This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier: 9/5J1bcLaiXfFV+9JSpHegsfgMcPRJP1l9+CZfs89FA=
Subject key identifier: B2:CA:46:FC:83:D2:61:4E:59:4F:C7:61:6E:BC:35:C6:69:4F:61:CC
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial: 019B330D076022E74CA5159655058C4A724E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number: 0573
Signing time: Thu 18 Dec 2025 20:00:50 +0000
Manifest this update: Thu 18 Dec 2025 20:00:50 +0000
Manifest next update: Fri 19 Dec 2025 20:00:50 +0000
Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: I5KEZveyHWOANOIAKLAMw+K9y3Jzc+9Vhozv440us34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:33:0d:07:60:22:e7:4c:a5:15:96:55:05:8c:4a:72:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Validity
Not Before: Dec 18 20:00:50 2025 GMT
Not After : Dec 19 20:00:50 2025 GMT
Subject: CN=b2ca46fc83d2614e594fc7616ebc35c6694f61cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:f7:1d:22:63:10:25:2f:42:a9:99:b8:f1:
a0:23:ae:52:34:2a:ec:81:bf:e2:60:60:5a:6f:b2:
75:98:29:a5:ac:69:a7:80:b7:92:4d:1b:e1:49:ff:
9a:75:ac:10:68:a9:12:00:73:b9:09:40:c3:bd:8e:
95:34:9f:c7:8f:07:ed:2c:ac:c7:be:9a:21:b4:2e:
20:dd:21:73:0a:5c:e5:02:fc:58:83:60:d5:39:2a:
df:48:e1:9c:c2:91:a2:91:3c:14:7c:77:a9:1a:2a:
d7:c7:06:b3:f0:41:d7:16:67:98:8c:06:e7:a6:23:
05:b9:da:b7:56:bc:81:07:c9:19:93:2f:09:98:be:
cb:6e:be:1f:51:dc:3e:ca:57:d3:60:99:f1:69:83:
66:65:68:a8:2b:3c:35:70:24:1c:98:0b:6b:86:67:
5a:b3:82:1d:60:c3:f7:90:3b:51:d7:8c:6d:8b:6f:
df:cf:b5:c8:9f:60:4c:c7:e5:df:5d:33:09:e7:3f:
a1:af:d2:83:67:59:31:c5:97:2c:f4:96:a7:98:be:
58:95:03:11:03:69:79:54:f4:2e:d4:9c:e2:80:db:
32:09:83:b3:89:42:3e:96:c9:f0:47:72:15:66:99:
d9:9c:a6:9e:63:e9:06:a6:d4:f9:10:67:3f:6c:e1:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CA:46:FC:83:D2:61:4E:59:4F:C7:61:6E:BC:35:C6:69:4F:61:CC
X509v3 Authority Key Identifier:
keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:6c:2a:08:94:20:03:27:11:bd:54:4a:66:27:3e:a5:29:
23:d9:d1:36:79:26:44:0e:42:a9:31:ad:6d:84:87:36:e9:a4:
2f:53:28:5c:4d:c0:82:6c:01:f2:f5:25:af:df:cb:d9:c5:3a:
f1:7f:28:c3:53:73:87:86:9a:9f:f8:54:5e:03:71:a9:c2:45:
59:c2:6e:85:36:c8:98:8f:2b:4c:43:a7:25:22:fb:0a:67:73:
ed:9a:20:9c:79:8e:df:72:fd:05:49:68:aa:9e:c5:e6:eb:9c:
f0:ac:b1:a0:21:37:8f:2d:0a:86:22:5a:29:4f:43:78:2e:bf:
15:9d:83:c3:d3:14:46:72:b4:89:eb:ca:95:c9:db:fd:9a:5f:
7a:a9:eb:b6:7b:5a:dc:18:13:d9:6e:ec:41:4a:24:60:d9:9a:
db:49:6f:12:55:16:53:44:54:53:58:47:16:48:1e:e7:a0:1f:
af:48:6f:82:31:89:69:81:0c:64:b6:20:6a:1d:81:56:90:56:
7f:59:c5:12:e8:30:51:5c:17:30:11:89:2f:0f:91:81:aa:69:
46:63:22:33:c3:6a:8e:8c:13:92:d4:8c:5c:7b:5b:0e:4f:21:
d3:10:06:48:1b:82:4a:cc:54:95:97:a6:6b:6b:5b:c7:c3:92:
c5:67:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:23:10 2025 by rpki-client