This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: Cdhl28Qh6vckobLJqePfbi6uDXSoJ2Fknkw5XT/ZLgI=
Subject key identifier: 28:EB:EF:BD:30:72:B1:C9:3F:D9:31:85:0A:8E:01:A2:76:F9:E1:37
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019B3F11810936E826BEDBAE6FFB91C17051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1793
Signing time: Sun 21 Dec 2025 04:01:10 +0000
Manifest this update: Sun 21 Dec 2025 04:01:10 +0000
Manifest next update: Mon 22 Dec 2025 04:01:10 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 13fsdNbOXAchalOwmEbNfHfqCJc.roa (hash: 621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: MKgrynJDniiZmFm2+sEcllqi+rVGWPtVsSLQ1AAJ6Aw=)
4: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=)
5: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: lHui1rAjQ_Q4r1wxIGuetVb48BI.roa (hash: RlNAJsl93PkyN71SoGN3JUD37RzQ/2tniVsKOLkpsMU=)
10: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:11:81:09:36:e8:26:be:db:ae:6f:fb:91:c1:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Dec 21 04:01:10 2025 GMT
Not After : Dec 22 04:01:10 2025 GMT
Subject: CN=28ebefbd3072b1c93fd931850a8e01a276f9e137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:8f:43:0b:ee:24:3d:72:15:61:79:3e:f4:
e5:98:23:8e:d7:bd:c9:9b:51:95:be:27:a3:2d:e7:
8a:0d:4e:bf:32:f3:f6:3b:cd:3e:68:1c:a4:56:56:
63:fa:47:5a:9c:bc:a8:09:28:c2:fc:46:4e:96:cc:
e1:bd:58:b7:61:31:c6:ed:9b:55:e2:5a:08:fd:78:
98:be:43:bf:0d:5d:ff:83:59:ff:93:f6:b4:8d:eb:
b7:2a:b7:ad:a8:f8:f4:20:b2:cc:25:98:f0:a1:fe:
6e:5b:1a:23:80:33:f3:db:3e:4d:fb:b7:13:65:67:
23:92:c7:51:1e:c7:1d:58:16:63:13:ef:ae:c3:f9:
a8:7e:22:de:7f:a4:ec:f7:e0:e8:58:61:ea:d6:6b:
50:10:dc:d2:e5:ab:b9:35:8e:be:38:cc:01:87:6e:
1e:69:f1:9a:a0:52:e6:3b:74:d0:6a:7d:6a:10:75:
d5:e2:6c:4b:4d:f9:11:1c:98:dd:69:a9:01:84:78:
11:40:60:90:6c:80:6a:cd:e8:82:f3:6c:33:0b:5c:
b5:f7:2f:a6:46:84:ba:b1:b1:70:3b:6c:e8:35:5d:
58:8d:c4:66:62:18:2c:95:00:0c:ae:1e:61:3f:42:
57:76:c4:7c:b5:3c:9b:84:62:1b:8b:d4:b4:a7:ee:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:EF:BD:30:72:B1:C9:3F:D9:31:85:0A:8E:01:A2:76:F9:E1:37
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5d:7f:2e:7f:5e:99:cb:e1:73:d1:1d:90:1c:c0:af:39:ac:
10:6d:00:77:b1:57:81:07:96:01:c5:e7:94:7b:18:28:e7:ee:
ba:32:42:70:d7:25:2b:8e:fa:e7:85:22:6c:43:2b:f5:74:83:
64:7f:71:8e:a1:db:93:6d:05:84:d0:eb:ca:7b:b3:b7:31:00:
b5:87:78:ad:d2:e6:ee:d3:3e:88:d5:77:b1:26:3e:8a:be:d8:
1e:e7:55:14:6a:06:4f:17:ac:82:f7:8a:05:1c:2d:3c:71:94:
ff:55:7d:3d:d3:c0:6c:0d:ad:30:7f:cb:95:0d:14:8c:31:f0:
9a:26:b8:b5:de:aa:01:e4:11:82:55:66:4f:32:7c:c7:4c:ba:
3e:02:47:f9:80:0c:a3:10:ff:10:80:b5:6b:35:cf:a6:f6:1f:
f8:18:83:85:47:95:cb:98:10:4d:4d:b6:2e:51:9f:97:44:db:
c9:af:8a:5c:9e:9d:cb:11:6d:79:b4:66:ee:1c:ac:46:54:2b:
ce:fd:f1:40:ea:73:e5:5a:1d:d2:7d:f5:c5:20:2e:68:bb:4d:
73:d0:ad:0d:53:fd:40:b2:a4:df:53:ac:c0:c2:15:3a:38:95:
f0:58:6e:f6:17:a2:92:04:a4:38:0f:c2:f1:1d:ce:4d:cc:e6:
5e:9e:85:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/EYEJNugmvtuub/uRwXBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjUxMjIxMDQwMTEwWhcNMjUxMjIyMDQwMTEwWjAzMTEwLwYDVQQD
EygyOGViZWZiZDMwNzJiMWM5M2ZkOTMxODUwYThlMDFhMjc2ZjllMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlGPQwvuJD1yFWF5PvTlmCOO173J
m1GVviejLeeKDU6/MvP2O80+aBykVlZj+kdanLyoCSjC/EZOlszhvVi3YTHG7ZtV
4loI/XiYvkO/DV3/g1n/k/a0jeu3KretqPj0ILLMJZjwof5uWxojgDPz2z5N+7cT
ZWcjksdRHscdWBZjE++uw/mofiLef6Ts9+DoWGHq1mtQENzS5au5NY6+OMwBh24e
afGaoFLmO3TQan1qEHXV4mxLTfkRHJjdaakBhHgRQGCQbIBqzeiC82wzC1y19y+m
RoS6sbFwO2zoNV1YjcRmYhgslQAMrh5hP0JXdsR8tTybhGIbi9S0p+7VDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjr770wcrHJP9kxhQqOAaJ2+eE3MB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABF1/Ln9e
mcvhc9EdkBzArzmsEG0Ad7FXgQeWAcXnlHsYKOfuujJCcNclK47654UibEMr9XSD
ZH9xjqHbk20FhNDrynuztzEAtYd4rdLm7tM+iNV3sSY+ir7YHudVFGoGTxesgveK
BRwtPHGU/1V9PdPAbA2tMH/LlQ0UjDHwmia4td6qAeQRglVmTzJ8x0y6PgJH+YAM
oxD/EIC1azXPpvYf+BiDhUeVy5gQTU22LlGfl0Tbya+KXJ6dyxFtebRm7hysRlQr
zv3xQOpz5Vod0n31xSAuaLtNc9CtDVP9QLKk31OswMIVOjiV8Fhu9heikgSkOA/C
8R3OTczmXp6F5A==
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:07:30 2025 by rpki-client