This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier: VQPAHVpi3g1VgDLzhcIFGdfHS82U+TaR/7TCrZgMLeY=
Subject key identifier: A2:92:D7:1C:F9:F9:F0:D4:2A:57:2B:34:B4:EB:C1:6C:46:12:2C:A6
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 019B37579A63609472F405B99B1FD72EC19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number: 0D94
Signing time: Fri 19 Dec 2025 16:00:46 +0000
Manifest this update: Fri 19 Dec 2025 16:00:46 +0000
Manifest next update: Sat 20 Dec 2025 16:00:46 +0000
Files and hashes: 1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: b4yreSHxGYYEOXjZmwMgf1KDmMRubb/qp3iK+0osPUM=)
5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:57:9a:63:60:94:72:f4:05:b9:9b:1f:d7:2e:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Dec 19 16:00:46 2025 GMT
Not After : Dec 20 16:00:46 2025 GMT
Subject: CN=a292d71cf9f9f0d42a572b34b4ebc16c46122ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:bb:b9:45:de:52:c4:28:5c:90:2a:14:db:
ea:31:89:5c:6b:7f:c1:44:f1:18:ab:61:fc:71:8a:
f3:8b:8a:47:81:ae:e8:07:27:d4:80:49:63:b7:a3:
a4:57:cd:15:1d:ce:8b:9c:c8:31:0d:79:ca:c4:51:
19:03:a5:ef:e3:a8:7f:f9:21:59:d9:5d:46:f1:f0:
2b:f4:da:b1:13:43:5a:85:3c:6f:a4:c3:cc:93:2c:
c9:1b:0e:e1:36:97:e4:67:91:17:f4:90:c4:55:91:
ec:d3:99:ee:38:b6:97:29:75:42:8f:1a:85:6d:80:
d1:dd:fa:d9:f5:29:fd:2c:23:01:ee:cc:63:35:d8:
28:72:5c:d9:e3:c3:a1:10:b4:66:25:97:3d:1d:fb:
23:2c:fb:eb:e7:23:d6:44:00:b7:10:57:95:7d:66:
c9:05:18:4f:c4:87:bd:0b:54:e6:b7:a1:3d:1b:89:
35:d4:50:2f:1f:ef:a9:a8:d4:df:21:9e:0a:00:85:
e3:d1:f8:6c:7f:06:21:31:57:da:44:3a:ab:77:11:
07:9c:93:92:70:7e:9b:59:07:94:0f:fe:c3:62:a8:
14:4c:f9:e3:17:33:47:3f:66:c9:79:17:e6:ed:7c:
e3:ad:17:fa:36:36:8a:5f:8f:18:99:f6:35:1b:9a:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:D7:1C:F9:F9:F0:D4:2A:57:2B:34:B4:EB:C1:6C:46:12:2C:A6
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:09:91:5a:7f:f4:2f:13:66:38:bf:03:be:46:7c:f5:fa:
30:f2:fa:c4:5c:4a:38:bb:6b:08:00:52:5a:d8:7c:aa:65:4a:
22:e8:67:2f:35:89:49:05:9f:35:99:c8:73:e3:6b:17:e4:fb:
b9:a4:17:c3:39:04:a5:e4:75:30:82:1f:e2:85:e4:93:99:a3:
0b:b3:b9:d2:c4:f5:d0:e9:33:59:0a:19:18:1a:ea:d0:c9:7a:
59:5a:2e:99:3f:48:ea:41:17:ec:77:53:ba:2d:d1:54:cb:51:
25:0f:05:61:30:57:db:59:b8:4f:fc:04:cf:9c:fc:52:ec:ab:
67:bb:2c:12:03:c5:12:ec:21:d2:7a:fb:33:a2:cc:50:49:30:
d2:c3:ff:96:2e:9d:b9:61:54:69:0e:c7:62:02:98:db:a4:83:
a3:ee:2c:48:87:66:12:27:bd:85:97:05:6b:4b:f2:5c:e2:62:
8d:2b:17:27:96:c6:e5:03:0e:bb:da:83:84:2c:c1:87:b7:a3:
69:e5:a7:9b:93:e1:51:a1:57:5f:68:ed:0a:9f:d3:93:57:60:
aa:c4:3a:a5:a2:3e:8d:63:f4:66:4c:92:ca:d7:fa:d6:25:21:
58:f4:58:39:a3:6f:c7:e8:4b:ec:0d:0d:96:f5:aa:a7:92:9c:
bd:0f:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:25:00 2025 by rpki-client