTDwo6icPaxgxmp7ExKh8c=)
21: fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa (hash: 5G8k94mJ+piuCkdBnO5V9g3FiuOM9TQAN0h6Zu9iGPI=)
22: iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa (hash: xfy4rZ1pJspjyIzKFNFqMhcKLJ7Q1syk5sZcIn8SuS8=)
23: ibQxcJ8BcsDznHwW8cvvdWCtIaQ.roa (hash: pIty12QAvgK/GvUKpxuo60iKFff8hEDBVoxlkVE06EU=)
24: ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa (hash: mTM6a+O+0K+OAJZ6HZM/A5EVh+VOa0DKYpPbMPy3aoU=)
25: nlW2BhzbrhZqQt_kjdeJrjsFzqg.roa (hash: isLx6NhOWvsktPKmSuP99hPtTj1m+Qrqe7ue+9WegW8=)
26: rmopece1hPnDrxGUQXbePfbuW3g.roa (hash: LzehuaAVFk7vmeksMGf8ccgZKNu8yikV/yTbs25QbhI=)
27: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: A6AziPr7Phyq6ah+rJCNVJoRosSCz482vmVbtmsRiFE=)
28: t3r2cSXLI7fMZi5tra_aZAQyFak.roa (hash: v065bTN3/ayGHNsmj2ZNOgQk8b4xLfobBPDbQcgY5/Q=)
29: x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa (hash: TCunqfbRifiNySN7ycYsI0OCZSixtWJdHstGs7qYQWo=)
30: z0zrbZGTZ0iqKhgiO4o-T6JBleI.roa (hash: ToFqBI4XuElIAABZ+J4JnW1Geuu40xhhzkV2D52WyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:22:bb:8d:ca:35:20:68:2e:fe:6c:99:cb:00:65:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 20 19:00:44 2025 GMT
Not After : Dec 21 19:00:44 2025 GMT
Subject: CN=3cd8fc17d36e724dbe1088e3d3a33e7dc8b4c9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:4b:64:c9:c8:76:2b:59:aa:4a:4c:ef:bf:
d6:2a:1b:8b:83:a6:5d:72:33:04:50:64:70:9b:20:
f4:4e:42:5f:79:5d:2d:2b:b9:d3:4e:66:89:cf:60:
90:bf:d5:2e:d5:12:4e:58:ce:2e:a7:96:70:e4:00:
52:da:08:c4:d8:f3:a2:16:8c:89:04:19:0a:50:91:
a9:d0:09:f1:30:ac:bb:1e:0c:22:8f:de:15:9a:33:
06:e7:72:00:c5:5c:a0:73:06:aa:87:21:07:2b:8e:
d9:aa:ae:ad:4e:f1:c8:5d:c6:18:78:a2:ed:9e:b0:
d6:56:8b:25:41:1b:9e:10:02:9a:71:c6:de:f0:22:
a1:25:03:23:cf:7c:81:3f:c9:ff:f4:5a:17:c6:3f:
d4:ee:6a:c8:46:be:d8:c5:c8:f2:11:16:35:30:d0:
1e:03:5f:93:83:45:e1:81:1f:fe:cb:33:35:a2:ac:
f2:8b:3e:fa:3a:43:f5:dc:7a:83:ab:0d:6f:7a:3f:
60:c8:8d:dd:ee:a2:c6:b2:c5:89:23:dd:78:7e:b9:
44:f1:55:e8:28:82:83:c4:0d:db:2e:01:ea:51:d7:
30:44:c3:2d:10:5a:5b:90:00:49:8f:5c:59:0b:37:
42:64:3b:ef:12:b9:06:49:af:b7:48:bb:6d:af:40:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:FC:17:D3:6E:72:4D:BE:10:88:E3:D3:A3:3E:7D:C8:B4:C9:B1
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7d:f6:eb:39:81:29:6e:5f:e9:55:d8:26:1d:3c:6e:34:5e:
ef:8c:c4:4c:3d:d9:16:26:00:7f:c0:6b:e8:fa:9e:90:e7:59:
a2:61:f7:d2:70:af:01:f4:6b:79:12:b7:2b:14:0c:a8:a4:27:
68:1b:d1:72:df:3d:9c:18:27:8e:28:2f:91:ea:4e:92:ec:67:
be:17:8e:ea:ef:95:72:fc:f3:d1:38:ee:5f:86:21:b2:bd:46:
bd:5e:10:82:b9:cf:e7:01:ed:c3:f1:a3:e3:d5:70:6b:6a:73:
39:45:9d:94:f2:cb:ab:9d:04:b3:30:31:9a:e9:c9:9c:77:6e:
02:d5:65:39:90:a2:da:8b:87:5b:9c:57:c0:85:74:dd:01:20:
ce:e0:fc:a5:c8:03:ed:d3:41:18:2c:bf:ef:a6:28:c4:1d:37:
96:8a:e7:18:b9:24:42:e9:46:fc:fc:d7:f0:5a:bc:d9:a9:79:
75:28:fc:8e:e2:54:30:95:c6:60:48:9e:78:28:20:4c:18:4b:
af:a3:63:c1:87:90:03:f3:b6:84:b8:fc:e2:8b:34:bd:53:40:
10:ea:1e:69:69:97:e0:4e:c2:aa:66:ed:2a:97:f2:3d:65:77:
5e:f8:af:15:ad:7c:4f:47:1c:fd:f7:8e:b5:32:4a:aa:fb:aa:
fc:5d:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:07:43 2025 by rpki-client