This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: +byVdQNNaK1NGK18seNwFKdaUTI7JLbOXKu6OFVHzos=
Subject key identifier: 54:1D:F5:FC:C4:87:C4:4B:D6:A8:87:B9:CA:93:F7:0C:3D:A3:2E:94
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019B3B6B98384E7379A6A384C5D4BCF63D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1789
Signing time: Sat 20 Dec 2025 11:01:05 +0000
Manifest this update: Sat 20 Dec 2025 11:01:05 +0000
Manifest next update: Sun 21 Dec 2025 11:01:05 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: PmcMVquIZqusRDisTNXPJTZFVSWTIIlo73bomWRUifs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:98:38:4e:73:79:a6:a3:84:c5:d4:bc:f6:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Dec 20 11:01:05 2025 GMT
Not After : Dec 21 11:01:05 2025 GMT
Subject: CN=541df5fcc487c44bd6a887b9ca93f70c3da32e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:e5:e6:68:b7:08:b8:9b:07:56:a2:36:6f:
1d:4f:4f:7c:d0:f0:6d:71:7f:bd:26:ee:f3:76:5a:
ce:e9:67:75:29:61:80:38:35:92:52:e1:67:78:d4:
1f:a4:65:11:d1:32:bb:81:77:02:f3:10:64:e0:a4:
1b:ec:87:a3:8f:38:ef:0c:db:e7:77:24:84:99:5b:
80:e9:af:c4:48:55:ad:65:b9:97:d9:9f:1f:22:8f:
38:16:7c:2d:72:92:0d:51:40:8c:3f:a1:ca:f4:30:
e4:a1:61:97:71:13:5f:5e:23:39:bc:04:10:ba:56:
1c:69:6b:17:f2:a7:91:64:c8:0b:72:1d:ef:8b:52:
62:8b:e4:2a:83:ad:36:41:cc:8b:e6:3b:65:c1:34:
e0:33:5f:07:c4:a6:1c:02:bb:a5:68:3a:0b:80:9d:
cd:bf:35:58:ef:e2:1e:ce:5e:02:bd:07:5b:d2:d5:
bc:45:21:3d:cc:a1:51:24:4f:92:54:8c:65:ed:26:
ae:46:38:27:df:93:3b:e5:44:51:5a:7f:b2:9e:dd:
8d:1c:96:0c:9f:e3:db:19:fd:b1:fb:e4:72:09:fa:
35:6c:f4:e6:c6:27:4a:54:55:44:bf:61:6f:d1:7a:
97:17:0b:f2:29:9e:f4:44:7f:f1:16:70:25:da:13:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:F5:FC:C4:87:C4:4B:D6:A8:87:B9:CA:93:F7:0C:3D:A3:2E:94
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:5f:ea:7c:53:48:18:35:27:f9:c4:e3:8d:14:5a:3c:12:
1f:39:19:66:c5:9d:2a:00:1d:bc:86:0a:ea:35:66:65:d3:e8:
59:a7:c2:76:c2:d8:6e:d3:92:06:ad:0d:ab:71:93:04:39:54:
fb:1c:5a:47:35:8a:fa:dd:12:08:15:fe:80:0a:61:3f:cd:81:
31:13:9f:e7:46:17:f2:15:89:ba:ce:a7:39:00:dd:7a:69:a6:
79:f7:80:30:b2:b3:e3:95:0e:a3:2d:90:6a:8c:17:38:ab:aa:
d1:28:40:64:d9:7b:3e:4e:53:fc:b4:13:79:02:fb:04:f6:f4:
98:16:e3:de:7c:10:5a:fa:da:b2:08:b2:e8:0d:99:b5:fb:a4:
4f:6f:b0:58:73:27:37:4d:e9:71:d7:69:98:75:07:15:14:a1:
b9:d3:1d:a6:69:9c:16:cd:bf:20:d4:69:60:cf:45:bd:9d:f0:
04:4b:a8:75:5d:9d:b1:7f:bb:6b:7a:29:48:0c:46:b3:56:9d:
6a:2d:ba:b1:3b:35:71:ed:f3:da:ac:b3:b9:77:5e:aa:1c:07:
d2:d5:d9:96:12:43:7a:41:57:4e:5e:8d:f2:dc:ca:76:e0:96:
89:30:f7:8c:17:2f:fc:48:e2:ac:bc:1f:4a:6c:52:7e:54:d3:
d7:a6:f9:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs7a5g4TnN5pqOExdS89j0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGUyMWIyN2Q2Zjg0ZWJkZDg4OGM2OGU3OWNlNTU1Yzg0
NmRhY2IwHhcNMjUxMjIwMTEwMTA1WhcNMjUxMjIxMTEwMTA1WjAzMTEwLwYDVQQD
Eyg1NDFkZjVmY2M0ODdjNDRiZDZhODg3YjljYTkzZjcwYzNkYTMyZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67/l5mi3CLibB1aiNm8dT0980PBt
cX+9Ju7zdlrO6Wd1KWGAODWSUuFneNQfpGUR0TK7gXcC8xBk4KQb7IejjzjvDNvn
dySEmVuA6a/ESFWtZbmX2Z8fIo84FnwtcpINUUCMP6HK9DDkoWGXcRNfXiM5vAQQ
ulYcaWsX8qeRZMgLch3vi1Jii+Qqg602QcyL5jtlwTTgM18HxKYcArulaDoLgJ3N
vzVY7+Iezl4CvQdb0tW8RSE9zKFRJE+SVIxl7SauRjgn35M75URRWn+ynt2NHJYM
n+PbGf2x++RyCfo1bPTmxidKVFVEv2Fv0XqXFwvyKZ70RH/xFnAl2hOj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQd9fzEh8RL1qiHucqT9ww9oy6UMB8GA1UdIwQY
MBaAFLxOIbJ9b4Tr3YiMaOec5VXIRtrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUt
ODNlNzNjYjI1ZWE1LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUtODNlNzNjYjI1ZWE1
LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnRf6nxT
SBg1J/nE440UWjwSHzkZZsWdKgAdvIYK6jVmZdPoWafCdsLYbtOSBq0Nq3GTBDlU
+xxaRzWK+t0SCBX+gAphP82BMROf50YX8hWJus6nOQDdemmmefeAMLKz45UOoy2Q
aowXOKuq0ShAZNl7Pk5T/LQTeQL7BPb0mBbj3nwQWvrasgiy6A2ZtfukT2+wWHMn
N03pcddpmHUHFRShudMdpmmcFs2/INRpYM9FvZ3wBEuodV2dsX+7a3opSAxGs1ad
ai26sTs1ce3z2qyzuXdeqhwH0tXZlhJDekFXTl6N8tzKduCWiTD3jBcv/EjirLwf
SmxSflTT16b5sg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 15:59:35 2025 by rpki-client